Privacy Policy for Natural Cosmetics.mt

At Natural Cosmetics.mt, we are committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, and safeguard your personal information when you visit our website naturalcosmetics.mt and make purchases from our cosmetic products online store. By using our website and services, you consent to the practices described in this policy.

Definitions

‘Personal Data’ refers to any information relating to an identified or identifiable natural person. This includes any identifiable material relating to their physical, physiological, mental, economic, cultural or social identity and includes but is not limited to physical files, identification numbers, location data and images or records of individuals.

‘Processing’ is used to refer to any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

‘Controller’ refers to the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

‘Processor’ refers to a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

‘Third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

‘Personal data breach’ means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

1. Data Controller

Natural Cosmetics.mt is a business name used by the sole trader duly registered in Malta.

The Data Controller is Ioannis Loukeris. If you have any questions about how we process your personal data, please email us at support@naturalcosmetics.mt.

Our postal address is 172, Triq Patri Guze Delia, Mosta, MST 1470, Malta

2. What Information Do We Process?

We only process the personal data you provide us with, in particular:

• Postal address, name, surname and mobile number when you create an account with our website or purchase a product
• Username of account holders
• Email address if you subscribe to our newsletter

We limit the amount and type of personal information that we collect to that which is necessary for the purposes for which we are collecting it.

Unless otherwise indicated, our website is not directed toward children. The products that we offer for sale on our website and mobile app are intended for purchase by adults only. We do not intentionally collect any personal information from children.

3. How We Use Your Information

We process your personal data for the following purposes:

• To process orders and deliver products you have purchased.
• To respond to your queries and/or complaints.
• To manage your account and provide customer support.
• To improve our website and services based on usage data.
• To send marketing communications (with your consent) regarding new products, promotions, and offers. You can opt-out of marketing communications at any time by clicking the unsubscribe link or contacting us directly.
• To comply with legal obligations (e.g., tax regulations, product safety compliance).

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: To fulfill orders, process payments, and provide customer service.
• Consent: For marketing communications (you may withdraw consent at any time).
• Legitimate Interests: To improve our website and services, prevent fraud, and enhance user experience.
• Compliance with Legal Obligations: For compliance with laws, such as tax and product safety regulations.

5. Sharing Your Data

We do not sell or rent your personal data. However, we may share your information with trusted third parties for the following purposes:

• Payment processors (Stripe) to process payments securely.
• Delivery couriers to deliver orders.
• Website hosting, marketing and emailing services that assist in operating our online business.
• Legal authorities if required by law or to protect our rights and safety.

These third parties are required to handle your data in accordance with the Data Protection Act (Chapter 586 of the Laws of Malta), the GDPR, and any other relevant data protection legislation, as may be applicable from time to time.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy. For example, your order information may be kept for tax and accounting purposes for a minimum of 10 years, marketing data may be retained until you withdraw consent and information.

If you do not log in into your account for a period of three years, the account will be considered inactive and we will delete the account as well as all the personal data related to that account except order information.

7. Your Rights Under GDPR

As a resident of the EU, you have the following rights regarding your personal data:

• Right to Access: You can request access to the personal data we hold about you.
• Right to Rectification: You can request corrections or updates to inaccurate or incomplete information.
• Right to Erasure: You can request the deletion of your personal data, subject to certain conditions.
• Right to Restrict Processing: You can request that we limit the processing of your data under specific circumstances.
• Right to Data Portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to the processing of your data for marketing or other specific purposes.
• Right to Withdraw Consent: You can withdraw your consent for data processing activities based on consent at any time.

To exercise these rights, please contact us at support@naturalcosmetics.mt.

8. Cookies and Tracking Technologies

As is common practice with almost all professional websites this site uses cookies, which are tiny files that are stored in your computer, to improve your experience.

You can prevent the setting of cookies by adjusting the settings on your browser (see your browser Help for how to do this).

The below are the list of tracking cookies we have:

• WordPress session cookies.
• Google analytics and google tracker cookies.
• Cookies from the Stripe payment processor and
• Meta (facebook/instagram) tracker cookies

9. Security of Your Data

We take the security of your personal data very seriously and have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed, so as to safeguard its integrity and confidentiality.

We use various administrative, technical and physical methods to safeguard your personal information. They include:

1. physical measures: locked filing cabinets and restriction of access to offices,
2. technical tools: passwords and encryption, using generally industry best practices.
3. organizational controls: confidentiality agreements, limiting access on a need-to-know basis, staff training and security clearances.

Online security is also a priority. We incorporate security measures such as encryption and authentication tools to protect your personal information from unauthorised use. Firewalls are utilised to protect our servers and network from unauthorised users accessing and tampering with files and other information that we store.

Payments are processed in a secure environment using software and services  provided by specialised third party providers. We use Stripe. For more details please refer to: https://stripe.com/en-mt.

While we do our utmost to safeguard your personal data, no data transmission over the internet can be totally secure and therefore we cannot guarantee or warrant that no unauthorised access will occur.

10. International Data Transfers

Our servers are located in Netherlands. Your personal data will not be transferred to and stored in countries outside the EU.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible or liable for the content or privacy practices of these external sites. Please review their privacy policies before providing any personal data.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the updated policy on our website with an updated effective date.

13. Contact Us

If you have any questions or concerns about this privacy policy or how we handle your personal data, please contact us at:

Natural Cosmetics.mt

172,

Triq Patri Guze Delia,

Mosta, MST 1470,

Malta

support@naturalcosmetics.mt

Best Regards,
Natural Cosmetics.mt