Privacy

Your details.
A defined purpose.

This notice explains how DigiSteer Ltd handles information from this website and its migration assessment form. Updated 14 October 2026.

Who is responsible

DigiSteer Ltd is the controller for migration enquiries submitted through dotcmstowordpress.com. Contact the DigiSteer team at info@digisteer.me, or write to DigiSteer Ltd, 1 triq Falzun c/w Naxxar Road, Birkirkara, Malta.

Information you provide

The form collects your name, email address, organisation and website if supplied, selected migration areas and your message. It also records the submission time and the version of the privacy notice acknowledged. Do not include credentials, access keys, sensitive personal data or confidential documents.

Free resources

The readiness checklist is available without registration. To request the URL mapping template, we collect your first name and email address (required), and your last name and company if supplied. We provide an immediate download and send a transactional email with a link valid for seven days. We use these details only to fulfil your resource request and operate the delivery service, based on Article 6(1)(b) of the GDPR; abuse prevention relies on legitimate interests. Requesting a resource does not subscribe you to a newsletter or trigger automated sales messages.

Resource requests are stored in a separate private inbox accessible to administrators and notified to the designated DigiSteer mailbox. They are scheduled to leave the active inbox after 30 days, subject to WordPress scheduled-task execution, and then enter recoverable Trash, normally cleared after another 30 days. Delivery emails and hosting backups are handled separately. Download links contain random tokens, without names or email addresses; the tokens expire after seven days.

Why we use it

We use your details to review and respond to your enquiry and, where requested, discuss a potential project. Processing for steps you request before a contract is based on Article 6(1)(b) of the GDPR. Handling ordinary business correspondence and protecting the form from abuse relies on our legitimate interests under Article 6(1)(f). The required checkbox acknowledges this notice; it does not subscribe you to marketing.

Storage and access

Enquiries are stored in a private WordPress inbox accessible to site administrators. An email notification is sent to the DigiSteer team’s designated enquiry mailbox. Netsons provides the website hosting; our business email provider handles correspondence. We do not sell enquiry data or publish it on the site.

The website inbox schedules enquiries for removal from the active inbox after 90 days, subject to WordPress scheduled-task execution. They then enter WordPress Trash, normally cleared after 30 days. Email correspondence and any project records are retained only as needed to respond, deliver an agreed engagement or meet applicable obligations. Hosting backups can contain earlier copies until their scheduled expiry. Enquiries that become projects may need a separate retention period.

Visits and abuse prevention

The hosting service may record access and security logs, including IP address, requested URL and time. The form applies a temporary request limit using a keyed hash of the connecting IP address; the limiter expires after 15 minutes. The enquiry record does not include that IP address. We use local validation and a hidden spam-detection field, without sending the form to an external CAPTCHA service.

Cookies and third-party features

With your permission, we use Google Analytics 4 through Google Tag Manager to understand visits, traffic sources and interactions with migration information, the scope planner, downloads, resource requests and the assessment form. The legal basis for this optional measurement is your consent under Article 6(1)(a) of the GDPR. Google tags load only after analytics consent. We do not enable advertising cookies, Google Signals or advertising personalisation. Names, email addresses, last names, organisation names, website addresses and message text entered in either form are not sent to Analytics. Measurement covers consenting visits and can be limited by browser blocking.

Google processes analytics data on our behalf under its data-processing terms. Its services can involve processing outside the EEA under applicable transfer safeguards, including adequacy decisions where applicable and contractual safeguards. See Google’s privacy policy and data-processing terms. Event-level analytics retention is configured to two months; aggregated reports can remain available longer. CookieYes stores your consent preference locally. You can withdraw analytics consent using the consent controls on every page without affecting your ability to submit an enquiry. See the cookie notice for cookie details.

Your choices and rights

Providing the required form fields is necessary to respond through the form. You may contact us by email instead. Depending on the circumstances, you can request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. Send requests to info@digisteer.me. You may also complain to Malta’s Information and Data Protection Commissioner, or your competent supervisory authority.

Changes to this notice

We will update this notice if the site’s data handling changes. New analytics, marketing or external services require a corresponding review before they are enabled.