# Privacy Policy

- Link: https://bdrclinicmalta.com/privacy-policy/
- Published: 2025-10-13T14:35:16+00:00
- Author: nancy.conde.blandon@gmail.com

_Last updated: October 2026_

This Privacy Policy explains how BDR Noon Clinic Malta (“we”, “us”) collects, uses
and protects your personal data when you visit bdrclinicmalta.com, buy from our 
online shop, book an appointment or contact us. We process personal data in line
with the EU General Data Protection Regulation (GDPR) and the Maltese Data Protection
Act.

## Who we are

The data controller is **BDR Noon Clinic Malta**, 56 Triq Mannarino, Birkirkara 
BRK 2173, Malta. Email: [bdr_medical_clinic@abv.bg](https://bdrclinicmalta.com/privacy-policy/bdr_medical_clinic@abv.bg).
Phone: [+356 9905 8885](https://bdrclinicmalta.com/privacy-policy/+35699058885).

## What data we collect

 * **Orders:** name, delivery and billing address, email, phone number and order
   details when you buy from our shop.
 * **Appointments:** name, contact details and booking details when you book a treatment
   online.
 * **Enquiries and newsletter:** the information you send through our contact forms,
   newsletter sign-up, email or WhatsApp.
 * **Treatment records:** information about your skin, health and treatments that
   you share with us during a consultation, which we keep confidential.
 * **Website usage:** technical data such as IP address, browser, device and pages
   visited, collected through cookies and similar technologies.

Card payments are processed securely by our payment providers (Stripe and WooPayments).
We do not store your full card details.

## How and why we use your data

 * To process and deliver your orders and handle returns and refunds (performance
   of a contract).
 * To manage your appointments and provide safe, appropriate treatments (performance
   of a contract and, for health information, your explicit consent or the provision
   of health care).
 * To answer your questions and provide customer support (legitimate interest).
 * To send you news and offers, only if you have subscribed; you can unsubscribe
   at any time (consent).
 * To measure and improve our website and advertising (consent, through cookies).
 * To meet our legal obligations, for example accounting and tax records (legal 
   obligation).

## Cookies, analytics and advertising

Our website uses cookies and similar technologies, including:

 * **Essential cookies** that make the shop, basket, checkout and booking system
   work.
 * **Google Analytics, Google Tag Manager and Google Ads** (Google Ireland Ltd),
   to understand how visitors use the site and measure the results of our advertising.
 * **Meta Pixel and Conversions API** (Meta Platforms Ireland Ltd), to measure and
   improve our advertising on Facebook and Instagram.

You can control or delete cookies through your browser settings. Blocking some cookies
may affect how the website works.

## Who we share your data with

We never sell your personal data. We share it only with service providers who help
us run our business, such as our website hosting provider, payment processors, delivery
services, and the analytics and advertising providers listed above. Some of these
providers may process data outside the European Economic Area; where this happens,
appropriate safeguards such as the European Commission’s Standard Contractual Clauses
are in place.

## How long we keep your data

We keep personal data only for as long as needed for the purposes above, or as required
by law (for example, accounting records and treatment records). When it is no longer
needed, it is securely deleted or anonymised.

## Your rights

Under the GDPR you have the right to access, correct or delete your personal data,
to restrict or object to its processing, to data portability, and to withdraw your
consent at any time. To exercise any of these rights, contact us at [bdr_medical_clinic@abv.bg](https://bdrclinicmalta.com/privacy-policy/bdr_medical_clinic@abv.bg).

If you are not satisfied with how we handle your data, you can lodge a complaint
with the Office of the Information and Data Protection Commissioner (IDPC) in Malta.

## Security

Our website uses an encrypted (HTTPS) connection, and we take appropriate technical
and organisational measures to protect your personal data against loss, misuse or
unauthorised access.

## Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always
be available on this page, with the date it was last updated.