Privacy Policy

This website (courierexpressmalta.com) is operated by Courier Express Malta Ltd., a company registered in Malta with its registered office at 30 Triq l-Imdina, Ħal Qormi QRM 9019, Malta (the “Company”, “we”, “us”, “our”). For the purposes of the EU General Data Protection Regulation 2016/679 (the “GDPR”) and the Maltese Data Protection Act (Cap. 586), Courier Express Malta Ltd. is the data controller in respect of the personal data described in this policy.

Questions about this policy or about your personal data can be sent to privacy@courierexpressmalta.com.

This policy explains how we collect and use personal data through this website, including our quote-request form, parcel-tracking interface and any communications you send us. It does not cover services delivered under a separate written agreement, which may be governed by additional terms.

We collect the following categories of personal data:

• Identification and contact data you give us through the quote form (first and last name, business name, email address, mobile number).
• Service-request data such as your selling platform, estimated weekly order volume, the services you are interested in, delivery areas and any free-text notes you submit.
• Tracking data when you use our parcel-tracking interface (the tracking reference you enter and the result returned).
• Technical data such as IP address, browser type, device type, language, referring URL and pages visited, collected automatically through standard server logs.
• Correspondence when you contact us by email, phone or any other channel.

We do not knowingly collect special categories of personal data (for example data revealing health, religion or political opinions). Please do not submit such information through the quote form or notes field.

We process personal data on the following legal bases under Article 6 GDPR:

• To respond to your quote request and pre-contract enquiries — Article 6(1)(b) (taking steps at your request before entering into a contract).
• To deliver, manage and improve our courier services where you become a customer — Article 6(1)(b) (performance of a contract).
• To comply with legal and regulatory obligations applicable to us in Malta and the EU — Article 6(1)(c).
• To operate, secure and improve the website, prevent fraud and abuse, and maintain server logs — Article 6(1)(f) (our legitimate interests in running a safe and reliable service).
• To send service-related communications, such as a confirmation that your enquiry was received and a follow-up with a quote — Article 6(1)(b) and (f).
• To send marketing communications only where you have given your consent or where allowed under the Maltese Electronic Communications (Regulation) Act and applicable e-privacy rules — Article 6(1)(a) or (f). You can withdraw consent at any time.

Data submitted through the quote form is transmitted from your browser over an encrypted HTTPS connection to our server. Submissions are sent as an email notification to our team inbox and may be stored in service-provider systems (such as our email infrastructure and hosting platform) acting as data processors on our behalf under appropriate contractual safeguards.

We apply technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure, including access controls, encryption in transit, logging and least-privilege administration. No method of transmission or storage is completely secure, but we work to maintain protections appropriate to the sensitivity of the data.

We share personal data only with:

• Service providers who process data on our behalf (for example hosting, email delivery, analytics and customer-support tools), under written agreements that require them to protect the data and use it only for our instructions.
• Delivery and logistics partners strictly where this is necessary to fulfil a service you have requested.
• Authorities, regulators and advisors where we are required by law, in response to a lawful request, or to establish, exercise or defend legal claims.
• Successors in the event of a corporate restructuring, merger or sale, subject to the protections of this policy.

We do not sell personal data.

Some of our service providers may process personal data outside the European Economic Area (the “EEA”). Where that is the case, we rely on adequacy decisions of the European Commission or, where no adequacy decision applies, on appropriate safeguards such as the Standard Contractual Clauses approved by the European Commission. You can ask us for a copy of the safeguards in place by contacting privacy@courierexpressmalta.com.

We retain personal data only for as long as necessary for the purposes set out in this policy. Quote-form submissions that do not result in a contract are typically kept for up to 24 months for follow-up and record-keeping purposes, after which they are deleted or anonymised. Customer records are kept for the duration of the contract and afterwards for the periods required by Maltese tax, accounting and commercial law (typically up to 10 years).

Under the GDPR you have the right to:

• access the personal data we hold about you;
• request rectification of inaccurate or incomplete data;
• request erasure of your data in certain circumstances;
• restrict or object to our processing of your data;
• request portability of data you have provided to us;
• withdraw any consent you have given, without affecting the lawfulness of processing carried out before withdrawal; and
• lodge a complaint with the Information and Data Protection Commissioner (IDPC) in Malta — idpc.org.mt.

To exercise any of these rights, contact privacy@courierexpressmalta.com. We may need to verify your identity before responding.

The website uses strictly necessary cookies and similar technologies required to operate the site and remember your preferences. Where we use analytics or other non-essential cookies, we will request your consent in line with Maltese e-privacy rules. You can control cookies through your browser settings.

The website is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so we can delete it.

We may update this Privacy Policy from time to time. The “last updated” date at the top of this page shows when it was most recently revised. Material changes will be highlighted on this page.

Courier Express Malta Ltd.
30 Triq l-Imdina, Ħal Qormi QRM 9019, Malta
privacy@courierexpressmalta.com