2. Data We Collect

BWe collect personal data in the following ways:

Information you give us directly:

• Name, email address, and phone number when you submit an enquiry through our website or in store
• Postal address if required for delivery purposes
• Details of products you are interested in or have purchased
• Any correspondence you send us, including notes or special requests

Information collected automatically:

• Technical data including your IP address, browser type, and operating system
• Pages you visit on our website, time spent, and referring URLs
• Cookie data (see the Cookies section below

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to product enquiries and provide you with information about our products and services
• To process purchases and arrange delivery or collection
• To send you order confirmations and relevant updates about your enquiry
• To provide after-sales support, including assistance with Le Creuset warranty claims
• To improve our website and understand how customers use it
• To comply with our legal obligations

We will only send you marketing communications (such as newsletters or promotional offers) if you have given us explicit consent to do so. You may withdraw this consent at any time by contacting us or using the unsubscribe link in any marketing email.

4. Legal Basis for Processing

Under GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

• Contract: Processing is necessary to fulfil an order or respond to a purchase enquiry
• Legitimate interests: To improve our website and services, and to handle general enquiries from customers and potential customers
• Legal obligation: Where we are required to process data to comply with Maltese or EU law
• Consent: For marketing communications, where you have opted in

5. Sharing Your Data

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

We may share your data with:

• ETV LTD: Our parent company, for internal administrative purposes only.
• Service providers: Third parties who assist us in operating our website or business (such as hosting providers or email service providers), who are bound by confidentiality obligations
• Le Creuset: Where necessary to process a warranty claim or register a product on your behalf, and only with your knowledge
• Legal authorities: Where we are required to do so by law, court order, or regulatory authority

All third parties with whom we share data are required to keep it secure and to use it only for the purpose for which it was shared.

6. How Long We Keep Your Data

We retain personal data only for as long as is necessary for the purpose it was collected, or as required by law. In general:

• Enquiry and contact data is kept for up to 3 years from last contact
• Purchase and transaction records are kept for 7 years in accordance with Maltese tax and accounting requirements
• Marketing consent records are kept for as long as you remain subscribed, plus 1 year thereafter
• Website usage data collected via cookies is retained in accordance with our cookie settings

When data is no longer required, it is securely deleted or anonymised.

7. Your Rights

Under GDPR, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct any inaccurate or incomplete data.
• Right to erasure: You may ask us to delete your data, subject to certain legal exceptions.
• Right to restriction: You may ask us to restrict processing of your data in certain circumstances.
• Right to data portability: You may request your data in a machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta at idpc.org.mt.

8. Cookies

Our website uses cookies — small text files stored on your device — to improve your browsing experience. We use the following types:

• Essential cookies: Required for the website to function correctly (e.g. your basket and session data). These cannot be disabled.
• Analytics cookies: Help us understand how visitors use our website so we can improve it. These are only set with your consent.
• Preference cookies: Remember your settings and choices to personalise your experience.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling cookies may affect the functionality of certain parts of the website. We currently use session storage (not persistent cookies) for your enquiry basket, which is cleared when you close your browser tab.

9. Security

We take the security of your personal data seriously and have appropriate technical and organisational measures in place to protect it against unauthorised access, loss, or disclosure. These include secure servers, access controls, and staff training. However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Children's Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website following any changes constitutes your acceptance of the updated policy

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Flamingo Bisazza Street, Sliema, SLM 1642, Malta T: +356 2133 1620 E: [email protected] ETV Limited · Company No. C5698 · VAT MT12527529