Privacy Policy
- Introduction
The Convenience Shop Limited (“TCS”/”we”/”us”/”our”/”) are committed to protecting and respecting your privacy. We are pleased to provide you with our privacy notice and request you to read it carefully.
We have created this privacy notice to explain:
- how we use any personal data that we receive from you or may collect about you, and
- your privacy rights under applicable privacy laws
By accessing or using the my.mt website, the ‘My’ mobile application, and any associated digital platforms, services or domains (collectively, the “Platform“), and in particular by submitting your personal data to us, you acknowledge that you have read and understood this Privacy Notice and consent to the collection, use and processing of your personal data as described herein.
This Privacy Notice applies whether you access the Platform through an internet browser, a mobile application, or any other digital channel made available by TCS.
References in this Privacy Notice to the “My App” include any mobile application operated by or on behalf of TCS and made available for download on mobile devices. References to the “Website” include all websites, microsites and online services operated by or on behalf of TCS.
Our use of your personal data is subject to your instructions, the EU General Data Protection Regulation (“GDPR“), other relevant Maltese and EU legislation and our professional duty of confidentiality.
For the purposes of the GDPR, the Data Controller is:
The Convenience Shop Limited of 8, Triq Hal-Luqa, Qormi, QRM 9072, Malta
If you wish to request any clarification or additional information in relation to this privacy notice, or you may wish to exercise any of your rights in relation to your personal data, please send us an email on [email protected].
Any changes we may make to our Privacy Notice in the future will be posted on this page. We recommend that you check this page from time to time to take notice of any changes we make, as they are binding on you if you provide us with information after such a change has been made.
- Key terms
| Data Controller | The person that determines the purposes and means of the processing of personal data |
| Personal data | Any information relating to an identified or identifiable natural person |
| Processing | Any operation which is performed on personal data such as collection, storage, use and erasure |
| Special Category Data | Personal Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic and biometric data and data concerning health, sex life or sexual orientation |
- Personal Data that we collect about you
We may collect, use, store and otherwise process various categories of personal data relating to you, depending on your interactions with our Website, My App, products and services. The categories of personal data we may process include:
- Identity Information: information which identifies you as an individual, such as your name, title, date of birth, gender, username, customer identification details, and any information contained in other media submitted by you;
- Contact Information: information enabling us to communicate with you, including your residential, postal, billing or delivery address, email address and telephone number.
- Payment Information: information required to process payments and refunds, including bank account details, card details and other payment-related information.
- Purchase and Transaction Information: details relating to products or services purchased, orders placed, payments made, refunds issued, loyalty programme activity, and other transactions conducted through our Website, My App or physical stores.
- Usage Information: information concerning how you interact with our Website, My App and other services, including IP Address;
- Marketing and Communication Information: records of your marketing consents, communication preferences, subscription settings and your interactions with marketing campaigns, newsletters and promotional communications.
- Customer Service Information: records of enquiries, complaints, requests, correspondence and other communications exchanged between you and us, whether through customer support channels, social media, email, telephone or other means;
- Recruitment Information: where you apply for employment or engagement with us, we may collect information contained in your application, curriculum vitae, cover letter, interview notes, qualifications, employment history, references, right-to-work documentation and any other information you choose to provide during the recruitment process.
We may also collect, use and combine the above categories of personal data where necessary to provide our services, improve our operations, comply with legal obligations and protect our legitimate business interests.
However, we may also collect personal data about you through our CCTV surveillance system “the CCTV system” which we have installed outside and inside our various outlets/premises around Malta.
Signs are placed throughout our premises to inform our clients that CCTV is in operation. The CCTV system is capable of being monitored for 24 hours every day of the year. Cameras are monitored in a secure area and accessible solely by authorized staff. All images captured by the CCTV System remain the property of The Convenience Shop Limited.
- How we collect your personal data
Most of the information we process is given to us directly by you. This may occur when you complete forms on our website, subscribe to updates or newsletters, contact us by email, telephone or other means, submit enquiries or requests, interact with us through social media platforms, participate in surveys, competitions or promotional activities, report issues relating to our website or services, or otherwise provide information in the course of engaging with us. The information collected may include your name, contact details, correspondence, preferences and any other personal data that you choose to share with us.
When you visit our website, we may automatically collect certain technical information relating to your device and use of the website. This may include your IP address and other information relating to your interaction with the website. Such information is collected to ensure the proper functioning, security and improvement of the website and our services.
We may collect personal data in connection with recruitment activities, including where you submit an application for employment, provide a curriculum vitae, attend interviews, undertake assessments, communicate with us regarding a vacancy, or where we receive information from referees, recruitment agencies or publicly available professional sources such as LinkedIn.
- How we use and/or process your personal data
We will only process your personal data where we have a lawful basis for doing so. Depending on the circumstances, we may process your personal data where:
- it is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract;
- it is necessary for the purposes of our legitimate interests, provided that such interests are not overridden by your rights and freedoms;
- it is necessary for compliance with a legal or regulatory obligation to which we are subject; or
- you have provided your consent to the relevant processing activity.
We may rely on one or more of the above legal bases depending on the purpose for which your personal data is processed. We may also combine information obtained from different sources where this is necessary and proportionate for the purposes described below.
We may use your personal data to provide and administer our products and services, manage our relationship with you, respond to enquiries, requests and complaints, communicate with clients and other stakeholders, comply with legal and regulatory obligations, protect our personnel, premises, systems and assets, detect and prevent fraud and other unlawful activities, and maintain, secure and improve our website and services.
We may process personal data relating to applicants for the purposes of evaluating applications, assessing suitability for employment, conducting interviews, verifying qualifications and experience, obtaining references, carrying out pre-employment checks where permitted by law, communicating with candidates, maintaining recruitment records and defending or pursuing legal claims arising from the recruitment process.
- Tracking Technologies and Cookies
- Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if you do not accept Cookies, you may not be able to use some parts of our Service. Unless you have adjusted Your browser setting so that it will refuse Cookies, our Service may use Cookies.
- Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).
Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser. Learn more about cookies on www.aboutcookies.org.
We use both Session and Persistent Cookies for the purposes set out below:
- Necessary / Essential Cookies Type: Session Cookies Administered by: Us Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.
- Cookies Policy / Notice Acceptance Cookies Type: Persistent Cookies Administered by: Us Purpose: These Cookies identify if users have accepted the use of cookies on the Website.
- Functionality Cookies Type: Persistent Cookies Administered by: Us Purpose: These Cookies allow us to remember choices You make when You use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You having to re-enter your preferences every time You use the Website.
For more information about the cookies we use and your choices regarding cookies, please visit our Cookies Policy or the Cookies section of our Privacy Policy.
- With whom we share your data
We do not share your data with third parties, except with the following persons and in the indicated circumstances:
- service providers – we may disclose your personal data to third party service providers that provide us with services. These include cloud storage providers and website hosting providers, professional advisers, auditors, insurers, payment providers, IT service providers;
- other third parties – where necessary to carry out your instructions.
We may also disclose your personal data in response to any requests made from law enforcement agencies, government entities or public authorities, where we have a duty to disclose or share your personal data in order to observe any legal or regulatory obligation or request.
We may also share your personal data with other parties in the event of a corporate reorganisation and/or disposition of our business, such as potential buyers of all or part of our business.
- Where your personal data is held
Transfers of personal data outside the EEA are subject to specific EU and Maltese data protection laws.
- Personal Data retention period
We will retain your personal data even after the completion of our services to you. We will need to keep your personal data after we have provided you with our services in order to comply with our record keeping requirements in terms of the law and to be able to respond to any questions, complaints or claims made by you.
Similarly, CCTV Surveillance footage derived from the CCTV system is generally retained for a period of up to 30 days, unless required for the investigation of an incident, legal proceedings, law enforcement purposes or compliance with applicable legal obligations.
We will not collect more data than we require or retain your data for longer than necessary to fulfil the purposes outlined in this notice.
- Your rights with respect to your Personal Data
You have the following rights if you reside in the EU:
| Right of Access |
| The right to access and be provided with a copy of your personal data. |
| Right to Rectification |
| The right to require us to correct any inaccurate personal data about you. |
| Right to be forgotten |
| The right to require us to delete your personal data in certain circumstances. |
| Right to restriction of processing |
| The right to require us to restrict processing your personal data in certain circumstances. |
| Right to data portability |
| The right to receive your personal data which you provided to us, in a structured, commonly used and machine-readable format and the right to transmit that data to another data controller in certain circumstances. |
| Right to object |
| The right to object to the processing of your personal data in certain circumstances which include continued processing of your data carried out for the purpose of our legitimate interests. |
| Right not to be subject to automated processing |
| The right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or significantly affects you. |
Should you require any further information on each of the above rights or would like to exercise any of them, please contact us on [email protected].
- Protecting your personal data
We have implemented security measures to protect your personal data that we collect from being used or accessed unlawfully or accidentally lost. We only grant access to your personal data to those persons who have a genuine need to access it. Those processing your personal data are subject to the duty of confidentiality.
- Complaints
We would like to resolve any concern that you may have about the processing of your personal data directly with you. However, you have the right to lodge a complaint with a supervisory authority, in the EU state in which you work, reside or where the alleged infringement of data protection laws took place. The supervisory authority in Malta is the Office of the Information and Data Protection Commissioner which may be contacted at https://idpc.org.mt/file-a-complaint/
Last updated on 9 November 2026
)