Privacy Statement

Last updated: August 2026

This Privacy Statement explains how Dr. Formiga (“we”, “us”, “our”) collects and processes your personal data when you visit this website and request information about weight-loss treatment. We process personal data in line with the EU General Data Protection Regulation (GDPR) and applicable Maltese data protection law.

1. Who we are (Data Controller)

Dr. Formiga — Bariatric Surgery, operating at:

Saint James Hospital – Tal-Barrani, 3 Triq Tal-Ħotba, Iż-Żejtun ŻTN 9090, Malta
Saint James (Capua) Hospital, George Borg Olivier Street, Sliema SLM 1807, Malta

Contact for privacy matters: [email address] · [phone number]

2. What personal data we collect

Information you give us through our assessment form: your name, contact details (email and/or phone), and the answers you choose to share about your weight, health and medical history.
Technical & usage data: IP address, device and browser type, the pages you view and how you interact with them — collected through cookies and similar technologies (see our Cookie Statement).

Health information is a special category of personal data. We only process it with your explicit consent, and solely to assess whether treatment may be suitable for you.

3. Why we use it and our legal basis

To assess your eligibility and contact you about treatment — legal basis: your consent and steps taken at your request prior to a possible care relationship.
To measure and improve our advertising (Meta Pixel) — legal basis: your consent, given via the cookie banner.
To operate, secure and improve the website — legal basis: our legitimate interest.

4. Meta Pixel

We use the Meta (Facebook) Pixel to measure how well our advertising performs and to show relevant ads. When you accept marketing cookies, the Pixel places cookies and sends data about your interactions (such as page views and clicks) to Meta Platforms Ireland Ltd. This may involve a transfer of data outside the EU/EEA under appropriate safeguards. You can withdraw your consent at any time — see our Cookie Statement.

5. Google Analytics

We do not currently use Google Analytics. If this changes, we will update this statement and analytics cookies will only be placed with your consent.

6. Who we share data with

We use trusted service providers ("processors") who act on our instructions:

Typeform — hosts and processes the assessment form you submit.
Meta Platforms Ireland Ltd. — advertising measurement, only with your consent.
Our hosting provider — serves this website.

We do not sell your personal data.

7. How long we keep your data

We keep your data only for as long as necessary: enquiry and assessment data for [e.g. 24 months] or as required to provide care and to meet legal and medical-record obligations; advertising data is retained according to Meta’s own retention periods. [Confirm exact periods.]

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, to data portability, and to withdraw your consent at any time. You also have the right to lodge a complaint with the Maltese supervisory authority, the Information and Data Protection Commissioner (IDPC) — idpc.org.mt. To exercise your rights, contact us at [email address].

9. Changes to this statement

We may update this statement from time to time. The date at the top shows when it was last revised.

This statement is provided for general information and is not legal advice. Please have it reviewed by a qualified professional and complete the highlighted details before publishing.