Free delivery on orders over €500+

Privacy & Cookie Policy

Last updated: 11 November 2026

Who we are

Domestica Ltd ("Domestica", "we", "us" or "our") is responsible for the personal data described in this policy. Our online store is powered by Shopify.

Address: 4 & 5 Attard Industrial Estate, Triq L-Imdina, Attard, Malta.
Email: info@domestica.com.mt
Telephone: +356 2144 7604

This policy explains how we collect, use, share and retain personal data when you visit our website, contact us, arrange a consultation or buy from our online store. We process personal data under the EU General Data Protection Regulation and applicable Maltese data protection and electronic communications laws.

What we collect

  • Enquiries and consultations: your name, email address, telephone number, preferred appointment time, correspondence and project information you provide. This may include measurements, plans, photographs and delivery or installation requirements.
  • Orders and aftersales: your contact information, billing and delivery addresses, products ordered, payment status, order history, delivery information, and communications about returns, complaints and warranties. Payment providers process card payments; we do not store full card details.
  • Customer account: if you create an account, your login details, saved addresses and order history.
  • Chat and customer service: messages you send us through website chat or our virtual assistant, and information submitted through connected customer-service tools.
  • Marketing: your contact details, subscription preferences, consent records and unsubscribe or objection records.
  • Website information: IP address, device and browser information, security logs and, where permitted, browsing activity, referral information and cookie identifiers. Optional tracking is subject to your choices.

Information needed to provide our services

We need certain information to prepare requested quotations, arrange appointments, process payments and deliver orders. Required fields are identified when we collect information. If you do not provide the necessary details, we may be unable to fulfil your request or order. Marketing subscriptions and consent to optional cookies are voluntary.

How we use personal data

  • Enquiries, quotations and appointments: to respond to your request, discuss your project, prepare quotations and arrange consultations. Our legal basis is taking steps at your request before entering into a contract. For general enquiries not connected with a proposed contract, we rely on our legitimate interest in responding and providing customer service.
  • Orders, delivery and aftersales: to process purchases, communicate about orders, arrange delivery or installation, and handle contractual returns and warranty support. Our legal basis is performance of our contract. Where a statutory duty applies, including consumer-law obligations, we rely on that legal obligation.
  • Accounting and compliance: to maintain records and respond to lawful requests from authorities. Our legal basis is compliance with applicable legal obligations.
  • Security and claims: to protect our website and systems, investigate suspected misuse or fraud, and establish, exercise or defend legal claims. We rely on our legitimate interests in protecting our business, customers and legal rights, subject to the required balancing of those interests against your rights.
  • Marketing: to send information about our products, offers and events where you have consented. Where permitted by Maltese electronic marketing law, we may also use contact details obtained in an earlier sale to promote our own similar products or services, provided you were offered an easy, free opt-out when we collected those details and in every subsequent message, and have not opted out. Where this exception applies, our GDPR basis is our legitimate interest in promoting similar products to existing customers.
  • Analytics and advertising: with your consent, to understand website use, measure campaigns and personalise advertising through optional tracking technologies. Refusing optional tracking does not prevent you from purchasing.

You can unsubscribe using the link or instructions in a marketing message or by contacting us. You can object to direct marketing at any time, free of charge, and we will stop using your data for that purpose. Order and service messages may still be sent where necessary.

Who receives personal data

We share information only where necessary for the purposes described above. Recipients may include Shopify, payment providers, IT and hosting providers, customer relationship and appointment systems, email service providers, delivery and installation partners, and brands or manufacturers involved in fulfilling an order or warranty.

We may also disclose relevant information to professional advisers, insurers, courts, regulators or public authorities where necessary and lawfully justified. Providers acting as processors must process information under appropriate contractual instructions. Some recipients, including certain payment providers and platforms, may act as independent controllers for their own purposes.

If you consent to relevant advertising technologies, advertising partners such as Meta and Google may receive identifiers and information about your interaction with our website. Their own privacy notices explain their processing. We do not sell your personal data.

Shopify and connected services

Shopify provides the platform used to operate our online store and processes personal data to provide that service. Shopify privacy information is available at https://www.shopify.com/legal/privacy.

Shopify enhanced features. To help protect, grow and improve our business, we use certain Shopify enhanced features (Shopify Network Intelligence) that incorporate data from your interactions with our store, along with data from other merchants and from Shopify, for example to improve products, ad targeting and personalisation. In these circumstances, Shopify is responsible for the processing of your personal data, including for responding to requests to exercise your rights over the use of your personal data for these purposes. To learn more, see the Shopify Consumer Privacy Policy. You can exercise your rights over this processing through the Shopify Privacy Portal.

The connected services that handle personal data for us are:

  • Shopify, including Shopify Payments, the Shop app and Shopify Messaging: online store, checkout, payments and customer messages.
  • PayPal: payments, where you choose to pay with PayPal.
  • Klaviyo: email marketing and newsletter subscriptions.
  • Xero: accounting and invoicing.
  • MotionTools: delivery planning and management.
  • Growy: our website virtual assistant (chatbot), when available, which handles the questions and details you share in a chat.
  • Meta and Google: website analytics and advertising measurement, only where you accept the relevant cookies.

International transfers

Some providers, including Shopify, Klaviyo, PayPal, Xero, Meta and Google, may process personal data outside the European Economic Area. Where this occurs, transfers must be covered by an applicable European Commission adequacy decision or other appropriate safeguards, such as the European Commission's Standard Contractual Clauses, together with additional measures where required. Contact us for information about the safeguards applicable to your data and how to obtain a copy, subject to necessary redactions.

How long we keep personal data

We keep personal data only for as long as necessary for its purpose, taking account of legal obligations, warranty support, disputes and applicable limitation periods. Different records are kept for different periods:

  • Enquiries, appointments and unsuccessful quotations: 2 years from our last contact with you.
  • Orders, invoices and accounting records: 10 years from the end of the financial year in which the transaction took place, as required for tax and accounting purposes.
  • Warranty, complaint and dispute records: for the relevant warranty period, plus 5 years after the matter is closed.
  • Marketing subscription information: until you unsubscribe, withdraw consent or object, subject to periodic reviews of whether continued retention is necessary. We may retain a minimal suppression record to ensure we respect your choice, and evidence of consent where necessary to demonstrate compliance.
  • Technical and security logs: 12 months.
  • Cookie consent records: 12 months, after which we ask for your choice again. Expiry of a cookie does not necessarily mean that related personal data has been deleted.

When no longer required, data is securely deleted or irreversibly anonymised, subject to appropriate backup deletion cycles and any justified legal hold.

Protecting personal data

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or disclosure. Access is limited to people who need information for their work. No online system can be guaranteed completely secure.

Your rights

Subject to the conditions and exceptions in applicable law, you may request access to your personal data, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your situation. Your right to object to direct marketing applies at any time.

Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. To exercise your rights, email info@domestica.com.mt. We may request proportionate information to verify your identity. We normally respond within one month; where a lawful extension is necessary, we will explain the reason within that month.

You may complain to the Office of the Information and Data Protection Commissioner in Malta at https://idpc.org.mt/, or to another competent supervisory authority. You do not have to contact us before making a complaint.

Automated decisions and profiling

Payments made through our online store are checked automatically for signs of fraud, and orders that may be at risk are flagged. Flagged orders are reviewed by a member of our team and are not cancelled automatically. Where you consent to analytics and advertising technologies, information about your use of our website may be used to personalise the advertising you see. We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you.

Cookies and similar technologies

Cookies are small files stored on your device. Our website may also use pixels, local storage and similar technologies. The choices described below apply to relevant technologies, not only to cookies.

  • Strictly necessary: support functions such as security, the shopping cart, currency and region settings, checkout and remembering your privacy choices. They do not require consent where they meet the legal exemption for a service you explicitly request.
  • Preferences: remember optional settings or features. Whether a particular preference technology requires consent depends on its function and the applicable exemption; optional technologies that do not qualify remain off until you consent.
  • Analytics: help us understand website use, through Shopify analytics and Google.
  • Marketing: measure advertising and help advertising partners show relevant advertisements, through the Meta Pixel, Google advertising tools and Klaviyo.

We obtain consent for these optional technologies where required.

Managing your choices

Our consent banner allows you to accept all optional technologies, reject non-essential technologies, or manage your choices by category. Optional choices are off by default. Continuing to browse, scrolling or closing the banner does not constitute consent.

You can change or withdraw consent at any time using the Cookie preferences link in the footer of our website. Withdrawal stops future consent-dependent tracking; it does not undo processing that lawfully occurred before withdrawal. You may also use your browser settings to delete or block cookies, although blocking necessary cookies may affect essential website functions.

Details of the cookies used by our Shopify store, including their purposes and lifetimes, are available at https://www.shopify.com/legal/cookies. The optional technologies used on our website, their providers and categories are shown in the Cookie preferences panel.

Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. We will publish the revised version with an updated date and provide additional notice or request fresh consent where required.