Privacy policy
Last updated: 25 September 2026
This policy explains what personal data +boost collects when you visit boost.com.mt, buy from us or contact us, why we collect it, who we share it with, and the choices you have. We have tried to keep it short and plain. If anything is unclear, email us at info@boost.com.mt.
1. Who we are
The data controller is BOOST LIMITED, SB Business Centre, Dun Karm Street, Birkirkara BKR 9038, Malta. For anything about your personal data, including exercising your rights, contact us at info@boost.com.mt.
2. What we collect and why
When you place an order
Your name, email address, phone number, billing and delivery addresses, the products you order and payment confirmation. We use this to process, deliver and support your order, handle returns, and keep the records Maltese tax and accounting law requires. Legal basis: performing our contract with you, and our legal obligations. We never see or store your full card details; payments are handled by the payment provider you choose (see section 4).
If you create an account
Your login details, order history, saved addresses, and any loyalty points. Legal basis: contract.
Marketing emails
We send you marketing emails only if you subscribe, for example by ticking “Email me with news and offers” at checkout or signing up through a form on our site. Leaving that box unticked means we will not send you marketing. Every marketing email has an unsubscribe link, and unsubscribing takes effect straight away. Legal basis: your consent.
Our marketing emails contain a small image and tracked links that tell us whether an email was opened and which links were clicked, so we can see what is useful to customers. If you do not want this, most email apps let you block images, and you can unsubscribe at any time.
Our health quiz
If you take our quiz, we collect your answers about your health goals and, if you choose to give it, your email address. Because these answers can reveal information about your health, we use them only to recommend products and send you your results, and we do not use them for advertising. You can ask us to delete your answers at any time. Legal basis: your explicit consent.
“Email me when it’s back” requests
If you ask to be told when a product is back in stock, we keep your email address and the product. We email you once when it is available again. Legal basis: your consent.
Reviews, loyalty points and subscriptions
If you leave a review, join our loyalty programme or take out a product subscription, we process your name, email, order details and the content you give us to run that feature. Legal basis: contract, or your consent where you choose to take part.
Customer service
Whatever you include when you contact us, so we can help you. Legal basis: our legitimate interest in answering you, or contract where it concerns an order.
Business (wholesale) customers
If you buy from us as a business, we process your company details and the contact details of the people we deal with, to manage the account, orders and invoicing. Legal basis: contract.
3. Cookies and similar technologies
When you first visit, a cookie banner asks for your choice. Until you accept, we only use what the shop needs to work: Shopify’s essential cookies that keep your cart, currency and checkout working. Analytics and advertising tools load only if you accept them.
If you accept, we use:
- Analytics: Google Analytics, and Contentsquare, which records how visitors move around our pages (clicks, scrolling and page views) so we can improve the site.
- Advertising measurement: Google Ads, Meta (Facebook and Instagram) and OpenAI (ads in ChatGPT), to measure whether our ads lead to visits and orders.
- Email personalisation: Klaviyo, to connect your visits to your email subscription so we can send more relevant emails.
You can change your choice at any time by clearing the cookies for boost.com.mt in your browser; the banner will then appear again. Legal basis for optional cookies: your consent.
4. Who we share your data with
We do not sell your personal data. We share it only with the service providers that run parts of our shop for us, and only what each one needs:
| Provider | What they do for us |
|---|---|
| Shopify | Hosts our online shop, checkout and customer accounts; essential cookies |
| Shopify Payments, PayPal and the wallets offered at checkout (such as Apple Pay) | Process your payment |
| Our delivery partners | Deliver your order (name, address, phone) |
| Klaviyo | Sends our emails (order updates, marketing if subscribed, back-in-stock alerts), sign-up forms, the health quiz |
| Judge.me | Product reviews and review-request emails |
| BON Loyalty | Our loyalty points programme |
| Appstle | Product subscriptions |
| SparkLayer | Our wholesale ordering portal for business customers |
| Analytics and advertising measurement (only with your consent) | |
| Meta | Advertising measurement on Facebook and Instagram (only with your consent) |
| OpenAI | Advertising measurement for ads in ChatGPT (only with your consent) |
| Contentsquare | Website analytics and session recording (only with your consent) |
| Instafeed | Shows our Instagram posts on the site |
| mizziburlo, with hosting by Railway and Supabase | Our technology partner, which runs our internal tools for search, stock alerts, reporting and customer service |
Our pages also load fonts and code from content delivery networks (Google Fonts, jsDelivr and Cloudflare), which receive your IP address to deliver them. We may also disclose data where the law requires it, or to protect our rights.
5. Transfers outside Europe
Some of these providers are based in, or process data in, the United States or other countries outside the European Economic Area. Where they do, the transfer is protected by the EU–US Data Privacy Framework where the provider is certified under it, or by the European Commission’s Standard Contractual Clauses. You can ask us for details of the safeguard used for a particular provider.
6. How long we keep your data
- Orders and invoices: for as long as Maltese tax and accounting law requires us to keep them.
- Your account: until you ask us to close it.
- Marketing subscription: until you unsubscribe. After that we keep only a record that you unsubscribed, so we do not email you again.
- Back-in-stock requests: until we have emailed you, or until you ask us to remove the request.
- Quiz answers: until you ask us to delete them.
- Customer service messages: for as long as needed to deal with your request and any follow-up.
- Cookies: for the lifetime set by each cookie; you can delete them at any time in your browser.
7. Your rights
You have the right to:
- get a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it, including objecting to direct marketing at any time;
- withdraw any consent you have given, at any time, without affecting what we did before;
- receive the data you gave us in a portable format.
To use any of these rights, email info@boost.com.mt. We will reply within one month. We may ask you to confirm your identity first.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our product recommendations, including those from the quiz, are suggestions only.
8. Complaints
If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Information and Data Protection Commissioner in Malta (idpc.org.mt), or to the data protection authority where you live.
9. Children
Our shop is not intended for children under 16, and we do not knowingly collect their personal data.
10. Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change is significant, we will also say so clearly on the site.