Last updated: 4 August 2026
This policy explains what personal data Butiru Limited, trading as Takali Brewing Co., collects through this website, why we collect it, who we share it with, and the rights you have over it. We are the “data controller” for that information under the EU General Data Protection Regulation (GDPR) and Maltese data protection law.
Who we are
The data controller is Butiru Limited, a company registered in Malta with registered address at 38, Sur Santa Barbara, Valletta, Malta. Takali Brewing Co. is a trading name of Butiru Limited and has no separate legal personality.
Brewery address: 101X, Ta’ Qali Crafts Village, Attard, Malta
Email: beer@takali.mt
What we collect, and why
If you join the newsletter
We collect your email address and a note of where you signed up. We use it only to send you news about the brewery, events and new beers. We rely on your consent, and you can withdraw it at any time using the unsubscribe link in any email.
If you become a founder
When you back a founder tier we collect your name, email address, billing address, phone number and date of birth. We use this to take your order, create your founder record and give you the perks attached to your tier. The legal basis is performance of our contract with you.
We ask for your date of birth to confirm you are old enough to buy alcohol. That is a legal obligation. We store the date so we do not have to ask again, and we do not use it for anything else.
We use your phone number to reach you about scheduling — a brew day, a tasting, or your annual beer entitlement.
Your founder record
When your payment succeeds we create a founder record containing your founder number, tier, first name and email, together with the perks you are entitled to and a log of any perks redeemed at the bar (which perk, when, and which staff member served you). We keep this to honour the membership you bought.
If you refer a friend
Every founder gets a personal referral link. If someone backs a tier using your link, we record the connection between your founder record and theirs, along with the order, so we can credit your free pint and show you how many referrals you have made. When you open a referral link we store a cookie for 30 days so the referral is still credited if you buy later.
Your account
Backing a tier creates an account so you can see your certificate, perks and referral link. It holds your username, email, addresses and order history. Passwords are stored encrypted and are never visible to us.
Payments
Card payments are handled by Trust Payments. Your card details are entered directly into their secure fields and never reach our website or our servers. We only receive confirmation that a payment succeeded, plus a transaction reference.
Technical information
Our web host keeps standard server logs. We also briefly record a version of your IP address when you sign up to the newsletter, to stop automated abuse. The legal basis is our legitimate interest in keeping the site secure.
Cookies
We use cookies that are necessary for the site to work — keeping your cart, your login session and your cookie choices. These do not need consent.
With your consent we also use cookies that measure how the site is used, so we can improve it. You can accept or decline these when you first visit, and change your mind at any time using Cookie Settings in the footer.
The public Founders Wall
If your tier includes it (Grain Gang and above), your name and your founder number are shown on our public Founders Wall at takali.mt/founders. Nothing else appears there — not your email address, not your contact details, and not what you paid.
This is part of the reward you bought (“your name on our Founders webpage”), so our legal basis is performance of our contract with you. First Pour founders are not listed.
You can remove yourself at any time from Founder Status in your account, or by emailing beer@takali.mt. Removal takes effect immediately.
Who we share your data with
We do not sell your personal data. We share it only with service providers who help us run the brewery and the site, and only for that purpose:
- Trust Payments — processing card payments
- Microsoft 365 — sending our emails (order confirmations, account emails)
- Klaviyo — sending our newsletter and marketing emails
- Google — website analytics, where you have consented
- Hostinger — website hosting
We may also disclose information where the law requires it.
Transfers outside the EU
Some of these providers process data outside the European Economic Area, including in the United States. Where that happens, the transfer is covered by safeguards approved under GDPR, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
How long we keep it
- Orders and payment records — for as long as Maltese tax and accounting law requires.
- Founder records — for as long as your membership lasts, since the perks are ongoing.
- Newsletter — until you unsubscribe.
- Website analytics — for the retention period set in the analytics tool.
Your rights
Under GDPR you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- ask us to delete your data, where we are not required to keep it;
- ask us to restrict how we use it, or object to our using it;
- receive your data in a portable format;
- withdraw your consent at any time, where we rely on consent.
To exercise any of these, email beer@takali.mt. Please note that deleting your data may mean we can no longer honour your founder perks.
Complaints
If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Maltese supervisory authority:
Office of the Information and Data Protection Commissioner (IDPC)
Floor 2, Airways House, High Street, Sliema SLM 1549, Malta
idpc.org.mt
Changes to this policy
If we change how we use personal data we will update this page and change the date at the top.