Privacy Policy

Last updated: 16 October 2026

This Privacy Policy explains how Hairloom Malta collects, uses and shares personal information when you visit our website, purchase products or contact us.

1. Who is responsible for your information?

Hairloom Malta is operated by Sockseys Blend, the data controller responsible for the personal information described in this policy.

Business address: Kernice, Triq Leonard Mahoney, Ix-Xgħajra, Malta
Email: hairloommalta@gmail.com
Website: https://rq1qgg-yy.myshopify.com

2. Information we collect

We collect information necessary to operate our store, process purchases and assist customers. This includes:

Your name, email address, telephone number, billing address and delivery address.
Products ordered, shade selections, transaction references, payment status and order history.
Delivery, return and refund information.
Messages, photographs and other information you choose to provide when contacting us.
Technical information, such as your IP address, browser type, device information and website interactions.
Your cookie choices and communication preferences.

We receive this information from you, through our website, and from service providers involved in processing payments and fulfilling orders.

3. How we use your information

We use your information to:

Accept, process and fulfil orders.
Arrange shipping and provide delivery updates.
Process payments, returns and refunds.
Respond to enquiries and provide customer support.
Maintain the security and functionality of our website.
Detect and prevent fraud or misuse.
Keep business records and meet applicable legal obligations.
Establish, exercise or defend legal claims.

The information requested at checkout is necessary to process and deliver your order. If you do not provide it, we may be unable to complete your purchase.

4. Legal bases for processing

Under the General Data Protection Regulation, we rely on:

Performance of a contract: when processing your purchase, arranging delivery and providing related customer support.

Legal obligations: when keeping records or responding to lawful requests from authorities.

Legitimate interests: when protecting our website and business, preventing fraud, handling disputes and improving customer service, provided those interests do not override your rights.

Consent: where required for optional cookies or other optional processing. You can withdraw consent at any time without affecting processing that took place lawfully before withdrawal.

5. Payments

Payments are processed through Viva Wallet. Payment information is handled by the payment provider to authorise transactions, process refunds and perform security checks.

We receive information such as payment status and transaction references. We do not receive your full card number or card security code.

The payment provider’s own privacy information also applies to its processing of your personal data.

6. Shipping and fulfilment

Products are shipped directly to the delivery address supplied at checkout through our fulfilment and delivery partners.

We share information needed to prepare, ship and deliver your order. This may include your name, delivery address, telephone number, email address and the products ordered.

These partners may include suppliers, fulfilment providers, couriers and postal services located outside Malta, including in China.

7. Shopify and other recipients

Our store is hosted on Shopify, which provides the ecommerce platform used to display products, manage orders and support checkout.

Shopify processes personal information to provide these services and may also process certain information for its own purposes. Further information is available in the Shopify Consumer Privacy Policy. You can also visit the Shopify Privacy Portal.

We may share relevant information with providers supporting our website, business communications and order management, and with professional advisers or public authorities where necessary.

8. Cookies and similar technologies

Our website uses cookies and similar technologies to support functions such as remembering your shopping cart, managing checkout and maintaining security.

A cookie banner allows you to manage optional cookies. Where consent is required, non-essential cookies should only operate after you consent. You can change your choices through the website’s cookie preferences control.

You can also manage cookies through your browser. Blocking essential cookies may affect shopping and checkout functionality.

We do not currently use Meta Pixel or TikTok Pixel.

9. International processing

Because we use international ecommerce, fulfilment and delivery services, your personal information may be processed outside the European Economic Area, including in China.

Transfers outside the European Economic Area are subject to applicable data protection requirements. Depending on the destination and provider, these may require an adequacy decision, European Commission Standard Contractual Clauses or another permitted transfer mechanism, together with additional safeguards where necessary.

10. Retention

We keep personal information for as long as reasonably necessary for the purposes described in this policy:

Order, invoice and transaction records are retained for the periods required by applicable tax and accounting laws.
Customer communications are retained as needed to resolve enquiries and handle related complaints or disputes.
Technical and security records are retained for periods appropriate to their operational and security purposes.
Cookie information is retained according to the relevant cookie’s duration and your preferences.

We may retain information longer where necessary to meet a legal obligation or manage an ongoing claim. Information that is no longer required is deleted or anonymised.

11. Your privacy rights

Subject to applicable legal conditions and exceptions, you have the right to:

Access your personal information.
Correct inaccurate or incomplete information.
Request deletion of your information.
Request restriction of processing.
Object to processing based on legitimate interests.
Receive certain information in a portable format.
Withdraw consent where processing relies on consent.

You may also object to direct marketing at any time.

To exercise your rights, email hairloommalta@gmail.com. We may request information reasonably necessary to verify your identity.

We normally respond within one month. If a lawful extension is necessary, we will explain the reason and expected response time.

You may lodge a complaint with Malta’s Information and Data Protection Commissioner at idpc.org.mt, or another competent data protection authority.

12. Security

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

No method of online transmission or electronic storage is entirely secure.

13. Updates

We may update this policy to reflect changes to our operations, service providers or legal obligations. The current version will appear on this page with its latest revision date. Where required, we will provide additional notice of significant changes.

14. Contact

For questions about this policy or your personal information, contact:

Sockseys Blend, trading as Hairloom Malta
Kernice, Triq Leonard Mahoney
Ix-Xgħajra, Malta
Email: hairloommalta@gmail.com