Your information, handled carefully.
What is collected when you order, why it is needed, and the choices available to you.
Last updated: 6 October 2026
Controller
Matthew Borg Carr is responsible for personal data used to operate this shop. Contact: hello@matthewborgcarr.com. Correspondence address: To be published before pre-orders open.
Information collected
Order records can include your name, email address, telephone number, billing and delivery address, delivery country, items, amounts, order status, tracking information and correspondence. Payment providers supply transaction references and payment status; complete card numbers are not stored here.
Why it is used
Information is used to take payment, administer the contract, fulfil and deliver orders, send service messages, prevent fraud, handle returns and disputes, keep legally required records, and protect the security of the website.
Legal bases
Processing is based on performing the purchase contract, taking requested steps before a contract, complying with legal obligations, and legitimate interests in secure and effective shop administration.
Service providers and international transfers
Necessary information may be shared with payment, hosting, email, accounting, printing and delivery providers. Some providers may process data outside your country under safeguards required by applicable data-protection law.
Retention
Incomplete checkout records are retained only as long as reasonably needed for troubleshooting and fraud prevention. Paid-order, refund and accounting records are retained for the period required by applicable tax, accounting and consumer law. Data that is no longer required is deleted or anonymised.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability, and may complain to the relevant supervisory authority. Some information must be retained despite a deletion request where the law requires it.
Cookies
This website uses essential session cookies for checkout security and private administration. The hosted payment page may use its own essential technologies under the payment provider’s privacy information. Non-essential analytics should not be enabled without an appropriate consent mechanism.
Contact
Privacy requests can be sent to hello@matthewborgcarr.com.