Privacy Policy

Last updated: 12 September 2026

AVÉRA respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose and protect your personal data when you visit our website, place an order, contact us or otherwise interact with AVÉRA.

For the purposes of applicable data protection law, including the EU General Data Protection Regulation (GDPR) and applicable Maltese data protection legislation, the operator of AVÉRA is the data controller responsible for your personal data.

1. Who We Are

AVÉRA is operated by:

Zachary Bowman, sole trader
39, Piccadilly
Triq Ic-Cezalpina
Ta' Paris, Birkirkara
Malta

Email: averamalta@outlook.com

Throughout this Privacy Policy, “AVÉRA”, “we”, “us” and “our” refer to the operator of the AVÉRA online store.

2. Personal Information We Collect

Depending on how you interact with our website and services, we may collect personal information including:

• your name;
• email address;
• telephone number;
• billing and delivery address;
• order and transaction information;
• payment-related information;
• communications you send to us;
• information about your interaction with our website;
• device, browser and IP address information;
• cookie and similar technology information; and
• marketing preferences.

When you make an electronic payment, payment information may be processed by our payment service providers. AVÉRA does not necessarily receive or store your complete payment card details.

If you choose Cash on Delivery, we process the information necessary to administer your order and record payment.

3. How We Collect Your Information

We may collect personal information:

• directly from you when you place an order, contact us, subscribe to marketing or provide information through our website;
• automatically when you browse or interact with our website, including through cookies and similar technologies; and
• from service providers that help us operate our online store, process payments, fulfil orders, provide delivery services, prevent fraud, analyse website performance or provide other business services.

Our online store is hosted through Shopify, which provides the e-commerce platform that enables us to offer our products and services to you.

4. How We Use Your Personal Information

We may use your personal information to:

• process, manage and fulfil your orders;
• arrange delivery;
• process or record payments and refunds;
• communicate with you about your order;
• respond to questions and customer-service requests;
• operate, maintain and improve our website;
• prevent and detect fraud, misuse or security incidents;
• comply with accounting, tax, legal and regulatory obligations;
• maintain appropriate business records;
• send marketing communications where permitted by law; and
• understand how customers interact with our website and services.

We will not use your personal information for purposes incompatible with those described in this policy unless permitted or required by law.

5. Legal Bases for Processing

Under the GDPR, we process personal data only where we have an appropriate legal basis.

Depending on the circumstances, this may include:

Performance of a contract — for example, processing your details to accept, fulfil and deliver an order.

Legal obligations — where processing is necessary to comply with applicable tax, accounting, consumer protection or other legal requirements.

Legitimate interests — where necessary for legitimate business purposes, such as protecting our store against fraud, maintaining security, providing customer support and improving our services, provided those interests are not overridden by your rights and interests.

Consent — where we rely on your permission, for example for certain marketing communications or non-essential cookies where consent is required.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Marketing Communications

Where you have opted in, or where otherwise permitted by applicable law, we may send you information about AVÉRA products, offers and updates.

You may unsubscribe from email marketing at any time by using the unsubscribe option included in our marketing communications or by contacting us at averamalta@outlook.com.

Unsubscribing from marketing does not prevent us from sending necessary transactional communications relating to an order you have placed.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate the store, remember preferences, understand website usage, improve performance and, where enabled and permitted, support analytics or advertising.

Some cookies are necessary for the website and checkout to function. Other cookies may require your consent under applicable law.

Where required, you can manage your preferences through the cookie consent controls available on our website.

We will separately maintain appropriate information regarding the cookies and technologies used by the AVÉRA website.

8. How We Share Personal Information

We may share personal information where reasonably necessary with service providers that assist us in operating AVÉRA, including providers involved in:

• website and e-commerce hosting;
• payment processing;
• delivery and fulfilment;
• IT and website services;
• analytics;
• marketing services where enabled;
• fraud prevention and security; and
• professional, accounting or legal services.

We may also disclose personal information where required by law, regulation, legal process or a competent authority.

We do not sell your personal data.

9. Shopify

Our store is powered by Shopify.

Shopify processes certain personal information in connection with providing its e-commerce services and infrastructure to us.

Shopify may process personal data in accordance with its own privacy documentation and applicable data protection requirements.

10. International Transfers

Some of our service providers may process personal information outside Malta or the European Economic Area.

Where personal data is transferred internationally, we take reasonable steps to ensure that an appropriate legal mechanism or safeguard is used where required by applicable data protection law.

These safeguards may include adequacy decisions or approved contractual safeguards.

11. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer support and complying with legal, tax, accounting and regulatory obligations.

Different categories of information may therefore be retained for different periods.

When personal information is no longer required, we will delete or anonymise it where reasonably appropriate, subject to applicable legal obligations.

12. Security

We take reasonable organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

13. Your Data Protection Rights

Subject to applicable law, you may have rights in relation to your personal data, including the right to:

• request access to personal data we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your personal data in certain circumstances;
• request restriction of processing;
• object to certain processing;
• receive certain personal data in a portable format;
• withdraw consent where processing is based on consent; and
• lodge a complaint with the relevant data protection supervisory authority.

To exercise your rights, contact us at averamalta@outlook.com.

We may need to verify your identity before fulfilling certain requests.

In Malta, the relevant supervisory authority is the Office of the Information and Data Protection Commissioner (IDPC).

14. Children's Privacy

Our products and services are not specifically directed at children, and we do not knowingly seek to collect personal data from children contrary to applicable law.

If you believe a child has provided personal information to us inappropriately, please contact us.

15. Third-Party Links

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies before providing personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices, services, legal requirements or other operational matters.

The latest version will be published on this website with the updated date shown at the top.

17. Contact Us

For questions about this Privacy Policy, our handling of personal data or to exercise your data protection rights, please contact:

AVÉRA
Operated by Zachary Bowman, sole trader
39, Piccadilly
Triq Ic-Cezalpina
Ta' Paris, Birkirkara
Malta

Email: averamalta@outlook.com