Privacy Policy
Last updated: 7 October 2026
This policy explains what personal data JCI Malta collects through this website, why, and what your rights are. In short: we collect only what we need to run events and memberships, we do not use advertising or analytics, and we do not sell or trade your data.
1. Who we are
This website is run by Junior Chamber International Malta (“JCI Malta”, “we”), a voluntary organisation enrolled in Malta under number VO/0208. JCI Malta is the controller of the personal data described here.
JCI Malta
Malta Chamber of Commerce
Exchange Building, Republic Street
Valletta VLT 1117
Email: malta (at) jci.cc
2. What we collect and why
When you visit the website
The website is hosted by Cloudflare. To deliver pages and protect the site against misuse, Cloudflare processes technical data such as your IP address, your browser type and the pages requested. We do not run analytics, we do not build visitor profiles and we do not place advertising or tracking cookies.
Legal basis: our legitimate interest in running a secure and working website.
When you register for an event
We collect your name, your email address and the number of people you are registering. We use this to reserve your place, to contact you about the event and to know who is coming. The JCI Malta board and the organisers of that event can see the list.
For paid events you pay on a page provided by Stripe. Your card details go to Stripe and never reach us. We receive and store the amount paid and a payment reference.
Legal basis: we need this data to carry out the registration you asked for.
When you apply for membership and while you are a member
We collect your first and last name, your email address, your telephone number if you give it, the type of membership and, for student membership, where you study. During your membership we also keep its status, start and end dates, your Local Organisation, notes about your membership (for example how the fee was paid) and, if you pay by card, the Stripe references of your customer record and subscription.
We use this data to manage your membership, to collect the membership fee, to give you member prices and access to member documents, and to contact you about your membership.
If you joined through our previous website, your membership record was carried over to this one if your membership was active or had ended within the last two years. Older records were not carried over.
Legal basis: we need this data to perform the membership agreement with you. After your membership ends, we keep the record on the basis of our legitimate interest in knowing the organisation’s own history.
When you sign in to the members area
There are no passwords. You enter your email address and we send you a link that signs you in. The link works once and for 20 minutes. We store a protected fingerprint of the link, not the link itself. Once you are signed in, a cookie keeps you signed in on that device for up to 30 days, or until you sign out.
When you write to us
If you send us an email we use your message and contact details to answer you.
When you use the search
The words you type are sent to our server to find matching events. We do not store them.
3. Cookies
This website uses only cookies that are needed for a function you asked for. Because of that, there is no cookie banner.
| Cookie | When it is set | Purpose | Lifetime |
|---|---|---|---|
| jci_member | When a member signs in to the members area | Keeps you signed in | 30 days, or until you sign out |
| CF_Authorization | When a board member signs in to the administration area | Keeps the administrator signed in | 24 hours |
4. Videos
Some pages show a preview picture of a YouTube video. The picture is stored on our own website. Only when you press play is the video loaded from YouTube, in its privacy-enhanced mode. From that moment Google receives your IP address and may set its own cookies, as described in Google’s privacy policy.
5. Who processes data for us
We use a small number of service providers. They may only use the data to provide their service to us.
- Cloudflare hosts the website and the database. The database with event registrations and membership records is stored in the European Union.
- Stripe processes card payments for memberships and paid events.
- Resend delivers the emails this website sends: sign-in links for the members area, confirmations of event registrations and membership applications, and reminders when a membership is about to run out.
Some of these providers are based in the United States or may process data there. Where this happens, the transfer is covered by the safeguards the law requires, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
We do not pass your data to anyone else unless the law obliges us to.
6. How long we keep your data
- Event registrations: for three years after the event. They are then deleted automatically; only the number of people who took part is kept.
- Membership records: for as long as you are a member. After your membership ends we keep your record as part of the organisation’s register of who was a member and when. Three years after it ended we automatically remove your contact details (email address, telephone number, notes and payment references) and keep only your name, the type of membership, your Local Organisation and the dates. You can ask us at any time to delete the record altogether (see “Your rights”).
- Payment records: for as long as the law requires us to keep our accounts.
- Sign-in links: unusable after 20 minutes. Sign-in sessions end after 30 days.
7. Your rights
Under the General Data Protection Regulation you have the right to ask us for a copy of your data, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable format. Where we rely on your consent you can withdraw it at any time.
To use any of these rights, write to malta (at) jci.cc. We answer within one month.
If you are not satisfied with how we handle your data, you can complain to the Office of the Information and Data Protection Commissioner in Malta (idpc.org.mt).
8. Security
The website is served over an encrypted connection. Only board members who need it have access to the administration area, and they sign in with a one-time code sent to their own email address. No passwords and no card details are stored on this website.
9. Age
Membership and event registration are meant for adults. We do not knowingly collect data from anyone under 18.
10. Changes to this policy
When the way we handle personal data changes, we update this page and the date at the top.