Privacy Policy
Your privacy matters. This policy outlines how we collect, use, and protect your personal information in compliance with GDPR and Maltese data protection law.
Effective: March 2026
Last reviewed: March 2026
1. Information We Collect
We collect information you voluntarily provide when submitting a club listing or contacting us. This may include your name, email address, phone number, physical address, and club-related details. We also collect anonymous, aggregated usage data through standard web analytics technologies to understand how visitors interact with our platform. We do not collect sensitive personal data beyond what is necessary to operate this directory service.
2. How We Use Your Information
The information we collect is used exclusively to operate and maintain the directory, process club listing submissions, respond to enquiries, and improve the overall user experience. We do not sell, trade, rent, or otherwise share your personal information with third parties for commercial purposes. Data may only be shared where required by law or to protect our legal rights.
3. Data Storage & Security
We implement industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is stored on secure, encrypted servers. Access to personal information is strictly limited to authorised personnel who require it to perform their duties. Despite our best efforts, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
4. Your Rights Under GDPR
Under the General Data Protection Regulation (EU) 2016/679, you have the following rights regarding your personal data: the right of access, the right to rectification, the right to erasure ('right to be forgotten'), the right to restrict processing, the right to data portability, and the right to object to processing. You may also withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To exercise any of these rights, please contact us using the details provided below.
5. Cookies & Tracking
This Website uses only essential cookies required for core functionality, such as the age verification gate and session management. We do not use third-party advertising cookies, tracking pixels, or behavioural targeting technologies. By using this Website, you consent to the use of these essential cookies. You may configure your browser to block cookies, although this may affect certain features of the Website.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Club listing data remains active until a removal request is submitted and processed. Contact form submissions are retained for up to 12 months. You may request deletion of your data at any time by contacting us.
7. Contact & Data Controller
For any privacy-related enquiries, data access requests, or to exercise your GDPR rights, please contact our Data Controller at info@cannabisclubsmalta.com. We will respond to all legitimate requests within 30 days. If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information and Data Protection Commissioner of Malta.