Privacy Policy
Last updated: March 2026
1. Data Controller
The data controller is Mark Adrian Sammut t/a Multisourcer, based in Malta. For any data protection enquiries, contact us at hello@multisourcer.com.
2. What We Collect
We collect the minimum data necessary to deliver our products and improve your experience:
- •Email address — provided at purchase for product delivery
- •Purchase data — transaction records, product details, payment confirmation
- •Usage analytics — anonymised page views and site performance data collected via Cloudflare Web Analytics (no cookies, no personal identifiers)
3. Legal Bases for Processing
We process your data under the following GDPR legal bases:
- •Contract performance — to deliver purchased digital products to your email
- •Legitimate interest — to maintain transaction records, prevent fraud, and improve our services
- •Consent — for marketing communications (you can withdraw consent at any time)
4. Third-Party Services
We use a limited number of trusted third-party services:
Stripe
Payment processing. Stripe handles all payment card data. We never see or store your full card number.
Resend
Email delivery. Used to send purchase confirmations and product files to your email address.
Cloudflare
Website hosting and analytics. Cloudflare Web Analytics is privacy-first: no cookies, no tracking across sites, no personal data collection.
5. Data Retention
- •Transaction data — retained for 7 years to comply with Maltese tax and accounting obligations
- •Marketing consent records — retained until you withdraw consent
- •Analytics data — aggregated and anonymised; no personal data retained
6. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- •Right of access — request a copy of the personal data we hold about you
- •Right to rectification — request correction of inaccurate data
- •Right to erasure — request deletion of your personal data (subject to legal retention requirements)
- •Right to data portability — receive your data in a structured, machine-readable format
- •Right to object — object to processing based on legitimate interest
- •Right to withdraw consent — withdraw marketing consent at any time without affecting prior processing
To exercise any of these rights, email hello@multisourcer.com. We will respond within 30 days as required by GDPR.
7. Cookies
We do not use cookies for tracking or advertising. Cloudflare Web Analytics operates without cookies. Essential cookies may be set by Cloudflare for security purposes (e.g., DDoS protection) — these are strictly necessary and do not track personal information.
Contact
For any privacy-related questions or to exercise your rights, contact us at hello@multisourcer.com.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta or your local supervisory authority.