Privacy policy
short version: we only keep what we need to run the club. we never sell it. ask and we delete it.
last updated 1 October 2026
Who we are
Bored Peach Club Ltd., registered in Malta under number C 111685, VAT MT31970834. Registered office: Level 3 Valletta Buildings, Triq Nofs In-Nhar, Valletta VLT 1103, Malta. We are the data controller. Questions: info@boredpeachclub.com.
What we collect
- Residency applications: name, email, country, disciplines, portfolio links and images, proposal, dates, notes.
- Contact form messages: name, email and what you write.
- Waitlist sign ups: your email and what you're interested in.
- Basic technical data our hosting needs to keep the site running and secure (like IP address and browser type).
Why
To review your application and reply, answer your message, tell you when a round opens, and keep the site safe. Legal basis: your consent and taking steps toward a contract with you (GDPR Art. 6(1)(a) and (b)), plus our legitimate interest in running a secure site (Art. 6(1)(f)).
Who sees it
Only the Bored Peach Club team and the selection panel. We use trusted processors for hosting, storage and email delivery, under data processing agreements. Bookings for workshops and Sunday Club happen on their own sites, which have their own policies.
How long
Applications: up to 2 years after the round closes, so we can consider you again. Messages: up to 2 years. Waitlist: until you unsubscribe. Unfinished application drafts: deleted after 6 months.
Your rights
You can ask to see, correct, export or delete your data, or object to how we use it. Email info@boredpeachclub.com. You can also complain to the Maltese data protection authority, the IDPC (idpc.org.mt).
