Privacy
Policy

For GDPR purposes, NoBound is the data controller.

• Registered entity: Jeremy John Dingli, trading as NoBound
• Structure: Sole trader
• VAT: MT31474431
• Address: Carmelo De Lucca, St. Paul’s Bay, Malta
• Contact: noboundfaq@gmail.com

Only what’s needed to take and fulfil your order and answer your questions:

• Order & contact details — name, email, shipping/billing address, phone if provided.
• Order contents — products, sizes, quantities.
• Payment information — handled by our payment processor; we don’t receive or store your full card number.
• Correspondence — anything you email us.
• Newsletter sign-up — if you join our drop list (on the site or at /join), the email address you give us — nothing else.

• To process, pack, and ship your order.
• To communicate about your order or a return.
• To meet legal obligations, including tax and accounting records.
• To detect and prevent fraud or site abuse.
• To send you drop announcements and offers — only if you signed up for our list. We never add you automatically, and buying something does not opt you in. You can unsubscribe from any email at any time.
• To email you once, about a month after your order arrives, inviting a review of what you bought.

We don’t sell your data, and we don’t use it for targeted advertising. We only send marketing emails to people who chose to sign up for them — if you never joined the list, you’ll never get one.

We process some orders directly. For certain products, we work with vetted third‑party manufacturing and logistics partners who produce and ship items on our behalf. These partners receive only the information required to complete your order (such as product details, shipping address, and contact information).

We also use a payment processor for secure checkout, and an email service provider to send order-related messages and — if you opted in — our drop-list emails. Each third party gets only what it needs for that job — none may use your data for their own marketing.

• Contract — taking and fulfilling your order.
• Legal obligation — records required by Maltese tax and consumer law.
• Legitimate interest — keeping the site secure and preventing fraud, balanced against your rights.
• Consent — sending drop-list emails; you can withdraw it anytime by unsubscribing.

Order and transaction records are kept as long as Maltese tax and accounting law requires. Correspondence not tied to an order is kept only as long as needed to resolve your query, then deleted or anonymised.

Under GDPR you can:

• Ask what data we hold and get a copy.
• Ask us to correct inaccurate data.
• Ask us to delete data we’re not legally required to keep.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent where processing relies on it.

Email noboundfaq@gmail.com to exercise these. You can also complain to Malta’s Information and Data Protection Commissioner (IDPC) at idpc.org.mt.

We don’t use tracking, analytics, or advertising cookies. Any cookie set is a strictly necessary session token (for example, to keep checkout working) — these don’t require consent under EU law because they aren’t used to track you.

Some processors (such as our payment provider) may process data outside the EU/EEA. Where that happens, it’s covered by that provider’s GDPR-compliant safeguards, such as the European Commission’s Standard Contractual Clauses.

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) and never handling your full payment details ourselves. No method is perfectly secure, but we keep the risk as low as reasonably possible.

This site isn’t directed at children, and we don’t knowingly collect personal data from anyone under 16.

We may update this policy occasionally; material changes are dated at the top. Questions or requests: noboundfaq@gmail.com — NoBound, St. Paul’s Bay, Malta.