Introduction

This Privacy Policy outlines how Co Cosmetics Ltd. collects, processes, stores, and protects your personal data when you use our website, purchase our hair care products (such as shampoos, conditioners, and other cosmetics), or interact with our services, whether through our online store or physical retail locations in Malta. We are committed to ensuring compliance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and the Malta Data Protection Act (Chapter 586). For any questions regarding this Privacy Policy or your data privacy, please contact us at info@coprofessional.mt or +356 9975 0693.

What is GDPR?

The General Data Protection Regulation (GDPR, EU Regulation 2016/679) is the cornerstone of European data protection legislation. Effective since May 2018, GDPR establishes rules to grant EU citizens greater control over their personal data while simplifying the regulatory environment for businesses operating within the European Union. It applies to all organizations processing personal data of individuals in the EU, including Co Cosmetics Ltd., which operates in Malta and serves customers within the EU.

Scope of GDPR

GDPR applies to Co Cosmetics Ltd. as we process personal data of individuals in Malta and the EU, both through our online store and physical retail locations. It also applies to any third parties we engage with to provide our services. GDPR distinguishes between two types of data handlers: controllers (who determine the purposes and means of processing personal data) and processors (who process data on behalf of the controller). Co Cosmetics Ltd. primarily acts as a data controller, as defined in Article 4 of GDPR.

Your GDPR Rights

• Right to be informed: You have the right to know how your data is collected and processed.
• Right of access: You can request access to your personal data held by us.
• Right to rectification: You can request corrections to inaccurate or incomplete data.
• Right to erasure: You can request the deletion of your personal data (also known as the “right to be forgotten”).
• Right to restrict processing: You can limit how your data is processed.
• Right to data portability: You can request your data in a structured, commonly used, and machine-readable format.
• Right to object: You can object to the processing of your data for specific purposes, such as marketing.
• Rights related to automated decision-making and profiling: You have the right to not be subject to decisions based solely on automated processing.

Contact:
Co Cosmetics Ltd.
FLAT 2 BRIDGE VIEW, TRIQ IL-GIEBJA, SWIEQI, MALTA
Email: info@coprofessional.mt
Tel: +356 9975 0693

How We Protect Your Privacy

Our website and services are designed to allow you to browse anonymously without disclosing personal information. However, when you choose to interact with us—such as placing an order, contacting us via our website (e.g., through a contact form), or visiting our physical store—you may provide personal data. We process such data in strict compliance with GDPR and applicable Maltese laws to ensure your privacy and respond to your requests effectively.

From time to time, with your explicit consent, we may use your personal data to send you promotional offers or information about our hair care products and services that we believe may interest you. If you prefer not to receive such communications, you can opt out by emailing info@coprofessional.mt or using the unsubscribe link provided in our emails, where technically feasible.

Please note that our communications may relate to various aspects of our business, including both our online and physical retail operations, depending on your interactions with us.

When you purchase specific products or use certain services, you will be informed of any additional or different data privacy rules that may apply, beyond those outlined in this Privacy Policy.

Public Health Consideration: In line with public health regulations, we only accept returns of products that remain sealed and unopened, as outlined in our General Terms and Conditions.

Use of Cookies

Our website uses cookies, which are small software files stored on your device to collect information about how you use our site and to enhance its efficiency. Cookies do not identify you individually but track general usage patterns and technical details about your device.

Information collected via cookies may include:

• Date, time, duration, and frequency of your visits to our website;
• Pages viewed and any downloads initiated;
• Success or failure of page views or downloads;
• The internet address of our website or the domain name of the computer used to access it;
• Your language preferences;
• The operating system of your device and the type/version of your web browser.

You can manage cookies by adjusting your browser settings to reject all or specific cookies or to notify you when a cookie is set. However, rejecting all cookies may limit your ability to access certain features or pages on our website.

Sharing Personal Data with Third Parties

We do not share your personal data with third parties unless you have provided explicit consent or unless one of the following exceptions applies:

• To prevent, detect, or suppress fraud or other criminal activities;
• To comply with national or public security requirements;
• To address matters related to national budget, monetary, or tax obligations;
• To protect our rights, property, or those of our website users;
• To safeguard against misuse or unauthorized use of our website;
• To ensure the personal safety or property of our users (e.g., if you provide false or misleading information or impersonate someone else, we may disclose your data to assist in investigations);
• To fulfill any agreement you have with us;
• As permitted or required by law.

Personal data is never shared with third parties for marketing purposes.

Data transmitted over the internet may cross international borders, even if the sender and recipient are in the same country. As a result, your data may be transferred through countries with lower data protection standards than Malta or the EU.

Data Retention

We do not retain personal data longer than necessary for the purposes for which it was collected. Co Cosmetics Ltd. has a policy of deleting personal data older than ten (10) years unless there is a valid legal reason to retain it.

Compliance

All personal data processing by Co Cosmetics Ltd. complies strictly with the Malta Data Protection Act (Chapter 586) and GDPR (EU Regulation 2016/679).

Third-Party Websites

Our website may occasionally include links to third-party websites. We accept no responsibility for the content, availability, privacy practices, or use of such websites.

Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy at any time. Any changes will be posted on this page.

Right of Access

As a data subject under the Malta Data Protection Act and GDPR, you have the right to access and/or request rectification of your personal data processed by us.

Right to Lodge a Complaint

If you are located in an EEA country, you have the right to lodge a complaint with your local or national data protection authority. In Malta, this is the Office of the Information and Data Protection Commissioner.

Data Protection Officer

Data Protection Officer
Co Cosmetics Ltd.
FLAT 2 BRIDGE VIEW, TRIQ IL-GIEBJA, SWIEQI, MALTA
Tel: +356 9975 0693
Email: info@coprofessional.mt

Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of Malta. Any claims or disputes shall be referred exclusively to the courts of Malta.

Last Updated: May 1, 2025