Privacy policy

Bags That Pay is operated by Joseph Ellul. The controller of the personal data on this site is Joseph Ellul, 5 Dolce Vita Corte, Triq San Mikiel, San Gwann, SGN 2303, Malta. This page explains what happens to information submitted on this site. It was last changed on 2026-10-06.

What we collect and why

When you send a question we collect what you enter: the token and the point you are asking about, a short description, your name and your contact details. We use them for exactly one purpose: passing your question to the issuer you asked about, as stated on the form.

Legal basis and sharing

Processing rests on your consent, given by ticking the consent box; without it the form does not submit. Questions are shared with the issuer you selected and nobody else. We never sell contact details to lists.

Retention

Enquiry records are kept for 24 months from when they are sent, then deleted, and any copy held to pass an enquiry to a firm has the name, email, phone and message removed at the same point. Aggregate statistics that identify nobody are kept indefinitely.

Analytics

This site uses cookieless, aggregate analytics. No advertising cookies, no cross-site tracking, no consent banner needed.

Your rights

You can ask what we hold about you, ask for a copy, or ask for deletion at any time: hello@bagsthatpay.com. We respond within one month. You can complain to the Office of the Information and Data Protection Commissioner (idpc.org.mt), or to the data protection authority in the EU country where you live or work.