Privacy Policy
Last updated: 19 August 2026
ClassifiedMalta ("we", "us", "our") operates classifiedmalta.com (the "Platform"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it, in accordance with the General Data Protection Regulation (GDPR) and the Malta Data Protection Act.
By using ClassifiedMalta, you agree to the collection and use of information as described in this policy.
1. Who we are
ClassifiedMalta is a platform for meeting people in Malta through verified, moderated posts across dating, social activities, and events. For any privacy-related query, contact us at privacy@classifiedmalta.com.
2. What data we collect
Account information: name, email address, phone number, date of birth, password (hashed), locality, languages spoken, profile bio and interests.
Verification data: for Tier 1, we confirm your phone number and self-declared age. For Tier 2 (required for Dating), we collect a government ID document and a selfie for identity verification through our verification provider. We do not permanently store raw ID document images ourselves — verification is processed by our third-party provider and we retain only the verification result (verified/rejected) and a verification timestamp.
Content you provide: posts, comments, messages, reviews, reported content, and any photos you upload.
Payment information: processed by Stripe. We do not store your card details — Stripe handles all payment processing and PCI compliance on our behalf. We retain records of transaction amounts, dates, and status for accounting and legal purposes.
Usage data: pages visited, posts viewed, interactions (interests, pings, reactions), device type, browser type, IP address, and approximate location (locality-level, not GPS-precise) for the purpose of showing you relevant local content.
Communications data: messages sent through our in-platform chat are stored to enable the chat feature and for safety/moderation purposes. We do not read your private messages except in response to a report or legal requirement.
3. Why we collect this data (legal basis)
| Purpose | Legal basis | |---|---| | Creating and managing your account | Contract (performance of our Terms of Service) | | Age and identity verification | Legal obligation + legitimate interest (safety, fraud prevention) | | Processing payments | Contract | | Showing you relevant local content | Legitimate interest | | Sending service notifications (verification, receipts, safety alerts) | Contract / Legal obligation | | Sending marketing communications | Consent (you can opt out at any time) | | Investigating reports and enforcing community guidelines | Legitimate interest (platform safety) | | Complying with law enforcement requests | Legal obligation |
4. How long we keep your data
- Account data: retained for as long as your account is active, and up to 12 months after deletion to handle disputes, fraud investigation, or legal claims.
- Verification records: retained for the duration of your account plus the minimum period required by applicable anti-fraud regulation.
- Payment records: retained for 7 years in accordance with Malta tax and accounting law.
- Messages: retained for as long as the conversation exists, and preserved if subject to an active report or investigation, even after account deletion.
- Reports and moderation logs: retained for 3 years for safety and legal accountability (as required under the EU Digital Services Act).
5. Who we share your data with
We do not sell your personal data. We share data only with:
- Service providers who process data on our behalf: Stripe (payments), Twilio (SMS verification), our identity verification provider, Pusher (real-time messaging infrastructure), our hosting provider, and our email provider. Each is bound by a data processing agreement.
- Law enforcement or regulators, where required by law or to protect the safety of our users.
- Other users, limited to the information you choose to make public on your profile (display name, age, locality, bio, verification badges). Your email, phone number, and full legal name (if different from display name) are never shown to other users.
6. Your rights under GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your account and associated data ("right to be forgotten"), subject to our legal retention obligations described above.
- Restrict processing — request that we limit how we use your data in certain circumstances.
- Data portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on legitimate interest, including direct marketing.
- Withdraw consent — where processing is based on consent (e.g. marketing emails), withdraw it at any time.
To exercise any of these rights, email privacy@classifiedmalta.com. We will respond within 30 days as required by GDPR.
You also have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC), Malta's supervisory authority, at idpc.org.mt.
7. Data security
We use industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, and access controls limiting who can view sensitive data internally. No system is 100% secure, and we cannot guarantee absolute security, but we take reasonable steps to protect your data and will notify affected users and the IDPC of any data breach as required by law.
8. Children's privacy
ClassifiedMalta is strictly for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we discover an account belongs to a minor, we will terminate it and delete associated data.
9. International data transfers
Our servers and service providers may process data outside Malta and the EU. Where this occurs, we rely on providers that offer adequate safeguards, such as the EU-US Data Privacy Framework or Standard Contractual Clauses.
10. Cookies
See our separate Cookie Policy for details on the cookies we use.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified via email or an in-app notice. Continued use of the Platform after changes take effect constitutes acceptance.
12. Contact us
Email: privacy@classifiedmalta.com Data Protection queries: dpo@classifiedmalta.com
This document is provided as a comprehensive privacy policy template tailored to ClassifiedMalta's features. We recommend having it reviewed by a Malta-qualified lawyer before relying on it for live operations, particularly regarding the specifics of your verification provider's data handling and any updates to GDPR guidance.