Privacy policy.

The data controller for this website is Azzopardi Food Group Ltd. ("AFG", "we", "us"), a company registered in Malta under number C 53567 (VAT MT20581904).

• Address: 4, Pinto Road, Marsa, MRS 1912, Malta
• Email: [email protected]
• Phone: +356 2558 2558

Enquiries and contact forms

When you send us an enquiry through the contact form, we collect the details you give us: your name, company, email address, phone number, your company website, what the enquiry is about (supplier or partnership, trade customer, careers, press or general) and your message. Only your name, email address, the enquiry type and the message are required; the rest is optional. If you write to us about a job, we use what you send only to consider you for roles across the group.

Staff dashboard accounts

Our staff use a private dashboard to manage this website. For those accounts we store a name, work email address, role, a securely hashed password and, where enabled, two-factor authentication settings, together with records of sign-ins and changes made.

Security logs

Like most websites, our servers record technical information about requests, including your IP address, the date and time, the page requested and your browser's user agent. We use these logs only to keep the website secure, for example to detect and block abuse, spam and attacks.

Privacy-friendly analytics

We measure visits with our own first-party, cookieless analytics. It records the page viewed, the referring website, any campaign tags in the link, the type of device, browser and operating system, and the country the visit came from.

• It uses no cookies and stores nothing on your device.
• It never stores your IP address.
• To count unique visitors, it creates an anonymised visitor hash that is rotated every day, so visits cannot be linked from one day to the next or traced back to you.
• If your browser sends a Do Not Track or Global Privacy Control signal, we do not record your visit at all.

We only use personal data for clear purposes, each with a lawful basis under Article 6 of the GDPR:

We do not sell personal data, and we do not use it for automated decision-making or profiling.

• Enquiries: kept for up to 24 months after our last contact, unless you become a customer, in which case your account records are kept for as long as the law requires.
• Analytics: raw visit data is kept for up to about 13 months. After that, only aggregated totals that identify no one are kept.
• Security logs: kept for up to 12 months.
• Staff accounts: kept while the account is active and deleted or anonymised when it is closed, except where records are needed to keep an audit trail.

We share personal data only with service providers who help us run this website, under contracts that require them to protect it and use it only on our instructions:

• Hosting provider, which runs our servers and database.
• Email provider, which delivers enquiry notifications and replies.
• Google, only if you choose to load a map in the store finder (see Cookies).

Within Azzopardi Food Group, your enquiry may be passed to the group company or brand best placed to handle it (SPAR Malta, Miracle Foods, Iceland Foods Malta, ARD Discount or Valhmor). We may also disclose data where the law requires it, for example to a court or regulator.

We aim to keep personal data within the European Economic Area (EEA). If a service provider processes data outside the EEA, we make sure appropriate safeguards are in place, such as an adequacy decision by the European Commission or the Commission's Standard Contractual Clauses.

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Rectification of data that is inaccurate or incomplete.
• Erasure of your data, where there is no reason for us to keep it.
• Restriction of how we use your data in certain cases.
• Object to processing based on our legitimate interests.
• Portability, to receive data you gave us in a structured, machine-readable format.

To use any of these rights, email [email protected]. We'll reply within one month. We may ask you to confirm your identity first.

If you're unhappy with how we handle your data, you can complain to Malta's supervisory authority, the Information and Data Protection Commissioner (IDPC). We'd appreciate the chance to put things right first, so please contact us.

We don't use advertising or tracking cookies, and our analytics works without cookies.

• Your cookie choice. When you accept or decline in the cookie prompt, your browser remembers the answer in its own storage, so we don't ask again. It stays on your device.
• Maps. The store finder can show a Google Maps map. It loads only if you accept cookies or choose to load the map. Once it loads, Google may set its own cookies and receive your IP address, under Google's privacy policy.
• Staff sign-in. The only cookie this website itself sets is a strictly necessary session cookie when a member of staff signs in to the dashboard. It keeps them signed in securely and is not used for anything else. Because it is strictly necessary, it does not require consent.

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), hashed passwords, access limited to staff who need it, and two-factor authentication for dashboard accounts where enabled.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.

Questions about this policy or your personal data? Get in touch.