Baby World Malta · Last updated: 14 October 2026
Contents
- Introduction
- Who We Are
- Personal Data We Collect
- How and Why We Use Your Personal Data
- Online Orders and Payments
- Newsletters and Direct Marketing
- Cookies and Similar Technologies
- Who We Share Your Personal Data With
- International Transfers of Personal Data
- How Long We Keep Your Personal Data
- How We Protect Your Personal Data
- Your Rights Under the GDPR
- Children’s Privacy
- Third-Party Websites and Services
- Automated Decision-Making
- Changes to This Privacy Policy
- Contact Us and Complaints
1. Introduction
Baby World (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how Baby World collects, uses, stores and protects personal data when you visit our website, www.babyworldmalta.com, create an account, purchase products, contact us or subscribe to our newsletter.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Maltese Data Protection Act (Chapter 586 of the Laws of Malta), and other applicable data protection and electronic communications laws.
By using our website, you acknowledge that you have had the opportunity to read this Privacy Policy. Where consent is required, we will request it separately. Visiting our website does not, by itself, constitute consent to optional marketing or tracking cookies.
2. Who We Are
The data controller responsible for your personal data is:
Business name: Baby World
Registered legal name: Centro Management Ltd
Registered/business address: 100, Constitution Street, Mosta
Email: info@babyworldmalta.com
Telephone: +356 27411138
Website: www.babyworldmalta.com
3. Personal Data We Collect
Depending on how you interact with our website, we may collect the following categories of personal data.
A. Information you provide when contacting us
When you submit a contact form or communicate with us, we may collect your name, email address, telephone number, the content of your message and any other information you choose to provide.
B. Customer account information
When you create an account, we may collect your name, email address, telephone number, login credentials and account preferences. Passwords should be stored securely in a protected form rather than as plain text.
C. Order and purchase information
When you purchase products through our website, we may collect your name, billing address, delivery address, email address, telephone number, products purchased, order value, order history, delivery instructions and relevant transaction information.
Payments may be processed by third-party payment service providers. We do not intend to collect or store full payment card details or card security codes on our own systems. The information handled by the payment provider will depend on the payment method you select.
D. Newsletter and marketing information
If you subscribe to our newsletter or agree to receive promotional communications, we may collect your email address, name if provided, marketing preferences, consent records and information about whether you have opened or interacted with our communications, where such tracking is used and legally permitted.
E. Technical and website usage information
When you visit our website, technical information may be collected, including your IP address, browser type, device information, pages visited, access times, website activity and cookie identifiers. The precise information collected depends on the website configuration and the services enabled.
We do not intentionally request sensitive personal data through our website. Please avoid submitting such information unless it is necessary for your enquiry.
4. How and Why We Use Your Personal Data
We use personal data only where we have an appropriate legal basis under the GDPR.
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and contact forms | Legitimate interests in responding to customers, or steps taken at your request before entering into a contract, as applicable |
| Creating and managing customer accounts | Performance of a contract or steps taken at your request |
| Processing orders, payments, deliveries, returns and refunds | Performance of a contract |
| Managing invoices, accounting and tax records | Compliance with legal obligations |
| Providing customer service and handling complaints | Performance of a contract, legal obligations or legitimate interests, as applicable |
| Sending newsletters and promotional emails | Consent where required, or another lawful basis where permitted by applicable electronic marketing rules |
| Maintaining website security and preventing fraud | Legitimate interests or compliance with applicable legal obligations |
| Operating essential website functions | Performance of a contract, legitimate interests or other applicable legal grounds |
| Analysing website performance and improving our services | Consent where required for tracking technologies, or legitimate interests where legally appropriate |
Where we rely on legitimate interests, we consider our interests against your rights and freedoms.
Where personal data is necessary to complete an order or comply with a legal obligation, failure to provide that information may mean we cannot process your order or fulfil the relevant request.
5. Online Orders and Payments
When you place an order through our website, we use the relevant information to confirm and process your purchase, arrange delivery, provide order updates, handle customer service and manage returns or refunds.
We may share necessary order information with payment processors, delivery companies and other service providers involved in fulfilling your purchase.
Payment transactions are handled through the payment methods made available at checkout. Payment providers may independently process certain information under their own privacy policies.
We retain transaction and accounting records for the periods required by applicable law.
6. Newsletters and Direct Marketing
If you subscribe to our newsletter, we may send you information about Baby World, our products, promotions, special offers and other relevant updates.
Where consent is required, we will only send promotional emails after you have given your consent. You may withdraw your consent at any time.
You can unsubscribe by clicking the unsubscribe link included in our marketing emails or by contacting us directly.
We will process unsubscribe requests promptly and maintain the minimum information necessary to respect your marketing preferences and prevent further unwanted communications.
Where applicable law permits marketing to existing customers without separate consent, we will only rely on that exception when its legal conditions are met, including any applicable requirements concerning similar products and a clear opportunity to opt out.
We do not treat the purchase of a product or the creation of a customer account as automatic consent to receive promotional emails.
7. Cookies and Similar Technologies
Our website may use cookies and similar technologies to support essential website functions, remember preferences, maintain customer sessions, operate the shopping basket and checkout, and, where enabled, analyse website usage or support advertising.
Cookies may be classified as:
- Strictly necessary cookies: Required for essential website functions, such as shopping basket operations, secure login and checkout.
- Functional cookies: Used to remember preferences and improve website usability.
- Analytics cookies: Used to understand how visitors interact with our website.
- Advertising or tracking cookies: Used, where enabled, to measure advertising effectiveness or personalise marketing.
Strictly necessary cookies may be used without consent where legally permitted. Non-essential cookies and similar technologies that require consent will only be activated after valid consent has been obtained.
You can manage your preferences through our cookie consent tool, where available, and through your browser settings. You should be able to withdraw optional cookie consent as easily as you gave it.
The exact cookies, providers and retention periods depend on the services installed on our website. We will provide an appropriate cookie notice or cookie policy identifying the technologies actually in use.
8. Who We Share Your Personal Data With
We may share personal data with the following categories of recipients where necessary and lawful:
- Website hosting and technical providers: To host, maintain, secure and support our WordPress website.
- Payment service providers: To process online payments, refunds and transaction-related activities.
- Delivery and courier companies: To deliver purchased products and manage delivery issues.
- Email and newsletter providers: To send transactional emails and, where applicable, newsletters.
- IT, security and website support providers: To maintain the website, prevent fraud and resolve technical problems.
- Professional advisers: Such as accountants, auditors and legal advisers, where necessary.
- Public authorities and regulators: Where disclosure is required by law or necessary to establish, exercise or defend legal claims.
We do not sell your personal data to third parties.
Where a service provider processes personal data on our behalf, we take appropriate steps to ensure that the processing is subject to suitable contractual and data protection safeguards.
Some third-party providers may process information under their own privacy policies or act as independent data controllers for particular activities.
9. International Transfers of Personal Data
We aim to use service providers that process personal data within the European Economic Area (EEA) where appropriate.
However, some service providers may process or access personal data from countries outside the EEA.
Where personal data is transferred outside the EEA, we will ensure that the transfer complies with applicable data protection law. Depending on the circumstances, this may involve an adequacy decision, appropriate safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism.
You may contact us for further information about relevant international transfers and the safeguards applied.
10. How Long We Keep Your Personal Data
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including applicable legal, accounting, tax and reporting requirements.
Our general retention approach is as follows:
- Contact enquiries: For the period necessary to respond and manage any subsequent follow-up, normally up to 36 months unless a longer period is justified.
- Customer accounts: While the account remains active and for a reasonable period afterwards where necessary for legal compliance or the resolution of disputes.
- Order, invoice and transaction records: For the period required by applicable accounting, tax and other legal obligations.
- Newsletter subscriptions: Until you unsubscribe or withdraw your consent, subject to the minimum information necessary to maintain suppression records.
- Technical logs and security records: For a period appropriate to the security and operational purpose.
- Cookie and consent records: For the period required to manage preferences, demonstrate compliance and meet applicable legal requirements.
These periods are general guidelines. Actual retention periods may vary according to the type of record, the applicable legal requirements and the circumstances of the processing.
When information is no longer required, we will securely delete it, anonymise it or otherwise dispose of it appropriately.
11. How We Protect Your Personal Data
We take appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction.
Depending on the nature of the information and the risks involved, these measures may include access restrictions, secure hosting, software updates, security monitoring, backups and appropriate safeguards for service providers.
However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.
If a personal data breach occurs, we will assess and respond to it in accordance with applicable data protection law, including notification to the competent supervisory authority and affected individuals where legally required.
12. Your Rights Under the GDPR
Subject to the conditions and exceptions set out in applicable law, you may have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete information.
- Erasure: Request deletion of your personal data in certain circumstances.
- Restriction: Ask us to restrict the processing of your personal data in certain circumstances.
- Data portability: Receive certain personal data in a structured, commonly used and machine-readable format, or request its transfer to another controller where applicable.
- Object: Object to processing based on legitimate interests, including direct marketing.
- Withdraw consent: Withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing before withdrawal.
- Complain to a supervisory authority: Lodge a complaint if you believe your personal data has been processed unlawfully.
You may exercise your rights by contacting us using the details provided in Section 2.
We may need to verify your identity before responding to a request. We will respond within the time limits established by the GDPR, normally within one month, subject to lawful extensions where a request is complex or numerous requests have been made.
Some rights are subject to legal conditions and may not apply in every situation. We may also need to retain certain information to comply with legal obligations or establish, exercise or defend legal claims.
Further information about your rights is available from the European Commission’s data protection guidance.
13. Children’s Privacy
Baby World sells products that may be intended for children. However, our online store is intended to be used by adults purchasing products for themselves, their families or others.
We do not knowingly seek to collect personal data directly from children through customer accounts, newsletter subscriptions or other website features.
Where a customer provides information relating to a child, such as information necessary to fulfil an order or delivery, we will process it only where necessary and lawful.
If you believe a child has provided personal data to us inappropriately, please contact us so that we can assess the situation and take appropriate action.
14. Third-Party Websites and Services
Our website may contain links to third-party websites, payment services or other external platforms.
We are not responsible for the privacy practices, security or content of websites that we do not operate. When you visit an external website or use a third-party service, its own privacy policy and terms may apply.
We encourage you to review the relevant privacy information before providing personal data to third parties.
15. Automated Decision-Making
We do not intend to make decisions about customers that produce legal effects or similarly significant effects solely through automated processing, unless we inform affected individuals and have a lawful basis for doing so.
If this changes, we will provide any information required by applicable law concerning the processing involved and the rights available to affected individuals.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, website features, service providers or legal requirements.
The latest version will be published on our website with the updated date shown at the beginning of the policy.
Where required by law, we will provide additional information or seek consent for changes affecting how we process personal data.
17. Contact Us and Complaints
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
