Last updated: October 2026
This Privacy Policy explains how BDR Noon Clinic Malta (“we”, “us”) collects, uses and protects your personal data when you visit bdrclinicmalta.com, buy from our online shop, book an appointment or contact us. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Maltese Data Protection Act.
Who we are
The data controller is BDR Noon Clinic Malta, 56 Triq Mannarino, Birkirkara BRK 2173, Malta. Email: bdr_medical_clinic@abv.bg. Phone: +356 9905 8885.
What data we collect
- Orders: name, delivery and billing address, email, phone number and order details when you buy from our shop.
- Appointments: name, contact details and booking details when you book a treatment online.
- Enquiries and newsletter: the information you send through our contact forms, newsletter sign-up, email or WhatsApp.
- Treatment records: information about your skin, health and treatments that you share with us during a consultation, which we keep confidential.
- Website usage: technical data such as IP address, browser, device and pages visited, collected through cookies and similar technologies.
Card payments are processed securely by our payment providers (Stripe and WooPayments). We do not store your full card details.
How and why we use your data
- To process and deliver your orders and handle returns and refunds (performance of a contract).
- To manage your appointments and provide safe, appropriate treatments (performance of a contract and, for health information, your explicit consent or the provision of health care).
- To answer your questions and provide customer support (legitimate interest).
- To send you news and offers, only if you have subscribed; you can unsubscribe at any time (consent).
- To measure and improve our website and advertising (consent, through cookies).
- To meet our legal obligations, for example accounting and tax records (legal obligation).
Cookies, analytics and advertising
Our website uses cookies and similar technologies, including:
- Essential cookies that make the shop, basket, checkout and booking system work.
- Google Analytics, Google Tag Manager and Google Ads (Google Ireland Ltd), to understand how visitors use the site and measure the results of our advertising.
- Meta Pixel and Conversions API (Meta Platforms Ireland Ltd), to measure and improve our advertising on Facebook and Instagram.
You can control or delete cookies through your browser settings. Blocking some cookies may affect how the website works.
Who we share your data with
We never sell your personal data. We share it only with service providers who help us run our business, such as our website hosting provider, payment processors, delivery services, and the analytics and advertising providers listed above. Some of these providers may process data outside the European Economic Area; where this happens, appropriate safeguards such as the European Commission’s Standard Contractual Clauses are in place.
How long we keep your data
We keep personal data only for as long as needed for the purposes above, or as required by law (for example, accounting records and treatment records). When it is no longer needed, it is securely deleted or anonymised.
Your rights
Under the GDPR you have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. To exercise any of these rights, contact us at bdr_medical_clinic@abv.bg.
If you are not satisfied with how we handle your data, you can lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta.
Security
Our website uses an encrypted (HTTPS) connection, and we take appropriate technical and organisational measures to protect your personal data against loss, misuse or unauthorised access.
Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the date it was last updated.