Privacy Policy

Privacy Policy and Cookie Policy

Welcome to St. Paul’s Childcare Centre’s Privacy and Cookie Policy. Here at St. Paul’s we are committed to respecting your privacy and protecting the personal data of both you and your child. This privacy policy sets out to inform you on how we look after your personal data when you visit our website (, (‘the Website’), how we process you and your child’s personal data when you apply for our childcare services, as well as how we keep such data secure.

We also inform you about your privacy rights pursuant to the General Data Protection Regulation (EU) 2016/679 of the European Parliament and Council of 27th April 2016 on the protection of personal data and on the free movement of such data (‘the GDPR’). 

  • Glossary of Terms

‘Data Controller’ is the main decision-makers – they exercise overall control over the purposes and means of the processing of personal data.

‘EEA’ means the European Economic Area or all the countries which are party to the Agreement on the European Economic Area.

‘GDPR’ means the General Data Protection Regulation (EU) 2016/679 of the European Parliament and Council of 27th April 2016 on the protection of personal data and on the free movement of such data.

‘Legitimate Interest’ means the interest of our business in conducting and managing our business to enable us to give you the best service / product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests.

‘Performance of Contract’ means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.

‘Professional Advisors’ include lawyers, auditors, bankers and insurers based in Malta who provide services which St Paul’s Childcare and Pre-learning Centre consults with. 

The version of this Privacy and Cookies Policy is currently Version 1.1 and was last updated on November 2021. This Policy applies to you until a new version is uploaded on the website and is accepted by you.

  • Who we are

  • About the Data Controller

St. Paul’s Child Care and Pre-Learning Centre is a limited liability company established in terms of Maltese law. For the purposes of the GDPR, St. Paul’s Child Care and Pre-Learning Centre is the Data Controller.

  • Scope of the Privacy and Cookie Policy

This Privacy and Cookie Policy (the ‘Privacy Policy’) sets out the ways in which St. Paul’s Childcare Centre may use your personal data.

  • Contact Details

You may contact us using the following means:

  • By Post, using the Postal Address below: St. Paul's Childcare and pre-learning centre limited, 24, Triq l-isptar tal Pieta PTA 1512 Malta
  • By telephone using the following number: +356 [-]
  • By email: [email protected] 
  • About your data

  • Data we process

The following is a list of the types of personal data we collect/process in your and your child’s regard:

Data Category

Type of Personal Data


Our legal basis for processing

Tracking Data

Data about your use of the Website

IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views, website navigation paths, and information about the timing, frequency and pattern of your use

For functionality, for security purposes, to analyse the use of the Website and to personalise and optimize content available to you on the Website

Legitimate interest

Communications Data

Data provided to us when you send us an email to request information or when you complete a ‘Contact Us’ form

Name and surname, email address, IP address, and other information you may enter into the email or form.

To reply to your queries about our childcare and related services

Legitimate interest

Registration Data

Data provided to us when you apply for a place at St Paul’s Childcare Centre for your child

Name and surname,

email address of child’s parents / guardians and their

IP address, email address, postal

address, phone number, ID card number, username and password, child’s name, age gender, date of birth, allergy and medical information, name, surname and ID card number of persons authorised to pick up the child, relationship to child, emergency contact details

To register an applicant at St. Paul’s Childcare Centre, to ensure that we have all information necessary, to provide the best care for the child

Legitimate interest / Contractual performance

Financial Data

Payment details provided for payment of any fees / expenses to St. Paul’s Childcare Centre

Cost of purchase, bank account number

To process your transactions for any fees / expenses

Contractual performance

Account History

All Data relating to your purchasing activity and patterns

Purchase history

To process your transactions for any fees / expenses. For accounting and taxation purposes

Contractual performance. Legal obligation

Daily Activities

Information about the child’s day at St. Paul’s Childcare Centre

Performance information, photos, videos and other information gathered in relation to the child on a daily basis

To provide the best possible childcare and educational service to the child and to keep the parents / guardians informed about the child’s daily activities and well-being

Legitimate interest / Contractual performance

Subscription Data 

Information that you provide to us for the purpose of subscribing to our email notifications and / or newsletters

Name and surname, email address, IP address

To send you information about our products, services and news


NOTE that you have the right to withdraw your consent, at any time, by clicking on the ‘unsubscribe’ link found in any marketing communications. You may also send an email to [-] for the purpose.

  • Cookies and other tracking mechanisms

Like most websites. St. Paul’s Childcare Centre uses cookies to collect information. Cookies are small data files of letters and numbers that are stored in your browser or the hard drive of your computer and contain information that is transferred to your computer’s hard drive. We use cookies on our Website to improve its functionality and to allow us to constantly improve the Website. When you continue to browse this Website, you are agreeing to our use of cookies.

Please note that you can alter your preferences by blocking cookies at any time, by activating the setting on your browser that allows you to refuse the setting of all or some cookies. Keep in mind, however, that blocking all cookies or even some of them will have a negative impact on the usability and rendering of many websites, including our Website. If you block cookies, you will not be able to use all the features on the Website and might not be able to view it correctly in the way it was originally intended to be displayed. If you want to know more about cookies and how to manage them, visit:

We use cookies as follows:




Google Analytics

We use this cookie as a third-party service to collect standard internet log information and details of visitors to various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find the identities of those visiting our Website.

Google Privacy Policy:

WordPress Stats

We use this cookie to be able to optimize our Website designs, gain insight on popular features, identify usage trends, track the delivery of our promotional content and, more generally, to know our market better.

WordPress Privacy Policy:

Double Click

We use this cookie to track the effectiveness of our marketing campaigns. It enables Google to serve our adverts on other sites based on your browsing history on our page and engagement with our adverts.

Google Privacy Policy:

Double Click Ad Exchange

We use this cookie to log when users view specific pages or take specific actions on our Website. This allows us to provide targeted advertising in the future.

Google Privacy Policy:

GA Audiences

We use this cookie to re-engage visitors that are likely to convert to customers based on the visitor’s on-line behaviour across web sites.

Google Privacy Policy:

Smarter Click

We use this cookie to show online advertising to people in a focused way, led by how they’ve engaged with our website.


  • Retention of Data

We keep your personal data no longer than strictly necessary for the following purposes:

  • To realize the purpose for which your personal data was originally collected;
  • As required by a specific law which we may be subject to;
  • To manage any legal claims in relation to which such data may be required as evidence.

Most data is kept for 2 years. Transactional records may be kept for up to 10 years from the performance for a contract for accounting and VAT record purposes. Should you need to know the complete list of retention periods we adhere to with respect to indicated categories of personal data, please contact us on: [insert email address]. 

  • Who has access to your Data

St. Paul’s Childcare Centre is a licensed childcare and educational business domiciled in Malta. The majority of the service providers who are able to access the Website or any of the personal information collected from or relating thereto are located within the EEA and we have data processing agreements in place with these parties. These include email service provider, web developers, affiliates, SEO agents, product suppliers, delivery and logistics, providers of professional advice (accounting and legal services) and providers of childcare software management systems. 

  • Personal Data relating to children

All data relating to a child, particularly photos and medical data, are processed under the strictest of controls.

This Website is only accessible to individuals over the age of 16. It is a parent and/or legal guardian’s responsibility to ensure that persons under the age of 16 do not complete any registration forms of any means through our Website. If you think that your child provided this kind of information on our Website, we strongly encourage you to contact us immediately and we will make it a priority to promptly remove such information from our records. If we have reason to believe that we hold unauthorised Personal Data of a person under the age of 16, we will delete it immediately.


  • Your Data Protection Rights

At any point in time during our processing of your data, you have the following rights. All requests in this regard may be made by sending an email to: [insert email address]. We will also forward your request to relevant third parties mentioned above as required.

  • Right of access – You can request a copy of the information that we hold about you.
  • Right of rectification – You can ask us to correct data that we hold about you if it is inaccurate or incomplete.
  • Right to be forgotten – in some situations, you may ask us to delete certain data we hold about you and we will always comply to the extent allowed or required by any applicable law.
  • Right to restriction of processing – in some situations, you may ask us to restrict the processing of your data.
  • Right of portability – You may ask us to transfer certain data we hold about you to another organization.
  • Right to object – You have the right to object to certain types of processing, such as direct marketing.
  • Right to object to automated processing, including profiling – You also have the right to object to the legal effects of automated processing or profiling.
  • Right to complain about how your Personal Data is being processed by us (or third parties), or about how your complaint has been handled – You can lodge a complaint directly with the Office of the Information and Data Protection Commissioner ( and with us ([insert email address]).