1. Who We Are
AquaFun Malta ("we", "us", "our") operates the website aquafun.mt and sells the AquaFun Foldable Swimming Pool. We are responsible for your personal data as data controller under the General Data Protection Regulation (GDPR) and applicable Maltese law.
For any privacy-related questions, contact us at: info@aquafun.mt
2. Data We Collect
When you place an order or contact us, we may collect:
- Name, email address, and phone number
- Delivery address (street, city, postcode, island)
- Order details (items purchased, quantities, prices)
- Payment confirmation data (we do not store card details — payments are processed by Stripe)
- Any messages or notes you send us
- Basic website usage data (page visits, browser type) via cookies
3. How We Use Your Data
We use your personal data to:
- Process and fulfil your order
- Arrange delivery across Malta and Gozo
- Send you order confirmation and delivery updates
- Respond to your enquiries and support requests
- Comply with our legal obligations
- Improve our website and services (anonymised analytics only)
We will only contact you for marketing purposes if you have explicitly given your consent.
4. Legal Basis for Processing
- Contract performance — processing your order and arranging delivery
- Legitimate interests — improving our service and preventing fraud
- Legal obligation — tax records and statutory requirements
- Consent — marketing communications (where applicable)
5. Payment Processing
All payments are processed securely by Stripe. We do not store, process, or have access to your card details. Stripe's privacy policy is available at stripe.com/privacy.
6. Data Sharing
We do not sell or rent your personal data. We may share it with:
- Delivery partners — solely to fulfil your order
- Stripe — for payment processing
- Legal authorities — if required by law
7. Data Retention
We retain your order data for up to 5 years to comply with Maltese tax and commercial law. Contact enquiry data is deleted within 12 months unless ongoing correspondence requires otherwise.
8. Your Rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (where legally permitted)
- Object to certain processing activities
- Data portability — receive your data in a machine-readable format
- Withdraw consent at any time for consent-based processing
To exercise any of these rights, email us at info@aquafun.mt. We will respond within 30 days.
9. Cookies
We use essential cookies to maintain your shopping cart session. We may also use analytics cookies to understand how visitors use our site. You can disable cookies in your browser settings, though this may affect cart functionality.
10. Security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. All data transmitted to and from our site is encrypted via HTTPS.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent update. Continued use of our site after changes constitutes acceptance of the revised policy.
12. Contact & Complaints
If you have any concerns about how we handle your data, please contact us at info@aquafun.mt. You also have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta at idpc.org.mt.