Privacy Policy

1. Data Controller

XiriGo ("we", "us", or "our") is the data controller responsible for your personal data. We are registered in Malta and operate in compliance with the General Data Protection Regulation (GDPR) and the Malta Data Protection Act (Cap. 586). For any data protection inquiries, you may contact us at [email protected].

2. Data We Collect

We collect personal data that you voluntarily provide when applying as a vendor or subscribing to notifications. This includes: your full name, email address, phone number (if provided), business name and type, product categories, website URL, existing sales channels, and referral information. We also collect technical data through cookies, including your IP address, browser type, and usage patterns.

3. Legal Basis for Processing

We process your personal data on the following legal bases: (a) Consent — when you submit an application or subscribe to notifications; (b) Contractual necessity — to process your vendor application and manage your account; (c) Legitimate interest — to improve our services, prevent fraud, and communicate relevant updates; (d) Legal obligation — to comply with applicable Maltese and EU laws.

4. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected. Vendor application data is retained for the duration of your relationship with XiriGo and for up to 5 years thereafter for legal and audit purposes. Notification email addresses are retained until you unsubscribe. You may request deletion of your data at any time.

5. Your Rights

Under GDPR, you have the following rights: the right to access your personal data; the right to rectification of inaccurate data; the right to erasure (right to be forgotten); the right to restrict processing; the right to data portability; the right to object to processing; and the right to withdraw consent at any time. To exercise any of these rights, please contact us at [email protected].

6. Data Protection Officer

If you have any questions or concerns about how we handle your personal data, you may contact our Data Protection Officer at [email protected]. We are committed to resolving any complaints about our collection or use of your personal data.

7. Supervisory Authority

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta. The IDPC can be reached at idpc.org.mt or at Floor 2, Airways House, High Street, Sliema SLM 1549, Malta.