Privacy Policy

We collect the following categories of personal data when you use the Site:

• Technical data via Google Analytics 4: anonymised IP address, browser type, device type, pages visited, time on page, referring URL.
• Advertising data via Google AdSense: cookie identifiers, ad interaction events, approximate location (country/region level), inferred interests for personalised advertising.
• Hosting logs via Vercel: request timestamps and IP addresses for security and abuse prevention (retained ~30 days).

We do not collect names, email addresses, payment information, or health-related data. The Site does not require an account.

We use cookies and similar technologies for analytics and advertising. Non-essential cookies are only set after you grant consent through the cookie banner displayed to visitors in the European Economic Area, the United Kingdom, and Switzerland.

The main categories of cookies used:

• Analytics cookies (Google Analytics): _ga, _ga_* — up to 2 years.
• Advertising cookies (Google AdSense, DoubleClick): __gads, __gpi, NID, IDE — up to 13 months.
• Consent cookies (Google CMP): store your consent preferences — up to 13 months.

You can withdraw or change your consent at any time by clearing site data in your browser, which will re-trigger the consent banner on your next visit.

• Consent — for analytics and advertising cookies (Article 6(1)(a)).
• Legitimate interest — for hosting logs used to maintain Site security and prevent abuse (Article 6(1)(f)).

The Site shares limited technical data with the following service providers:

• Google Ireland Limited — AdSense (advertising) and Analytics (measurement). See Google's Privacy Policy.
• Vercel Inc. — static hosting and CDN delivery. See Vercel's Privacy Policy.

Some processing may involve transfers outside the European Economic Area. Such transfers rely on the European Commission's Standard Contractual Clauses or adequacy decisions.

• Google Analytics user data: 14 months (default).
• Google AdSense advertising data: up to 13 months.
• Vercel hosting logs: ~30 days.

If you are an EU/EEA, UK, or Swiss resident, you have the following rights:

• Access — obtain confirmation and a copy of data we hold about you (Article 15).
• Rectification — correct inaccurate data (Article 16).
• Erasure — request deletion of your data (Article 17).
• Restriction — limit how we process your data (Article 18).
• Portability — receive your data in a portable format (Article 20).
• Object — object to processing based on legitimate interest (Article 21).
• Withdraw consent — at any time, without affecting prior lawful processing (Article 7(3)).

To exercise any of these rights, email contact@malta-pharmacy.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Maltese Information and Data Protection Commissioner (IDPC) or your local supervisory authority.

The Site is a public information directory and is not directed at children under 16. We do not knowingly collect personal data from children.

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. The “Last updated” date at the top of this page reflects the most recent version. Material changes will be highlighted on the Site.

For privacy questions or to exercise your rights: contact@malta-pharmacy.com. See also our Contact page.