Maltashopper Limited (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Data Protection Act (Chapter 586 of the Laws of Malta).
This Privacy Policy informs you how we collect, process, and safeguard your personal data when you visit www.maltashopperlimited.com and purchase goods from us.
- Data Controller Identification
For the purposes of applicable data protection legislation, the Data Controller responsible for your personal data is:
- Company Name: Maltashopper Limited
- Company Registration Number: C53942-MT2051 1424
- Registered Office Address: 162 Triq il-Kanun, Santa Venera SVR 9034, Malta
- Telephone Number: +356 20334532
- Primary Email Contact: benefit@maltashopperlimited.com
- Official Website: www.maltashopperlimited.com
- Personal Data We Collect
We process personal data provided directly by you during order placement and communication:
- Identity Data: First name, last name, and title.
- Contact Data: Billing address, delivery address, email address, and telephone number.
- Financial Data: Payment details, processed directly and securely by our designated payment processor.
- Transaction Data: Records of orders, products purchased, and customer communication history.
- Legal Grounds and Purposes of Processing
We process personal data strictly under lawful bases defined by the GDPR:
- Performance of a Contract: Processing necessary to fulfil orders, process payments, and manage product delivery within European territories.
- Legal Obligation: Compliance with statutory accounting, tax, and commercial legislation applicable in Malta and the European Union.
- Legitimate Interests: Operations related to administrative efficiency, customer support management, and necessary internal record-keeping.
- Payment Processing with Stripe
To facilitate payment transactions, we engage secure third-party payment service infrastructure.
Payment transactions executed on this website are processed directly by Stripe Payments Europe, Ltd. (“Stripe”). Your financial information (such as credit or debit card details) is collected and processed directly by Stripe under their privacy protocols and PCI-DSS compliance standards. We do not store full payment card numbers or sensitive financial authentication details on our internal servers. Stripe processes personal data to execute transactions, manage fraud prevention controls, and fulfil regulatory financial obligations.
- Data Retention Periods
We retain personal data only for as long as necessary to satisfy the specific purposes for which it was collected:
- Transactional & Accounting Records: Retained for up to 10 years from the date of the commercial transaction, to comply with corporate tax laws and commercial accounting obligations under Maltese statutory requirements.
- Customer Support Enquiries: Retained for up to 2 years following the resolution of the enquiry to maintain operational consistency and customer service tracking.
- General Personal Data: Retained for the duration required to complete order fulfilment or fulfil governing legal obligations.
Upon expiry of the applicable retention period, personal data is permanently deleted or anonymised.
- Data Transfers and Territorial Limitations
Maltashopper Limited provides goods exclusively to customers located within European territories. Personal data processed directly by us is maintained within the European Economic Area (EEA). Where third-party service providers (such as payment infrastructure providers) process data under international frameworks, appropriate safeguards—such as Standard Contractual Clauses (SCCs) approved by the European Commission—are enforced.
- Your Statutory Data Protection Rights
Under European data protection laws, you possess the following rights regarding your personal data:
- Right of Access: Request access to or copies of your personal data processed by us.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data, subject to statutory tax and legal record-keeping requirements.
- Right to Restrict Processing: Request the restriction or suspension of personal data processing under specific statutory conditions.
- Right to Data Portability: Request the transfer of your personal data to another controller where technically feasible.
To exercise any of these rights, please contact our administrative team at benefit@maltashopperlimited.com. You also retain the statutory right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta.
- Technical Measures & Contact Enquiries
We apply appropriate operational and technical safeguards to protect personal data against unauthorized access, alteration, or disclosure. For questions regarding this Privacy Policy or our data protection practices, please submit your request in writing to our registered office address or via email at benefit@maltashopperlimited.com.