Legal and Regulatory Information

Effective date: 28/09/2026

1. Introduction

COLIBRIX ONE is a commercial brand and trading name used within the Mellifera group in connection with payment, financial technology, software, infrastructure, and related business solutions.

The website available at COLIBRIX ONE (the “Website”) is operated and managed by Mellifera Operations Limited (“MOL”), a company incorporated under the laws of Malta.

COLIBRIX ONE is not itself a separate legal entity, regulated institution, or financial institution.

The purpose of this page is to provide transparency regarding:

the ownership and operation of the Website;
the entities using the COLIBRIX ONE brand;
the distinction between regulated and non-regulated activities;
and the legal framework applicable to the services presented on the Website.

2. Website operator

The Website is owned and operated by:

Mellifera Operations Limited
Registered in Malta under company registration number C 105114.
Registered office: ST Tower, Level 20, Testaferrata Street, Ta Xbiex XBX 1405. Malta

Mellifera Operations Limited is responsible for:

operation and administration of the Website;
website content management;
marketing and promotional activities;
contact forms and lead generation activities;
cookies and analytics technologies used on the Website;
general business and partnership enquiries received through the Website.

Unless expressly stated otherwise, references on the Website to products, solutions, technologies, infrastructure, integrations, or ecosystem services are presented for general informational and commercial purposes only.

3. Regulated payment and e-money services

Certain payment services, e-money services, and regulated financial services referenced within the COLIBRIX ONE ecosystem are provided separately by:

Mellifera Kartiera Limited
Registered in Malta under company registration number C 107685.
Registered office: ST Tower, Level 20, Testaferrata Street, Ta Xbiex XBX 1405, Malta.

Mellifera Kartiera Limited is authorised and regulated by the Malta Financial Services Authority (“MFSA”) as an Electronic Money Institution (“EMI”).

Authorised person ID: MKL-24227.

Where regulated payment services or e-money services are provided by Mellifera Kartiera Limited:

the relevant client relationship;
onboarding process;
contractual documentation;
regulated disclosures;
and service-specific terms and conditions

shall be governed by separate Mellifera Kartiera Limited contractual documentation and regulatory framework.

Nothing on this Website shall be interpreted as meaning that Mellifera Operations Limited itself is licensed or authorized as an electronic money institution or payment institution unless expressly stated otherwise.

Any references on the Website to regulatory authorisations, licences, card scheme memberships, or regulated status (including in jurisdictions other than Malta) relate only to the specific group entity that holds the relevant authorisation or membership, and must be read together with this page.

4. Separate contractual documentation

Use of the Website does not by itself create:

a payment account;
an electronic money account;
a regulated client relationship;
or any contractual entitlement to regulated financial services.

Any regulated services provided by Mellifera Kartiera Limited are subject to:

separate onboarding and due diligence procedures;
applicable regulatory requirements;
and dedicated contractual documentation, including separate service terms, policies, and disclosures.

Clients using regulated services may therefore be required to accept additional terms and provide further information as part of the onboarding and compliance process.

5. Website content and informational purposes

The content available on the Website is provided for general informational and commercial purposes only.

Nothing contained on the Website constitutes:

legal advice;
financial advice;
investment advice;
tax advice;
regulatory advice;
or a binding offer to provide regulated financial services.

Certain services, products, or functionalities described on the Website may:

be subject to jurisdictional limitations;
require separate regulatory approvals;
or only be available through specific group entities or third-party providers.

Availability of services may therefore depend on:

the client’s jurisdiction;
onboarding approval;
compliance requirements;
risk assessment;
and the applicable contractual framework.

6. Third-party services and infrastructure

The COLIBRIX ONE ecosystem may include integrations, infrastructure, software, or services provided by third-party providers, financial institutions, payment schemes, technology providers, or other partners.

References to third-party providers, card schemes, integrations, infrastructure, or external services do not imply:

ownership by COLIBRIX ONE;
endorsement of all third-party activities;
or assumption of responsibility for independent third-party services.

Separate terms, policies, and contractual conditions may apply where third-party services are used.

7. Privacy, cookies, and data processing

Mellifera Operations Limited acts as the data controller, within the meaning of Regulation (EU) 2016/679 (the "GDPR") and the Data Protection Act (Chapter 586 of the Laws of Malta), in respect of personal data relating to:

website browsing;
cookies and analytics;
contact forms;
marketing communications;
and general business enquiries submitted through the Website.

Further information regarding such processing is available in the Website Privacy Policy and Cookie Policy.

Such personal data is processed on one or more of the following legal bases: (a) your consent, in particular for the use of non-essential cookies and analytics technologies and for the sending of marketing communications; (b) the legitimate interests of Mellifera Operations Limited in responding to enquiries, administering and securing the Website, and preventing fraud and misuse; (c) the taking of steps at your request prior to entering into a contract; and (d) compliance with applicable legal obligations. Where processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Subject to the conditions and exceptions set out in applicable data protection law, you have the right to request access to your personal data and its rectification or erasure; to request restriction of, or to object to, its processing; to data portability; and, where processing is based on consent, to withdraw that consent. To exercise these rights, or for any question concerning the processing of your personal data, you may contact Mellifera Operations Limited or the Data Protection Officer using the details set out in Section 9 (Contact Information) below.

If you consider that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a supervisory authority, in particular the Information and Data Protection Commissioner (IDPC) in Malta (www.idpc.org.mt), or with the supervisory authority of your place of residence or work.

Where personal data is transferred outside the European Economic Area, such transfers are carried out only where an adequate level of protection is ensured or subject to appropriate safeguards in accordance with applicable data protection law. Further details, including information on retention periods, are set out in the Website Privacy Policy.

Where a user proceeds to apply for or use regulated services provided by Mellifera Kartiera Limited, additional or separate privacy notices and regulated-service documentation may apply. In relation to such regulated services, Mellifera Kartiera Limited acts as an independent data controller and is responsible, separately from Mellifera Operations Limited, for the personal data processed in connection with onboarding, customer due diligence, and the provision of regulated services. Such processing is governed by Mellifera Kartiera Limited’s own privacy notice(s) and regulatory framework. For clarity, this Website is not an onboarding channel for regulated services: any personal data required for the provision of regulated services is collected by Mellifera Kartiera Limited directly through its own onboarding process, and not through this Website.

8. Intellectual property

Unless otherwise stated, the Website content, branding, trademarks, graphics, logos, software elements, and materials displayed on the Website are owned by, licensed to, or used with permission by the relevant entities operating within the COLIBRIX ONE ecosystem.

No part of the Website may be copied, reproduced, distributed, modified, or used without prior written permission from the relevant rights holder.