Privacy policy

This policy explains what personal data Naturhouse Malta collects through this website, why, and what rights you have over it under the EU General Data Protection Regulation (GDPR) and Maltese data protection law.

Who we are

Naturhouse Malta is operated by KDE Health Ltd (VAT registration MT32573702), 3, Sqaq Sajjan, Sliema SLM 1261, Malta, the data controller for personal data collected through this website. You can reach us using the details on our Contact information page.

What we collect

• Order details: name, email address, delivery address and order contents, when you place an order.
• Consultation bookings: the details you provide when booking a consultation, which are handled by our booking provider on our behalf.
• Payment details: card and payment information is collected and processed directly by our payment processor, Stripe. We never see or store your full card details.
• Contact requests: your name, email or phone number and message, when you contact us by phone, WhatsApp, email or a form.

Why we use it

• To process and fulfil your orders, including delivery.
• To manage consultation bookings.
• To respond to enquiries and provide customer support.
• To meet our legal obligations, including tax and consumer-protection record-keeping.

Who we share it with

We share personal data with service providers who process it on our behalf: Stripe (payment processing), our website and database hosting providers, and our consultation-booking provider. We do not sell personal data. We only share data with other third parties where required by law.

Cookies

This website does not currently use analytics, advertising or tracking cookies. It uses only the technical storage strictly necessary to operate the site, such as keeping items in your basket during a visit. This policy will be updated if that changes.

How long we keep it

We keep order and transaction records for as long as required by Maltese tax and consumer-protection law, and other personal data for no longer than necessary for the purpose it was collected for.

Your rights

Under GDPR, you have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us using the details on our Contact information page. You also have the right to lodge a complaint with Malta's Information and Data Protection Commissioner (idpc.org.mt).

Changes to this policy

We may update this policy from time to time. The current version always applies and will be posted on this page.