Legal
Privacy policy
We collect the minimum data required to operate a lawful, capped, adults-only harm reduction association.
Data we collect
Name, date of birth, gender, Maltese ID number, mobile number, email address, membership application answers, images of your Maltese identity card, pre-order records and any messages you send us.
Why we collect it
To verify that applicants are adults residing in Malta, to administer a capped membership, to manage member pre-orders for in-person collection, and to comply with our obligations as an association.
Identity documents
Uploaded identity card images are stored in private, encrypted storage. They are never publicly accessible, never listed on the website and can only be viewed by authorised administrators through short-lived, expiring links.
Who can see your data
Only you and authorised administrators of the association. Members cannot see other members' data. Row Level Security is enforced at database level, not only in the interface.
Retention
Application data and identity documents are retained for as long as your membership is active and for the period required to demonstrate lawful operation. You may request deletion of your data at any time.
Your rights
You may request access to, correction of, or deletion of your personal data by contacting us at [INSERT EMAIL].
Security
Access is protected by authenticated accounts, role-based permissions, private storage buckets and database-level policies. We do not process online payments for cannabis and store no card data.