PRIVACY POLICY.

What we collect

• Quote & order data — name, email, brand, phone, country, delivery address, order contents and payment records. Needed to prepare quotes, produce and ship your order, and issue invoices (legal basis: contract & legal obligation).
• Enquiries — anything you send via the contact form, site chat or email, so we can reply (legitimate interest).
• Designs & artwork — files and Studio designs you upload, used only to produce your order.
• Essential cookies — to run the cart and remember preferences. We do not run third-party advertising trackers.

How we use it

To quote, produce, ship and support your orders; to send transactional emails about your order; and, only if you ask for it, occasional product updates. We never sell your data.

Sharing

Only what's necessary, with: production partners (garment specs — never your identity), couriers (DHL and local carriers — delivery details), payment providers, and our hosting provider. Some production partners are outside the EU; they receive anonymised production specifications only.

Retention

Order and invoice records are kept as required by Maltese tax law (up to 10 years). Enquiries that don't become orders are deleted within 24 months. You can ask for earlier deletion of anything not legally required.

Your rights (GDPR)

Access, rectification, erasure, restriction, portability and objection. Email aftermathmalta@gmail.com and we'll act within 30 days. You may also complain to the Information and Data Protection Commissioner (idpc.org.mt).

Security

Data is stored on EU-hosted servers over encrypted connections, with access limited to authorised staff and audited admin accounts.