Privacy Policy

Last updated: 7 September 2026

1. Who we are

Namaste Gozo is a sole-trader retail business established in Malta ("Namaste Gozo", "we", "us" or "our"). We sell clothing, including bras and other garments, handicrafts and related products through namastegozo.com, our physical shop and other sales channels.

For data-protection purposes, Namaste Gozo is the controller of the personal data described in this policy.

Contact details

• Address: 79 Triq Gorg Borg Olivier, Il-Mellieħa, MLH 1022, Malta

• Email: namastegozo@gmail.com

• Telephone/WhatsApp: +356 77129722

• VAT number: MT25895008

2. Scope

This policy explains how we collect, use, disclose, retain and protect personal data when you visit our website, buy from us, create an account, subscribe to marketing, contact us, visit our shop or otherwise interact with us. It also explains your rights.

3. Personal data we collect

Depending on how you interact with us, we may collect:

• Identity and contact data: name, billing and delivery address, email address and telephone number.

• Order and transaction data: products ordered, order value, discounts, currency, payment status, refunds, delivery details and communications about an order. Payment-card details are normally collected directly by the payment provider; we generally receive confirmation and limited payment information rather than the full card number.

• Account data: account identifier, login and saved preferences. Passwords are handled through Shopify's systems.

• Customer-service data: messages, complaints, return requests, warranty claims and information you provide when contacting us.

• Marketing data: subscription status, communication preferences and engagement with messages.

• Device and usage data: IP address, device and browser information, cookie identifiers, pages viewed, referral source and interaction with the website.

• Shop and event data: information you voluntarily provide in person, and transaction records for purchases made at our physical shop or events.

• User content: reviews, photographs or other content you choose to submit. Publicly posted content may be visible to others.

Please do not send us special-category or highly sensitive data unless it is necessary and we ask for it.

4. How we collect data

We collect data:

• directly from you when you order, create an account, subscribe, contact us or visit our shop;

• automatically through cookies, pixels, server logs and similar technologies;

• from Shopify and service providers that operate our store, payments, fraud prevention, delivery, analytics, marketing and customer support; and

• from social-media or advertising platforms when you interact with our content or an advertisement, subject to your settings and consent choices.

5. Purposes and legal bases

We use personal data only when we have a legal basis. The main purposes and bases are:

Purpose	Data commonly used	Legal basis
Process payment, fulfil and deliver orders, provide account functions and manage returns	Identity, contact, order, transaction and account data	Performance of a contract or steps requested before a contract
Answer enquiries and provide customer support	Identity, contact, order and customer-service data	Contract and our legitimate interest in serving customers
Keep tax, accounting, warranty and transaction records	Identity, contact, order and transaction data	Compliance with legal obligations
Detect fraud, secure the website, prevent misuse and establish or defend legal claims	Account, transaction, device, usage and customer-service data	Legal obligations and legitimate interests in security and protecting our rights
Improve our website, products and service	Usage, order and customer-service data	Legitimate interests, or consent where required for cookies or tracking
Send email or electronic marketing	Identity, contact, marketing and engagement data	Consent, or another basis permitted by applicable direct-marketing law
Personalise advertising and measure campaigns	Device, usage, marketing and transaction data	Consent where required
Publish a review or other submitted content	Identity and user content	Consent or the licence you grant when submitting it

Where we rely on legitimate interests, we consider the impact on your rights and use the data only where our interests are not overridden by those rights. You may object as described below.

6. Cookies and similar technologies

We use strictly necessary cookies to operate the store, remember security and checkout choices and provide requested functions. With your consent where required, we may also use analytics, personalisation and advertising cookies.

You can use the cookie banner or privacy-preference link on our website to accept, reject or change optional cookies. You can also control cookies through your browser, although blocking necessary cookies may prevent parts of the store from working. Withdrawing consent does not affect processing that occurred before withdrawal.

Shopify provides information about cookies used on its platform at Shopify's Cookie Policy. The cookies actually available on our store depend on our current Shopify configuration and installed apps.

7. When we disclose personal data

We may disclose data only as reasonably necessary to:

• Shopify, which hosts and operates our online store;

• payment processors, banks and fraud-prevention providers;

• postal, courier, fulfilment and logistics providers;

• IT, hosting, security, analytics, communications, email and customer-support providers;

• advertising and social-media partners where you have consented or the disclosure is otherwise lawful;

• professional advisers, insurers, auditors and public authorities; and

• a buyer or successor in a genuine sale, restructuring or transfer of the business, subject to appropriate safeguards.

These recipients act as processors, independent controllers or joint controllers depending on the service and applicable law. We do not disclose personal data merely for a recipient's unrelated use. If applicable law defines some advertising disclosures as a “sale”, “sharing” or targeted advertising, you may use our privacy controls or contact us to opt out.

8. International transfers

Some providers, including Shopify and its subprocessors, may process data outside Malta or the European Economic Area. Where required, we use a lawful transfer mechanism, such as an adequacy decision, the European Commission's Standard Contractual Clauses, or another valid safeguard. You may contact us for information about the relevant safeguards.

9. Retention

We keep personal data only as long as needed for the purposes above, including legal, tax, accounting, product-safety, warranty, dispute and fraud-prevention requirements. Retention periods vary by record type. We generally retain transaction and accounting records for the period required by Maltese law; support and dispute records for as long as a claim may reasonably arise; marketing data until you unsubscribe or consent is withdrawn; and cookie data for the period stated in our consent tool or until you clear it. We then delete or anonymise data unless continued retention is required or permitted by law.

10. Security

We use reasonable organisational and technical safeguards appropriate to the data and risks involved. No internet transmission or storage system is completely secure. Please protect your account credentials and contact us promptly if you suspect unauthorised use.

11. Your rights

Subject to applicable law, you may have the right to:

• obtain information about and access your personal data;

• correct inaccurate or incomplete data;

• request deletion;

• restrict processing;

• object to processing based on legitimate interests or to direct marketing;

• receive certain data in a portable format and transmit it to another controller;

• withdraw consent at any time; and

• lodge a complaint with a supervisory authority.

To exercise a right, email namastegozo@gmail.com. We may request information reasonably necessary to verify your identity and authority. We normally respond within one month, subject to lawful extensions. There is normally no fee, but applicable law permits a reasonable fee or refusal for manifestly unfounded or excessive requests.

You may complain to the Office of the Information and Data Protection Commissioner in Malta through idpc.org.mt. If you live elsewhere, you may also have the right to contact your local authority.

12. Marketing choices

You may unsubscribe from promotional emails through the link in the message or by contacting us. We may still send necessary service messages about your account, orders, safety notices or legal matters.

13. Children

Our website and products are directed to adults. We do not knowingly collect personal data directly from children who cannot validly consent under applicable law. A parent or guardian who believes a child has provided data may contact us to request its deletion.

14. Third-party links

Our website may link to independent websites, social platforms or services. Their operators control their own privacy practices. Review their notices before providing personal data.

15. Changes to this policy

We may update this policy when our practices, services or legal obligations change. We will post the revised version and update the date above. Where required, we will provide additional notice or seek fresh consent.

16. Contact

For questions, rights requests or complaints, contact:

Namaste Gozo
79 Triq Gorg Borg Olivier
Il-Mellieħa, MLH 1022
Malta
Email: namastegozo@gmail.com
Telephone/WhatsApp: +356 77129722