How we handle your data
South Flowers keeps as little personal data as it can, uses it only to run the association, and never sells or shares it for marketing. This page explains what we collect, why, for how long, and what you can ask us to do. Last updated 27 September 2026.
Who is responsible
The data controller is South Flowers, Cannabis Harm Reduction Association 007, a non-profit association licensed in Malta under the Authority on the Responsible Use of Cannabis (Chapter 628 of the Laws of Malta). Address: Triq San Tumas 268, Fgura FGR 1609, Malta. For anything about your data write to info@southflowers.mt or call +356 2034 1508.
The waiting list
When you register your interest on our waiting-list form we ask for your full name, telephone number, email address, whether you are under 21, whether you hold a Maltese ID card or residence permit, and, optionally, whether you have been a member before. We record the date and time of your registration, which fixes your place in the queue.
We use these details for one purpose: to contact you, by phone or email, when a place becomes available, and to check in advance that you can be enrolled (Maltese law limits membership to residents aged 18 or over with a valid ID or residence permit, and applies different rules to members under 21). The legal basis is your consent, given when you tick the box on the form; you can withdraw it at any time by writing to us, and we will remove you from the list.
Right after you register we send one confirmation email. We do not send newsletters or promotional messages.
We keep waiting-list entries until you are enrolled, until you ask to be removed, or until the entry has been on the list for two years without contact, whichever comes first.
Membership records
Members are enrolled in person at the association. Maltese law requires us to verify identity, age and residence before enrolment and to keep a register of members, along with records of what is dispensed to each member within the legal limits. We process these records to comply with those legal obligations and to run the association; the Authority on the Responsible Use of Cannabis may inspect them as part of its supervision of licensed associations.
Membership records are kept for as long as you are a member and afterwards for the period the law and the Authority's rules require. They are stored at the association and are not published or shared with anyone else, except where the law obliges us to.
This website
southflowers.mt sets no cookies and runs no analytics or advertising trackers. Fonts, images and scripts are served from our own server, so visiting the site does not send your data to third parties.
Like every website, our hosting provider keeps standard server logs (IP address, time, page requested, browser type) for security and troubleshooting. They are kept for a short period and then deleted. The legal basis is our legitimate interest in keeping the site running and secure.
The site contains links to Google Maps and to the Authority's official registry. Those sites have their own privacy policies once you follow the link.
Who we use to process data
Waiting-list registrations are stored in a private Google Sheets spreadsheet and the confirmation email is sent through Google Workspace, both under our Google Workspace account. Google acts as our processor under its data processing terms; data may be stored on Google servers inside and outside the European Union, with the safeguards Google provides for such transfers (standard contractual clauses and the EU–US Data Privacy Framework). Our website is hosted by a hosting provider under a similar agreement. No one else has access to your details.
Your rights
Under the General Data Protection Regulation and the Maltese Data Protection Act you can ask us to:
- tell you what data we hold about you and give you a copy;
- correct anything that is wrong or out of date;
- delete your data, where we are not required by law to keep it;
- stop or limit how we use it, or object to a particular use;
- withdraw consent you gave earlier, for example for the waiting list.
Write to info@southflowers.mt from the address you registered with, or come to the association with your ID. We answer within one month. If you think we have handled your data wrongly you can complain to the Information and Data Protection Commissioner of Malta at idpc.org.mt.
Changes
If we change how we handle data we will update this page and the date at the top. We will not use your data for a new purpose without telling you first.