1. Who We Are
The Wagon Ltd. (“we”, “our”, “us”) is the data controller of your personal data.
Registered address: 12, Triq L Zamenhof Msida
Email: in**@*********td.com
Phone: +356 21344225
If you have any questions about this Privacy Policy or how we handle your data, you can contact us at pr*****@*********td.com
2. What Data We Collect
We collect and process the following types of personal data:
- Identity Data: name, surname, username, title.
- Contact Data: email address, phone number, billing/shipping address, location coordinate for ease of delivery.
- Payment Data: credit/debit card details (processed securely by our payment provider, we do not store full card details).
- Order Data: details of the products you purchase.
- Marketing & Communication Data: your preferences for receiving marketing from us.
- Technical Data: IP address, browser type, device information, cookies, and similar technologies.
3. Why We Collect Your Data (Legal Basis)
We only process your data where permitted by law. The purposes and legal bases include:
- To process and deliver your order (performance of a contract).
- To manage your account and provide customer support (legitimate interest / contact).
- To send you updates, offers, and promotions (consent – you can unsubscribe anytime).
- To improve our website and services (legitimate interest in running our business).
- To comply with legal obligations (e.g., tax and accounting requirements).
4. How Long We Keep Your Data
We keep your data only as long as necessary:
- Order records: [e.g., 5–7 years for accounting/legal requirements].
- Marketing data: until you withdraw consent or unsubscribe.
- Account data: until you request deletion.
5. Sharing Your Data
We only share your personal data with trusted third parties where necessary:
- Payment providers (to process your payment securely).
- Delivery/courier services (to deliver your order).
- IT & hosting providers (to operate our website and databases).
- Analytics & marketing tools (only with your consent, e.g., Google Analytics, Meta Pixel, email marketing providers).
All third parties are required to respect your privacy and comply with GDPR.
6. International Data Transfers
If we transfer your data outside the EEA, we ensure it is protected by:
- An adequacy decision from the European Commission, or
- Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Cookies & Tracking
Our website uses cookies and similar technologies. These may include:
- Essential cookies (needed for site functionality, e.g., shopping cart).
- Analytics cookies (to measure website performance).
- Marketing cookies (to personalise ads and promotions).
You will be asked for your consent before non-essential cookies are placed. You can change your preferences anytime in your browser or cookie settings.
(For details, see our [Cookie Policy]).
8. Your Rights
You have the following rights under GDPR:
- Right to access your data.
- Right to rectify inaccurate data.
- Right to request erasure (“right to be forgotten”).
- Right to restrict processing.
- Right to object to processing (including marketing).
- Right to data portability.
- Right to withdraw consent at any time.
- Right to lodge a complaint with your local Data Protection Authority.
To exercise your rights, contact us at pr*****@*********td.com
9. Security of Your Data
We use appropriate technical and organizational measures to keep your data secure, including encryption, secure servers, and access controls.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page with the date of update.