Privacy Policy.

Who is responsible for your personal data?

Marketing Notes Malta, the operator of marketingnotes.mt, acts as the data controller for personal data collected directly through this website, except where another provider acts as an independent controller for its own processing activities.

Marketing Notes Malta operates from Malta. You can contact us through the Contact page.

Information we may collect.

Depending on how you use the website, we may process:

• Name, surname and contact details supplied during checkout or when contacting us.
• Billing information and order details.
• The products purchased, order value, order status and transaction references.
• Limited payment-method information provided to us by Stripe, where applicable.
• Messages, enquiries and customer-support correspondence.
• Technical information such as IP address, browser information, device information, timestamps and security logs.
• Cookie and consent information where cookies or similar technologies are used.

We do not intentionally store your full card number or card security code on our own website database.

How we use personal data.

• To process, confirm and administer purchases.
• To provide access to purchased downloadable digital products.
• To provide customer support and respond to enquiries.
• To manage refunds, disputes and payment-related issues.
• To prevent fraud, abuse, unauthorised distribution and security incidents.
• To maintain the website and diagnose technical issues.
• To keep records required for accounting, taxation and legal compliance.
• To send marketing communications only where permitted by law and, where required, with consent.

Why we are allowed to process the data.

Depending on the processing activity, we may rely on:

• Contract: where processing is necessary to take payment, fulfil an order or provide customer support connected to a purchase.
• Legal obligation: where records or information must be retained or disclosed to comply with applicable law.
• Legitimate interests: for website security, fraud prevention, service improvement and protecting our business and intellectual property, provided those interests are not overridden by your rights.
• Consent: where consent is the appropriate legal basis, including certain optional cookies or marketing activities.

Stripe processes card payments.

Payments on marketingnotes.mt are processed through Stripe. Payment details entered in Stripe's payment interface are handled by Stripe in accordance with its own privacy and security practices.

We may receive transaction information needed to confirm and administer an order, such as payment status, transaction identifiers and limited payment-method details.

For more information about how payments work on this website, see our Stripe Declaration.

Who may receive your information?

We do not sell your personal data. Personal data may be shared where necessary with categories of service providers such as:

• Payment processors, including Stripe.
• Website hosting, infrastructure and technical service providers.
• Email and communications providers.
• Professional advisers such as accountants, legal advisers or auditors where necessary.
• Authorities or regulators where disclosure is required by law.

Where a service provider processes personal data on our behalf, we expect appropriate data-protection and confidentiality safeguards to apply.

Data may sometimes be processed outside the EEA.

Some service providers may process personal data outside Malta or the European Economic Area. Where applicable, such transfers should be covered by a recognised legal mechanism, such as an adequacy decision or appropriate contractual safeguards.

We do not keep personal data forever.

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, including fulfilling orders, providing support, resolving disputes and meeting accounting, tax, fraud-prevention and other legal obligations.

Different categories of data may therefore be retained for different periods. When data is no longer required, it should be deleted, anonymised or otherwise securely disposed of where appropriate.

Cookies and similar technologies.

The website may use cookies or similar technologies that are necessary for core functions such as security, checkout, preferences and session management. Where non-essential analytics, advertising or similar cookies are used, consent should be requested where required by applicable law.

You can also control cookies using your browser settings, although disabling essential cookies may affect parts of the website.

How we protect information.

We take reasonable technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. However, no website or online transmission method can be guaranteed to be completely secure.

Your data-protection rights.

Subject to the conditions and limitations of applicable law, you may have rights including:

• The right to be informed about the processing of your personal data.
• The right to request access to your personal data.
• The right to request correction of inaccurate or incomplete data.
• The right to request erasure in certain circumstances.
• The right to request restriction of processing in certain circumstances.
• The right to object to certain processing.
• The right to data portability where applicable.
• The right to withdraw consent at any time where processing relies on consent.

You also have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner in Malta.

Questions about this policy?

To ask a privacy question or exercise a data-protection right, contact us through the Contact page.

We may update this Privacy Policy when our services, legal obligations or processing activities change. The latest version published on this page will show its most recent update date.