Privacy Policy

We collect information you provide directly, including your name, email address, phone number, billing and delivery address, account credentials, order details, return requests, reviews, contact messages, and newsletter preferences.

We also process limited technical information needed to operate the store, such as a cart identifier, authentication tokens, cart count, checkout session key, IP address, browser information, request logs, and security events.

• Provide your cart, account, checkout, payment, delivery, return, refund, and customer-support services.
• Confirm orders and send service messages about their progress.
• Prevent fraud, protect accounts, troubleshoot errors, and maintain site security.
• Send newsletters when you subscribe. You may unsubscribe at any time.
• Meet accounting, tax, consumer-protection, and other legal obligations.
• Improve store operations and understand aggregate service performance.

We process data when it is necessary to perform a contract with you, comply with a legal obligation, pursue legitimate interests such as security and service improvement, or act on your consent. Newsletter marketing relies on consent, which you may withdraw without affecting earlier lawful processing.

Our backend sets an essential, HTTP-only cart cookie so your cart remains available between visits. The application also uses local browser storage for account session tokens and the cart count, and session storage for a temporary checkout idempotency key that prevents duplicate orders.

These technologies support requested store functions. If optional analytics or advertising tools are added later, this policy and any required consent controls should be updated before those tools are activated.

We share data only where needed with service providers that help us run the store, including hosting, delivery, communications, security, and payment providers. If you choose card payment, payment information is processed through Stripe; GreenCloud records the payment and order status but should not receive your complete card number.

We may disclose information when required by law, to protect legal rights, or in connection with a business reorganisation subject to appropriate safeguards. We do not sell personal data.

We retain information only for as long as needed for the purposes described above, including applicable tax, accounting, warranty, dispute, and fraud-prevention periods. Retention varies by record type. We use access controls, password hashing, restricted administrative functions, signed sessions, and transport security where deployed, but no online service can guarantee absolute security.

Subject to the GDPR and applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, and you may object to certain processing. You may withdraw consent at any time and complain to Malta's Information and Data Protection Commissioner.

Send requests to greencloud.mt@icloud.com. We may ask for information needed to verify your identity. Learn more from the European Commission's GDPR guidance.

If a provider processes information outside the European Economic Area, we require an appropriate legal transfer mechanism where applicable. Our store is intended for adults and is not directed to children.

We may update this policy when our services or legal obligations change. The date above shows the latest revision. Material changes will be presented through an appropriate notice.

For privacy questions or requests, email greencloud.mt@icloud.com, call +356 9955 7961, or write to GreenCloud, Triq Paceville, San Giljan, Malta.