Privacy Policy

Malta Explorers (VAT MT32283622) operates the website maltaexplorers.com and is the data controller responsible for your personal information. This Privacy Policy explains how we collect, use, share and protect your data in accordance with the EU General Data Protection Regulation (GDPR) and Maltese data protection law.

• Booking data: your name, email address, phone number, chosen activity, date, time and number of participants.
• Payment data: card payments are processed by Stripe. We never see or store your full card details — we only receive a confirmation that payment succeeded and the amount paid.
• Contact enquiries: the name, email and message you submit through our contact form or send us by email/WhatsApp.
• Usage & analytics data: anonymous, aggregated information such as pages visited and device type, used to improve the website.
• Language preference cookie (me-lang): stores your selected site language.
• Cookie consent (cookie_consent): stores your cookie banner choice.

We process your data on the following legal bases under GDPR:

• Booking & payment data — performance of a contract: to process, confirm and deliver your reservation, and to communicate with you about it (confirmations, changes, reminders, cancellations).
• Customer record — performance of a contract / legitimate interest: we keep the details of your booking (name, contact details, language, activity and date) in our customer database, to manage your bookings, help you if you contact us and keep our records. A booking never puts you on a marketing list: we only send you news if you join our list or tick the box to hear from us, and you can unsubscribe at any time.
• Contact enquiries — legitimate interest: to respond to your questions.
• Analytics — legitimate interest: to maintain, secure and improve the website.
• Language preference & cookie consent — consent / legitimate interest: to remember your choices and make the site work as expected.

We do not sell your personal data. We share it only with the service providers necessary to deliver your booking:

• Stripe — secure payment processing.
• Resend — sending booking confirmation and transactional emails.
• Netlify — website hosting and delivery.
• Supabase — hosting of our customer database.
• Licensed activity providers — the local operators who run your booked experience, and our booking-system provider. The details needed to fulfil your activity (name, contact details, activity, date, time and number of participants) are shared with the relevant provider so they can deliver the experience.

We keep booking data for up to 2 years for accounting, tax and legal-compliance purposes. Where you have given consent for marketing, we retain that data until you withdraw your consent. You may request earlier deletion at any time, subject to applicable legal requirements.

You have the right to:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Lodge a complaint — with the Maltese supervisory authority, the Information and Data Protection Commissioner (IDPC), at idpc.org.mt.

We use only essential cookies and do not run third-party tracking or advertising cookies. For full details of every cookie we use and how to manage them, see our Cookie Policy.

For any privacy questions or requests, contact us at maltaexplorerclub@gmail.com or via WhatsApp at +356 7965 4501.