Maltashopper app privacy notice

Last updated: 29 September 2026

Maltashopper Limited operates Maltashopper.com and its shopping app. Vanilla Telecoms Ltd develops and publishes the app on Maltashopper's behalf. You can contact Maltashopper at sales@maltashopper.com or +356 20334532.

This notice describes the app's features. Our main Privacy Policy also applies when you use the shop, your customer account, checkout and support services.

Information used by the app

• Notifications and device information. If you enable notifications, we store the notification token, an installation identifier, phone platform, operating system version, app version and notification preferences. These let us send notifications and manage delivery. The installation identifier is not an advertising identifier. When linked to your customer account, it is not anonymous.
• Customer account. When a registered notification device is linked to your signed-in account, we associate it with your customer ID, name and email so account and order notifications reach the right device. Shopify provides customer sign-in, order history and account services.
• Cart and orders. Shopify stores your cart and checkout information. Signed-in cart sync associates the shared cart reference and its contents with your account so you can continue shopping across the app and website. Cart references can also associate orders with notification devices. Checkout processes the contact, delivery, order and payment information you provide.
• Saved products. Your favourites are stored on the phone. Registered devices can also store saved products and stock or price alert preferences on our servers.
• Search and product interactions. We record search terms, result counts and clicked product references to understand and improve search. We also record notification delivery results and notification taps to manage notifications and measure their use, including responses to our offers.
• Barcode lookup. The scanner is opened from Search. Camera images are processed on your phone and are not uploaded by the scanner. The decoded barcode or article number is sent to our product lookup/search service. Recent-scan and recent-search lists are stored locally on the phone.
• Customer support. If you choose to chat with Lina or our team, CommSlayer processes the messages and other information you submit to handle your request. Do not include payment-card details in a support message.

Customer reviews and moderation

Reading reviews does not require sign-in. To write a review in the app, you sign in to your Maltashopper customer account and agree to the review rules. We receive your customer ID, name, email, rating, title and review text. Your review stays with us for staff approval. If approved, we send your name, email, rating and review to Judge.me for publication in the app and on Maltashopper.com. Your email is not displayed to shoppers. For app submissions we request first name and last initial, subject to any more private Judge.me display setting. The app's writing form accepts text; website reviews may also include published photos or videos.

You can report a review or block a reviewer in the app. Reports contain the review reference, your selected reason and any details you enter. We use them to check content and take moderation action. Do not include unnecessary personal details in a report. Block and hide choices are saved on your phone. We use protected identifiers to match reviews to the same reviewer without sending reviewer emails or private Judge.me records to the app. We also use short-lived, protected network identifiers to limit abusive requests.

We remove completed review submissions and resolved reports from our app service after 90 days. Pending moderation items stay until handled. We retain an encrypted review-email link while your customer account exists so deletion can cover reviews submitted with an earlier email address. Account deletion removes your saved review preferences, app-held submissions and associated review copies. It also opens a staff follow-up to remove Judge.me's copies through its privacy process. The contact address needed for that follow-up stays encrypted until staff confirm completion. Minimal protected suppression and moderation records prevent removed reviews from reappearing. Judge.me processes upstream erasure separately. You can also contact Judge.me about your review data or contact us at forgetme@maltashopper.com.

Website pages and service providers

Some screens open website content inside the app, including customer accounts, checkout, policies, saved carts and Lina. Sign-in, checkout and support need essential cookies. Before these website screens open, the app offers an essential-only continuation that declines optional website analytics, marketing, preferences and data sale or sharing. The app does not offer an option to enable advertising tracking. We do not use cookies in the app to track you across other companies' apps or websites, and the app does not use Apple's or Android's advertising identifier.

Essential shop, security, payment and support services can process IP addresses, browser and device details, session cookies and the information needed to provide their features. The first-party search and notification measurements described above still apply. If you separately visit Maltashopper.com in a web browser outside the app, the website's own cookie choices and our main Privacy Policy apply.

• Shopify provides the shop, customer accounts, carts and checkout. Shopify Network Intelligence is enabled for the website. The app records a decline for optional analytics, marketing and data sale or sharing before its embedded shop pages open. Shopify processes eligible website data according to the applicable privacy choices and its own terms. See our main Privacy Policy and the Shopify Consumer Privacy Policy.
• Cloudflare hosts our search, cart-sync, notification, review-moderation and saved-product services.
• Apple Push Notification service and Google Firebase Cloud Messaging deliver app notifications.
• CommSlayer provides Lina and customer support chat.
• Judge.me provides product reviews and optional review attachments.
• Google and Meta provide analytics and advertising services for the separate website, subject to its privacy choices. The app keeps optional website analytics and advertising consent off.
• Consentmo manages website cookie preferences.

Storage and deletion

We keep app notification delivery and interaction statistics for 12 months. Expired records are removed by a scheduled cleanup process.

Uninstalling the app does not itself submit an account-deletion request. When a notification service reports that a token is invalid, we mark the registration as expired so it is no longer used for sending. Saved products can be removed from your saved list.

You can request account and app-data deletion under Account > Help and settings > Delete my account, or from the account-deletion page. Identity verification is required. This removes the notification-device and saved-list records covered by the request and asks Shopify to erase your customer account. Order records needed for accounting or other legal obligations may be retained. We keep a record of the deletion request to process it and prevent duplicate requests.

For access, correction, deletion or other privacy requests, email forgetme@maltashopper.com.

Your choices

• Browse products as a guest, or sign in for account features and shared carts.
• Manage order and offer notifications under Account > Help and settings. You can also disable notifications in your phone's settings.
• Grant or revoke camera permission in your phone's settings. It is needed for the barcode scanner, not for browsing or searching by name.
• Choose whether to use Lina and what information to include in your message.
• Continue with essential cookies when opening website screens in the app. Optional website analytics, advertising and data sharing stay off. Read our main Privacy Policy for separate browser visits and further privacy information.