Introduction

We (the store) are committed to protecting and respecting your privacy. This policy (together with our Terms of Sale and any other documents referred to herein) explains how we collect, use and protect your personal data when you use our website and purchase our products.

Contact Information

JG DALMAS LIMITED , trading as Dalmas Collective, C103361, 33, Margaret A.Murray Road, Naxxar, info@dalmascollective.com, 99316991

Scope

This policy applies to all personal data we collect about you via our website, when you purchase from us, sign up for our newsletter, or contact us. It also applies if you otherwise interact with us (via customer service, social media, etc.). Because we are based in Malta and serve customers in the EU, the GDPR applies.

Personal data

We may collect and process the following personal data about you:

• Your name, billing and shipping address, email address, telephone number.

• Payment information (via our payment service provider – we do not store full credit card numbers ourselves).

• Purchase history and details of products you have ordered.

• Your IP address, browser type, device information, and other online identifiers when you visit our website (via cookies and analytics).

• If you contact customer service or submit enquiries: correspondence content, support history.

• If you sign up for marketing communications: your preferences, the fact of your consent, and records of how you engage with our marketing.

​

How we use your personal data & lawful basis

​

We will only use your personal data when the GDPR allows us to. The lawful bases we rely on include:

• Performance of a contract: so we can process your order, deliver products, manage payment, and communicate with you about your purchase.

• Legal compliance: for example, retaining transaction records to fulfil accounting/tax obligations under Maltese law.

• Legitimate interests: for certain business purposes (for example, improving our website, fraud prevention, record-keeping), provided our interests are not overridden by your rights.

• Consent: where you have given clear consent (for example to receive our marketing communications), and you can withdraw that consent at any time.

​

Recipients and categories of recipients

We share your personal data with the following categories of recipients:

• Payment processors and banks (for payment and refund purposes).

• Delivery and courier services (to ship orders to you).

• IT and hosting service providers (to operate our website, email systems, data storage).

• Marketing platforms (if you have consented to receive marketing).

• Professional advisors (e.g., auditors, legal advisors) when required by law or to provide our services.

• We do not sell your personal data to third parties for their own marketing purposes.

International transfers

If we transfer your personal data outside the EU / European Economic Area (EEA) (for example our cloud host or analytics provider may operate servers outside the EU), we will ensure appropriate safeguards are in place (such as EU Standard Contractual Clauses, or working with service providers in countries with adequacy decisions). We will inform you where relevant.

Data retention

We will retain your personal data only for as long as is necessary to fulfil the purposes set out in this policy, including for the purposes of satisfying any legal, accounting or reporting requirements. For example:

We may keep purchase history for 5 years for accounting/tax purposes.

We will retain marketing preference data until you withdraw consent or for a period after your last engagement 5 years.

The criteria used to determine retention times include the nature of the data, the purpose for which we process it, legal obligations, and whether the data is needed to establish, exercise or defend legal claims.

Your rights

Under the GDPR you have rights in relation to your personal data, including:

• Right of access: you can request a copy of the personal data we hold about you.

• Right to rectification: you can ask us to correct inaccurate or incomplete data.

• Right to erasure (“right to be forgotten”): you can ask us to erase your data in certain circumstances.

• Right to restriction of processing: you can ask us to restrict processing where certain conditions apply.

• Right to data portability: you can ask us to receive your data in a structured, commonly-used and machine-readable format (or have it transferred to another controller) under certain conditions.

• Right to object: you can object to processing based on our legitimate interests or for direct marketing.

• Right to withdraw consent at any time when processing is based on consent. Withdrawing consent does not affect processing done before withdrawal.

• Right to lodge a complaint with your national supervisory authority – in Malta this is the Office of the Information and Data Protection Commissioner.

• If you wish to exercise any of these rights, please contact us at info@dalmascollective.com.

Cookies and tracking technologies

We use cookies and similar technologies to:

• Facilitate and remember your login or purchase process.

• Analyse how our website is used (analytics) so we can improve it.

• Provide marketing or advertising (including behavioural advertising) if you’ve consented.

You can manage your cookie preferences via our cookie banner when you first visit the site, and also through your browser settings (note that blocking some cookies may affect your ability to use certain parts of the website).

Where required by law, we will obtain your prior consent for non-essential cookies.

Data security

We have implemented appropriate technical and organisational measures designed to protect your personal data from accidental loss, unauthorised access, disclosure, alteration or destruction. These include secure hosting, encrypted data transmission (HTTPS) and access controls.

​

However, no online transmission or electronic storage is completely secure and therefore we cannot guarantee absolute security.

Changes to this policy

We may update this privacy policy from time to time. When we do, we will post the updated version on our website and update the “Last updated” date at the top. We encourage you to revisit the policy periodically.

Contact us

If you have any questions, comments or requests regarding your personal data or this policy, please contact us at:

JG DALMAS LIMITED, Naxxar

info@dalmascollective.com

99316991

​

Last Updated: November 2025