Mela Privacy Policy

Last Updated: December 2025

This privacy policy describes how Mela collects, uses, stores, and protects the personal data of its users, in accordance with the EU General Data Protection Regulation (GDPR) and Maltese law.

1. Data Controller Information

For the purposes of the GDPR and applicable data protection laws, the Data Controller responsible for your personal information and the operation of the Mela platform is:

• Legal Representative: Stefan Penchev
• Contact Email: Info@melaapps.com
• Address: [Insert Physical Address, Malta]

Any reference to "Mela", "we", "us", or "our" in this policy refers to Stefan Penchev acting as the data controller.

2. GDPR Compliance: Lawfulness, Fairness, and Transparency

Mela is committed to processing personal data lawfully, fairly, and transparently. Our Privacy Policy is designed to be clear and concise, avoiding legal jargon. We regularly update this policy to reflect any changes in our data processing practices or GDPR regulations.

We ensure that our technical infrastructure (e.g., user registration, payment processing, analytics) is built with data protection in mind ("Privacy by Design"). This includes data minimization (only collecting necessary data), robust security measures (encryption, access controls), and mechanisms for users to easily exercise their rights.

3. Data Collection: Types, Purposes, and Legal Basis

We collect specific types of data such as names, email addresses, IP addresses, payment information, and shipping addresses. The purposes include order processing, account management, transaction facilitation, customer service, marketing, and security.

We process data based on the following lawful grounds:

• Consent: For marketing communications or non-essential cookies.
• Contractual Necessity: For order fulfillment, account creation, or service provision.
• Legal Obligation: For tax records or fraud prevention.
• Legitimate Interests: For platform security or analytics (with a balancing test).

Data Minimization is a key principle, ensuring that processing is adequate, relevant, and limited to what is necessary.

4. Obtaining and Managing User Consent

Your consent must be explicit, informed, and unambiguous. We do not use pre-ticked checkboxes; you must actively opt-in. If data is collected for multiple purposes (e.g., marketing and analytics), granular consent is required for each. You have the ability to withdraw your consent easily at any time.

5. User Rights

GDPR grants extensive rights to you, the user. Mela has implemented mechanisms for efficiently tracking and managing data access requests. Your specific rights include:

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure ("Right to be Forgotten"): Request the deletion of your personal data.
• Right to Data Portability: Receive your data in a structured format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Restriction of Processing: Request restriction of processing under certain conditions.

To exercise any of these rights, please contact us at Info@melaapps.com.

6. Data Security Measures and Breach Notification

Mela implements appropriate security measures, including encryption, access controls, and secure payment gateways. In the unlikely event of a data breach that poses a high risk to your rights and freedoms, Mela will notify the relevant supervisory authority (the Information and Data Protection Commissioner - IDPC in Malta) within 72 hours and inform affected customers without undue delay.

7. Overview of Data Processing Activities

If you have any questions about this policy or your data, please contact Stefan Penchev at Info@melaapps.com.