Privacy policy

Privacy Policy

Last updated: November 2025
Website: www.mysmartbff.com
Contact email: info@mysmartbff.com
Address: 183, Santa Lucia Street – Valletta – VLT 1189 – Malta

1. Data Controller

The data controller responsible for the processing of personal data is My Smart BFF, operator of the website www.mysmartbff.com.

If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at: info@mysmartbff.com.

2. Personal Data Collected

When you browse our website or make a purchase, we may collect the following personal data:

  • First and last name, postal address, email address, telephone number

  • Shipping and billing information

  • Payment information (processed via secure third-party providers such as Shopify Payments, PayPal, etc.)

  • Order history and product preferences

  • Browsing and connection data (IP address, browser type, device used)

  • Cookies and tracking technologies used for analytics and user experience personalization

This data is collected only when you voluntarily provide it, such as when creating an account, placing an order, subscribing to our newsletter, or contacting customer support.

3. Purposes of Processing

Your personal data is processed for the following purposes:

  • Order processing, payment handling, and delivery

  • Customer service communication

  • Customer account management and order tracking

  • Sending information or promotional offers where consent has been given

  • Statistical analysis and improvement of website performance and user experience

  • Compliance with legal and regulatory obligations (accounting, invoicing, fraud prevention)

4. Legal Basis for Processing

The processing of your personal data is based on one or more of the following legal grounds:

  • Performance of a contract (purchase, delivery, customer support)

  • Your consent (marketing communications, cookies)

  • Compliance with legal obligations

  • Legitimate interests pursued by My Smart BFF, including website security and service improvement

5. Data Recipients

Personal data is treated as confidential and is shared only with the following recipients where necessary:

  • Technical service providers (Shopify hosting, payment processors, shipping partners)

  • Marketing and analytics service providers (such as Google Analytics, Meta Ads, Klaviyo, if enabled)

  • Public authorities or judicial bodies where required by law

All service providers are contractually bound to ensure the confidentiality and security of your personal data.

6. Transfer of Data Outside the European Union

Shopify may store or process data in Canada and the United States. Any transfer of personal data outside the European Union is governed by the European Commission’s Standard Contractual Clauses, which ensure an adequate level of data protection in accordance with GDPR requirements.

7. Data Retention Period

Personal data is retained only for as long as necessary for the purposes outlined above:

  • Order and invoicing data: 10 years (legal obligation)

  • Customer account data: until the account is deleted or 3 years after the last interaction

  • Marketing data: until consent is withdrawn

  • Cookies: a maximum of 13 months from placement on your device

8. Your Rights Under GDPR

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access to your personal data

  • Right to rectification of inaccurate or incomplete data

  • Right to erasure (“right to be forgotten”)

  • Right to restriction of processing

  • Right to data portability

  • Right to object to processing

  • Right to withdraw consent at any time

To exercise any of these rights, please contact us at: info@mysmartbff.com.
We will respond within a maximum period of 30 days.

If you believe that your rights are not being respected, you have the right to lodge a complaint with the competent supervisory authority, in particular the Information and Data Protection Commissioner (IDPC) of Malta (www.idpc.org.mt).
EU residents may also lodge a complaint with the data protection authority in their country of residence.

9. Cookies

The website www.mysmartbff.com uses cookies and similar technologies to:

  • Improve website functionality and user experience

  • Remember shopping cart contents and user preferences

  • Measure audience and website performance

  • Deliver relevant or personalized advertising, where applicable

You can accept, refuse, or manage cookies at any time via the cookie banner or your browser settings.

10. Data Security

We implement appropriate technical and organizational measures, including SSL encryption, restricted access, firewalls, and secure backups, to protect personal data against unauthorized access, loss, or alteration.

However, no method of transmission or storage over the Internet is completely secure, and absolute security cannot be guaranteed.

11. Changes to This Privacy Policy

My Smart BFF reserves the right to update this Privacy Policy at any time.
In the event of significant changes, users will be informed by email at least 15 days before the changes take effect.
The most recent version will always be available on this page.

12. Contact

For any questions regarding this Privacy Policy or the processing of your personal data, please contact:

info@mysmartbff.com
My Smart BFF
183, Santa Lucia Street – Valletta – VLT 1189 – Malta
Tel +356 999 40 830