Yield & Grain Yield & Grain
  • Services
  • Work
  • About
  • Blog
  • Contact
Book a Call
← Back Legal

Privacy Policy

Last updated: May 2026

This Privacy Policy explains how Yield & Grain, operated by Gianni Zarb ("Yield & Grain", "we", "us", or "our"), collects, uses, stores, and protects personal information obtained through our website, communications, and client portal.

We are committed to respecting your privacy and handling your personal data responsibly and in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the laws of Malta.

By using our website, submitting an enquiry, engaging our services, or accessing our client portal, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We collect personal information only where it is voluntarily provided by you or otherwise necessary for the delivery of our services.

The types of information we may collect include:

  • Full name;
  • Email address;
  • Telephone number;
  • Business or company information;
  • Project details, requirements, and correspondence;
  • Budget information;
  • Billing and invoicing details;
  • Files, assets, content, or materials uploaded to the client portal; and
  • Any other information you choose to provide during communications with us.

We may also collect limited technical information necessary for the operation and security of our website and client portal, such as:

  • IP address;
  • Browser type;
  • Device information; and
  • Basic server logs.

We do not use cookies or tracking technologies for behavioural advertising or invasive analytics purposes beyond what is reasonably necessary for website functionality, security, and performance.

2. How We Use Your Information

We use personal information solely for legitimate business purposes connected with our services.

Your information may be used to:

  • Respond to enquiries and communications;
  • Discuss potential projects and service requirements;
  • Prepare quotations, proposals, or agreements;
  • Deliver creative and digital services;
  • Provide access to project deliverables through the client portal;
  • Manage invoices and payments;
  • Maintain project records and communications;
  • Improve website functionality and user experience; and
  • Comply with legal or regulatory obligations.

We do not:

  • Sell personal information;
  • Rent personal information to third parties;
  • Use personal information for unsolicited marketing; or
  • Add individuals to mailing lists without explicit consent.

3. Legal Basis for Processing

Where applicable under the GDPR, we process personal data on one or more of the following legal bases:

  • Performance of a contract or steps requested prior to entering into a contract;
  • Compliance with legal obligations;
  • Legitimate business interests, including communication and service delivery; and/or
  • Consent, where consent is specifically required.

Where processing is based on consent, you may withdraw that consent at any time.

4. Client Portal & File Delivery

Project deliverables may be provided through the Yield & Grain client portal or another secure delivery platform.

Clients are responsible for downloading and securely storing all files within the communicated access or download period ("Download Window").

Files hosted on the portal are retained only for the period communicated to the Client. After expiry of the Download Window:

  • Files may be permanently deleted;
  • Access may no longer be available; and
  • Yield & Grain is under no obligation to retain archival copies.

We strongly recommend that all deliverables be downloaded and backed up immediately upon receipt.

Yield & Grain accepts no liability for loss of access to files resulting from the Client's failure to download or back up deliverables within the communicated timeframe.

5. Data Storage & Retention

We take reasonable and appropriate measures to securely store and protect personal information against unauthorised access, misuse, disclosure, alteration, or destruction.

Personal data is retained only for as long as reasonably necessary to:

  • Respond to enquiries;
  • Deliver services;
  • Maintain business and accounting records;
  • Resolve disputes; or
  • Comply with legal, tax, or regulatory obligations.

When personal information is no longer required, we will take reasonable steps to securely delete or anonymise it.

6. Sharing of Information

We do not sell or commercially disclose personal information.

However, we may share limited information with trusted third-party service providers where reasonably necessary for the operation of our business and delivery of services, including:

  • Website hosting providers;
  • Cloud storage services;
  • Project management platforms;
  • Communication tools;
  • Payment processors; and
  • File delivery or client portal systems.

These third-party providers are selected based on reliability, operational necessity, and appropriate data protection standards.

We may also disclose information where required by law, court order, or regulatory authority.

7. Third-Party Services & External Links

Our website or client portal may contain links to third-party websites, services, or platforms.

Yield & Grain is not responsible for the privacy practices, security measures, or content of external websites or third-party services not operated by us.

Users are encouraged to review the privacy policies of any third-party services they access.

8. International Data Transfers

Some third-party providers used by Yield & Grain may process or store data outside Malta or the European Economic Area ("EEA").

Where such transfers occur, we take reasonable steps to ensure that appropriate safeguards are in place in accordance with applicable data protection laws.

9. Minors

Yield & Grain may work with start-ups, organisations, or projects involving individuals under the age of eighteen (18).

Where we become aware that an individual engaging with us is under eighteen (18), we may require the involvement or authorisation of a parent, guardian, or authorised adult representative.

We do not knowingly collect personal data directly from children under the age of sixteen (16) without verifiable parental or guardian consent.

If you believe that personal information relating to a child has been provided to us without appropriate consent, please contact us immediately so that we may take appropriate action.

10. Your Rights

Subject to applicable law, you may have the right to:

  • Request access to the personal data we hold about you;
  • Request correction of inaccurate or incomplete information;
  • Request deletion of your personal data;
  • Restrict or object to certain processing activities;
  • Withdraw consent where processing is based on consent;
  • Request transfer of your data where applicable; and
  • Lodge a complaint with the relevant supervisory authority.

Requests relating to personal data may be submitted to:
Email: hello@yield-and-grain.com

We will respond within the timeframe required by applicable law.

11. Data Security

We implement reasonable technical and organisational measures to protect personal information.

However, no method of electronic transmission or online storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Users are encouraged to:

  • Use secure passwords;
  • Protect access credentials;
  • Download and back up deliverables promptly; and
  • Notify us immediately of any suspected unauthorised access.

12. Changes to This Privacy Policy

Yield & Grain reserves the right to update or amend this Privacy Policy at any time.

Any updates shall become effective upon publication on our website or client portal.

The "Last updated" date at the top of this document reflects the latest revision.

Continued use of our services or website following publication of changes constitutes acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:

Gianni Zarb
Yield & Grain
Email: hello@yield-and-grain.com

© 2026 Yield & Grain. All rights reserved.

Let's work together

Got a project?
Let's talk.

Book Discovery Call → hello@yield-and-grain.com
Yield & Grain Yield & Grain

I'm an independent creative based in Gozo & Malta.
Photography, design, web & marketing.

Available for new projects

Navigation

  • Services
  • Work
  • About
  • Blog
  • Contact

Services

  • Brand & Identity
  • Web & Digital
  • Photography & Film
  • Marketing & Growth
  • Events & Occasions

Connect

  • Facebook ↗
  • Instagram ↗
  • WhatsApp ↗

© 2026 Yield & Grain. All rights reserved.

Based in Gozo & Malta · Working worldwide

Client Login Staff Login Privacy Policy Terms