Privacy Policy
What personal data we hold, why we hold it, how long we keep it and the rights you have over it under the GDPR.
1. Who is responsible for your data
The data controller is makeup_code, Bellavista Street, San Ġwann, Malta. For any question about your data, or to exercise any of the rights below, write to hello@makeup-code.com.
2. What we collect
When you order: your name, email address, delivery address, telephone number and the contents of your order. When you book: your name, contact details, the service and any notes you give us about your skin or preferences. When you contact us or use the assistant: the messages you send. When you browse: anonymous usage statistics, and analytics only if you have consented.
We never see your card details. Payment is processed directly by our payment provider.
3. Why we use it, and on what legal basis
To perform the contract with you — fulfilling orders, confirming appointments, arranging delivery, issuing invoices. To meet our legal obligations — keeping accounting and tax records for the period Maltese law requires. For our legitimate interests — keeping the website secure, preventing fraud and improving what we offer, balanced against your rights. With your consent — the newsletter, analytics cookies and any marketing message. You can withdraw consent at any time; every newsletter carries an unsubscribe link.
4. Who else sees it
Only those who need to: our payment provider, our delivery partners, our email and hosting providers, and our accountant. Each acts under contract and may use your data only to provide that service to us. Where a provider is outside the European Economic Area, the transfer is covered by the European Commission’s standard contractual clauses. We never sell your personal data.
5. How long we keep it
Order and invoice records for as long as tax law requires. Appointment history for as long as you remain a client, so we can pick up where we left off. Newsletter details until you unsubscribe. Assistant conversations for up to two years. Anything no longer needed is deleted.
6. Your rights
You have the right to ask for a copy of your data (access), to have it corrected (rectification), to have it deleted (erasure), to limit what we do with it (restriction), to object to how we use it, to receive it in a portable format (portability), and to withdraw consent at any time. Write to hello@makeup-code.com and we will reply within one month. If you believe we have handled your data badly, you may complain to the Information and Data Protection Commissioner in Malta.
7. Security
Access to personal data is limited to those who need it and protected by individual accounts, roles and two-factor authentication. The site is served over an encrypted connection and integration keys are stored encrypted.
8. Children
This website is not directed at children under 16, and we do not knowingly collect their data.