Last updated: 30 August 2026

This Privacy Policy explains what data The Mediterranean Leaf collects, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR).

Who we are

The Mediterranean Leaf is an independent editorial publication operating from Marsaskala, Malta. For the purposes of this policy, The Mediterranean Leaf is the data controller responsible for the personal information you provide to us.

Contact: hello@themediterraneanleaf.com

What data we collect

We collect only the data you actively provide. We do not use analytics tracking, advertising cookies, or third-party trackers of any kind.

Newsletter subscription

If you subscribe to our newsletter, we collect:

  • Email address (required)
  • Name (optional)
  • Location (optional)

Comments

If you post a comment on an article, we collect:

  • Name
  • Email address
  • The content of your comment

Your name is displayed publicly with your comment. Your email address is not.

Cookies

We use only strictly necessary technical cookies that keep you logged in when you subscribe or comment. We do not use tracking cookies, advertising cookies, or analytics cookies.

How we use your data

We use the data you provide solely to:

  • Send you our newsletter and editorial updates (if you have subscribed)
  • Display your comments alongside articles (if you have commented)
  • Respond to inquiries you send us

We do not sell, rent, share, or trade your personal information with third parties for marketing purposes.

Where your data is stored

Your data is stored on servers physically located within the European Union.

Newsletter emails are delivered via a third-party SMTP service (Google), which may involve the transfer of your email address to the United States. This transfer is governed by Standard Contractual Clauses approved by the European Commission, providing an adequate level of data protection.

How long we keep your data

We follow a policy of data minimisation.

  • Newsletter subscribers: we retain your data as long as you are an active subscriber. If you have been inactive (no newsletter opens, no site visits while logged in) for 12 months, we will remove your data from our systems.
  • Comments: we retain comment data as long as the article remains published. You may request removal at any time.
  • Inquiry emails: we retain correspondence for as long as reasonably needed to respond to your inquiry and address any follow-up matters.

Your rights under GDPR

You have the following rights concerning your personal data:

  • Right of access — request a copy of the data we hold about you
  • Right to rectification — request correction of inaccurate data
  • Right to erasure ("right to be forgotten") — request deletion of your data
  • Right to restriction of processing — request that we limit how we use your data
  • Right to data portability — request your data in a structured, machine-readable format
  • Right to object — object to specific uses of your data

To exercise any of these rights, contact us at hello@themediterraneanleaf.com. We will respond within 30 days.

Unsubscribing

Every newsletter we send contains an unsubscribe link at the bottom. One click removes you from the mailing list. If the unsubscribe link is not working for any reason, email us at hello@themediterraneanleaf.com and we will remove you manually.

Data breaches

In the unlikely event of a data breach affecting your personal information, we will notify affected users within 72 hours of becoming aware of the breach, in accordance with GDPR requirements.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will always show when the policy was last revised. Substantial changes will be communicated to newsletter subscribers by email.

Questions

If you have any questions about this policy or how we handle your data, please contact us at hello@themediterraneanleaf.com.