Skip to content

Privacy policy

Last updated 2026-09-02

REVIEW REQUIRED, this text is a working draft and must be checked by a lawyer qualified in your selling jurisdiction before launch.

This policy explains what personal data OPUS CHESS collects and why. The controller is OPUS CHESS LTD, Triq San Pawl 00, Valletta VLT 0000, Malta, [email protected].

1. What we collect

To fulfil an order: your email address, the items purchased, the amount and currency, and the country used to determine tax. Payment card data is handled by Stripe and never reaches us.

If you subscribe to new title announcements: your email address and the language you were reading in.

2. Why, and on what legal basis

Order and delivery data is processed to perform the contract with you (GDPR Art. 6(1)(b)) and to meet tax record keeping duties (Art. 6(1)(c)).

Newsletter emails are sent on your consent (Art. 6(1)(a)), withdrawable at any time via the link in every message.

3. Cookies and similar technology

We set only functional cookies: your chosen language, the currency resolved from your location, and your bundle you are still building, which is stored in your browser and never sent to us as an identifier.

We do not use advertising cookies and we do not follow you across other websites.

We do record how pages are used on this site — clicks, scrolling and navigation — so we can see what is confusing or broken and fix it. The recording masks everything typed into a field, so what you enter is never captured, and it is kept for thirty days and then deleted. Write to us at any time to have your recordings removed.

4. Who else processes your data

Stripe (payment processing), Cloudflare (hosting and delivery), and our transactional email provider. Each acts under a data processing agreement. Where data leaves the EEA it is transferred on Standard Contractual Clauses.

5. How long we keep it

Invoice and transaction records are kept for the statutory retention period. Newsletter subscriptions are kept until you unsubscribe.

6. Your rights

You may request access, correction, erasure, restriction, portability, or object to processing. Write to us at the address above. You may also complain to your national data protection authority.

7. Server logs

Our host records technical request data such as IP address and user agent for security and abuse prevention, retained briefly and not used to profile you.

8. Changes

If this policy changes materially we will note the change on this page.