Privacy & Data Policy
Introduction
We (the store) are committed to protecting and respecting your privacy. This policy (together with our Terms of Sale and any other documents referred to herein) explains how we collect, use and protect your personal data when you use our website and purchase our products.
Contact Information
JG DALMAS LIMITED , trading as Solo Caffe, C103361, 33, Margaret A.Murray Road, Naxxar, solocaffemalta@gmail.com, 00356 2142 3410
Scope
We may collect and process the following personal data about you:
-
Your name, billing and shipping address, email address, telephone number.
-
Payment information (via our payment service provider – we do not store full credit card numbers ourselves).
-
Purchase history and details of products you have ordered.
-
Your IP address, browser type, device information, and other online identifiers when you visit our website (via cookies and analytics).
-
If you contact customer service or submit enquiries: correspondence content, support history.
-
If you sign up for marketing communications: your preferences, the fact of your consent, and records of how you engage with our marketing.
How we use your personal data & lawful basis
We will only use your personal data when the GDPR allows us to. The lawful bases we rely on include:
-
Performance of a contract: so we can process your order, deliver products, manage payment, and communicate with you about your purchase.
-
Legal compliance: for example, retaining transaction records to fulfil accounting/tax obligations under Maltese law.
-
Legitimate interests: for certain business purposes (for example, improving our website, fraud prevention, record-keeping), provided our interests are not overridden by your rights.
-
Consent: where you have given clear consent (for example to receive our marketing communications), and you can withdraw that consent at any time.
Recipients and categories of recipients
We share your personal data with the following categories of recipients:
-
Payment processors and banks (for payment and refund purposes).
-
Delivery and courier services (to ship orders to you).
-
IT and hosting service providers (to operate our website, email systems, data storage).
-
Marketing platforms (if you have consented to receive marketing).
-
Professional advisors (e.g., auditors, legal advisors) when required by law or to provide our services.
-
We do not sell your personal data to third parties for their own marketing purposes.
Data retention
We will retain your personal data only for as long as is necessary to fulfil the purposes set out in this policy, including for the purposes of satisfying any legal, accounting or reporting requirements. For example:
We may keep purchase history for 5 years for accounting/tax purposes.
We will retain marketing preference data until you withdraw consent or for a period after your last engagement 5 years.
The criteria used to determine retention times include the nature of the data, the purpose for which we process it, legal obligations, and whether the data is needed to establish, exercise or defend legal claims.
Your rights
Under the GDPR you have rights in relation to your personal data, including:
-
Right of access: you can request a copy of the personal data we hold about you.
-
Right to rectification: you can ask us to correct inaccurate or incomplete data.
-
Right to erasure (“right to be forgotten”): you can ask us to erase your data in certain circumstances.
-
Right to restriction of processing: you can ask us to restrict processing where certain conditions apply.
-
Right to data portability: you can ask us to receive your data in a structured, commonly-used and machine-readable format (or have it transferred to another controller) under certain conditions.
-
Right to object: you can object to processing based on our legitimate interests or for direct marketing.
-
Right to withdraw consent at any time when processing is based on consent. Withdrawing consent does not affect processing done before withdrawal.
-
Right to lodge a complaint with your national supervisory authority – in Malta this is the Office of the Information and Data Protection Commissioner.
-
If you wish to exercise any of these rights, please contact us at info@dalmascollective.com.
Cookies and tracking technologies
We use cookies and similar technologies to:
-
Facilitate and remember your login or purchase process.
-
Analyse how our website is used (analytics) so we can improve it.
-
Provide marketing or advertising (including behavioural advertising) if you’ve consented.
You can manage your cookie preferences via our cookie banner when you first visit the site, and also through your browser settings (note that blocking some cookies may affect your ability to use certain parts of the website).
Where required by law, we will obtain your prior consent for non-essential cookies
Data security
We have implemented appropriate technical and organisational measures designed to protect your personal data from accidental loss, unauthorised access, disclosure, alteration or destruction. These include secure hosting, encrypted data transmission (HTTPS) and access controls.
However, no online transmission or electronic storage is completely secure and therefore we cannot guarantee absolute security.
Changes to this policy
We may update this privacy policy from time to time. When we do, we will post the updated version on our website and update the “Last updated” date at the top. We encourage you to revisit the policy periodically.
Contact us
If you have any questions, comments or requests regarding your personal data or this policy, please contact us at:
JG DALMAS LIMITED, Naxxar
Last Updated: July 2026
