Privacy Policy
This policy explains how DistriNode.mt collects, uses, stores, shares and protects personal data when customers browse the online shop, create an account, place an order, use alerts, collect reward points or contact us.
In brief
DistriNode.mt is the DistriNode online shop for customers in Malta. We process personal data so that customers can browse our range, create an account, order and pay, have their orders delivered, ask for help, handle returns, use the rewards programme and receive price alerts or stock alerts.
We aim to process only the information that is reasonably necessary for these purposes, protect it with appropriate technical and organisational measures, share it only where necessary or permitted by law, and give customers a clear way to submit privacy requests.
Please read this policy together with our terms and conditions, the returns page, the rewards programme page, the price and stock alerts page and any other rules that apply to specific features.
Privacy at a glance
Account, order and usage data
Name, contact details, addresses, order details, account activity, alert settings, reward points history and website usage data.
To run the online shop
We need this data to process orders, arrange delivery, answer questions sent to our customer service team and manage account features.
Only where needed
Payment service providers, couriers, suppliers, hosting services, support tools and competent authorities, where required.
Access, correction and objection
You can ask to access, correct, erase, restrict or transfer your data, object to processing or opt out of marketing.
1. Who is responsible for your data
DistriNode (DistriNode.mt) is the online shop operated by UAB KUR LT. UAB KUR LT is the controller of the personal data processed through the DistriNode.mt website, customer accounts, the ordering process, customer service channels and shop features, except where a third party acts as an independent controller under its own terms.
Controller: UAB KUR LT, company code 303192950, Laisvės pr. 125A, LT-06118 Vilnius, Lithuania; VAT number LT100008198612; email: info@distrinode.mt.
For privacy questions or requests concerning personal data, customers can contact us at the email address above or through the customer service channels on the website. Before we act on a privacy-related request, we may ask you to confirm your identity.
2. Legal framework
This policy has been prepared in accordance with European Union data protection rules, including the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), and with EU rules on electronic commerce.
The GDPR gives individuals rights over their personal data and requires data to be processed lawfully, fairly, transparently, securely and for clearly defined purposes.
3. Personal data we may collect
Exactly how much data we process depends on how you use the website. Browsing without logging in involves less data than creating an account, placing an order or using customer tools.
Identity and contact details
First name, surname, company name, email address, phone number, billing address, delivery address and recipient details.
Account and order data
Login and account details, order history, invoices, returns, refunds, messages to customer service, reward points history and alert settings.
Technical and usage data
IP address, browser type, device data, cookie IDs, session data, pages viewed, timestamps and interactions with the website.
4. How we collect information
Directly from you
When you create an account, update your profile, place an order, fill in a contact form, save an alert, request a return or contact customer service.
Automatically through the website
Through cookies, server logs, security tools, analytics, session tracking and the standard functions of the online shop.
From service providers
From payment service providers, couriers, suppliers, fraud prevention tools, support platforms or other service providers involved in the transaction.
5. Why we process personal data
| Purpose | Examples | Typical legal basis |
|---|---|---|
| PurposeAccount creation and management | ExamplesCreating a profile, logging in, showing order history, saving addresses and managing alerts. | Legal basisContract, consent or legitimate interests. |
| PurposeOrder processing | ExamplesConfirming stock, processing payment, issuing invoices, arranging dispatch and sending status updates. | Legal basisContract and legitimate interests. |
| PurposeDelivery | ExamplesSharing delivery details with couriers, suppliers' fulfilment partners or pickup point staff. | Legal basisContract and legitimate interests. |
| PurposeReturns, refunds and warranties | ExamplesItem inspections, repair records, replacement requests and refund processing. | Legal basisContract, legal obligation and legitimate interests. |
| PurposeCustomer tools | ExamplesPrice alerts, stock alerts, reward points, price history and account notifications. | Legal basisConsent, contract or legitimate interests. |
| PurposeSecurity and compliance | ExamplesFraud checks, abuse prevention, audit logs, legal record-keeping, disputes and system security. | Legal basisLegal obligation and legitimate interests. |
6. Customer account features
Registered customers can use the account tools: order history, saved addresses, reward points, price alerts, stock alerts and account notifications. These features require us to store account-level data linked to your profile.
With guest checkout (where available), we may collect less account information, but we still need the personal data required for payment, ordering, delivery and legal obligations.
7. Payment information
Payments may be processed by third-party payment service providers or through other payment methods shown at checkout. DistriNode may receive the payment status, a transaction reference, fraud check results and limited data confirming the payment.
Full card details do not need to be stored in the online shop's database when the payment is processed securely by a third-party payment service provider.
8. Who we may share personal data with
Operational service providers
Hosting, e-commerce platform services, email services, payment service providers, couriers, suppliers and customer support tools.
Product and fulfilment partners
Distributors, suppliers, manufacturers, warranty centres and logistics partners, where needed for an order, return or warranty claim.
Recipients for legal and security purposes
Regulators, law enforcement authorities, courts, professional advisers or other parties, where required by law, for disputes or for fraud prevention.
We do not sell customers' personal data as a separate product. When we share data, we do so to run the online shop, to comply with a legal obligation, for a legitimate operational need or for a transaction the customer has requested.
9. Cookies and similar technologies
DistriNode uses cookies and similar technologies to make the website work, keep customers logged in, remember shopping cart or session data, improve security, measure performance, support analytics and improve the shopping experience.
| Cookie type | Purpose | Can they be disabled? |
|---|---|---|
| TypeEssential cookies | PurposeShopping cart, checkout, login sessions, security and basic website functionality. | Can they be disabled?If you disable them, essential shop features may stop working. |
| TypePreference cookies | PurposeRemembering chosen settings and display preferences, for greater convenience on your next visit. | Can they be disabled?Usually yes, but the website may be less convenient to use. |
| TypeAnalytics cookies | PurposeUnderstanding page use, traffic patterns, errors and areas for improvement. | Can they be disabled?Your browser settings or consent tools can limit them. |
| TypeSecurity cookies | PurposeReducing fraud, protecting against bots, preventing abuse and maintaining website integrity. | Can they be disabled?If you disable them, access may be restricted or security reduced. |
10. Direct marketing
We may send messages related to the online shop, such as order updates, delivery notifications, account notifications, reward points reminders, price or stock alerts, return updates and security messages, because these are necessary for the services the customer uses.
Marketing messages, if we send any, must be based on consent or another lawful basis under the GDPR and the applicable rules on electronic communications. You can unsubscribe using the method shown in the message or by contacting us.
If you unsubscribe from marketing, you will still receive necessary messages about transactions, your account, orders, alerts, reward points, returns or security.
11. Children's privacy
DistriNode is intended for customers who have the legal capacity to enter into contracts or who act with appropriate consent and supervision.
We do not knowingly target children who create an account or buy online without the involvement of a parent, guardian or authorised adult.
12. Security measures
We use reasonable technical and organisational measures to protect personal data against loss, unauthorised access, misuse, disclosure, alteration or destruction. These may include access controls, secure hosting, encrypted connections, security monitoring, account management, backups and operational procedures.
No online system is completely secure. Customers should keep their passwords safe, use secure devices, not share their login details, protect their email accounts and tell us about any suspicious account activity.
If a notifiable security incident occurs, DistriNode will take the reasonable steps required by applicable law, including notifying affected data subjects and/or the supervisory authority, where applicable.
13. Retention periods for personal data
Order and invoice data
Kept for as long as accounting and tax law requires. Within that period, we also use this data for audits, warranty claims, returns, disputes and legal record-keeping.
Account data
Kept until the account is deleted. Order and invoice data linked to the account is then kept for as long as the law requires.
Marketing and alert data
Marketing consents and newsletter subscriptions are kept until you withdraw your consent or unsubscribe. Alert settings are kept for as long as the feature is active, or until you disable the alert or ask us to delete them.
| Data | Retention period |
|---|---|
| DataAccount data | Retention periodUntil the account is deleted. |
| DataOrder and invoice data | Retention periodFor as long as accounting and tax law requires. |
| DataMarketing consents and newsletter | Retention periodUntil you withdraw your consent. |
| DataTechnical log files | Retention periodUp to 12 months. |
We may keep some information after your account has been deleted or after a privacy request, where retention is required or permitted because of legal obligations, accounting, fraud prevention, warranties, disputes, order history, regulatory obligations or legitimate business records.
14. Data processing outside the EEA
DistriNode may use suppliers, distributors, manufacturers, payment service providers, hosting infrastructure, email services, analytics tools or support systems that process data outside the European Economic Area (EEA).
When personal data is transferred to another country, we aim to do so only on a lawful basis and with appropriate safeguards: contractual protection, the customer's consent, performance of a contract, an adequate level of protection or another permitted ground.
15. Your privacy rights
| Right | What it means | Important note |
|---|---|---|
| RightAccess | MeaningYou can ask whether we hold personal data about you and request access to it. | NoteWe may need to verify your identity, and legal restrictions may apply. |
| RightRectification | MeaningYou can ask us to correct inaccurate, outdated, incomplete or misleading personal data. | NoteYou can update some account details directly in your account. |
| RightErasure or restriction | MeaningYou can request erasure, destruction or restriction of processing where the law allows it. | NoteSome data may have to be kept for legal, tax, order, fraud, warranty or dispute reasons. |
| RightObjection | MeaningYou can object to certain processing of your data where the GDPR gives you that right. | NoteWe may continue processing where a lawful ground remains. |
| RightComplaint | MeaningYou can raise privacy concerns with DistriNode and, where applicable, lodge a complaint with the competent data protection supervisory authority. | NoteWe encourage you to contact us first so that we can investigate and respond. |
16. How to make a request
To make a privacy request, contact DistriNode through the contact channels on the website and state clearly what you are requesting. Include enough information for us to identify the account, order or record concerned.
Before disclosing or changing personal data, we may ask for proof of identity or authority. This protects customers against unauthorised access to their information.
We will respond within a reasonable period and in accordance with applicable law. Complex requests, archived records or third-party checks may take longer.
17. Supervisory authority
Customers who believe that their rights have been infringed can lodge a complaint with the competent data protection supervisory authority, in particular in the EU country where they live or work or where the alleged infringement took place. In Malta, this is the Office of the Information and Data Protection Commissioner (IDPC).
Current contact details and the complaints procedure can be found on the official website of the authority concerned.
18. Automated decision-making and profiling
DistriNode may use automated systems to support the online shop, for example for fraud checks, stock updates, price updates, sending alerts, calculating reward points, search results, filters and account notifications.
These systems are intended to support the online shop and customer features. If you believe an automated result has wrongly affected your account or order, please contact us and we will review it.
19. Related policy pages
| Page | Relevance to privacy |
|---|---|
| PageTerms & Conditions | RelevanceDescribes the use of the website, accounts, orders, payment, fulfilment and the related responsibilities. |
| PageReturns & Refunds | RelevanceReturn and warranty procedures may require data on orders, items, customer contacts and inspections. |
| PageShop & Earn Rewards Programme | RelevanceThe rewards programme requires account-level reward points balances, reward points history and data on qualifying orders. |
| PagePrice & Stock Alerts | RelevanceAlerts require stored data about the customer and the products they are tracking, as well as email notifications. |
| PageProduct Price History | RelevancePrice history is product price information, but usage analytics may show how customers interact with the pages. |
20. Changes to this policy
DistriNode may update this Privacy Policy from time to time to reflect changes to the website, customer tools, service providers, legal requirements or business operations.
The version published on the website applies from the time of publication, unless a specific effective date is stated. Significant changes may be highlighted separately.
We use personal data to run a clearer, safer online shop.
DistriNode's privacy principle: collect only what is needed, use it for clearly defined shop purposes, protect it responsibly and give customers practical ways to understand and manage their personal data.