1. Data Controller

Malta Explorers operates the website maltaexplorers.com and is the data controller responsible for your personal information. This Privacy Policy explains how we collect, use, share and protect your data in accordance with the EU General Data Protection Regulation (GDPR) and Maltese data protection law.

Contact: maltaexplorerclub@gmail.com · WhatsApp +356 7965 4501

2. Data We Collect

Booking data: your name, email address, phone number, chosen activity, date, time and number of participants.
Payment data: card payments are processed by Stripe. We never see or store your full card details — we only receive a confirmation that payment succeeded and the amount paid.
Contact enquiries: the name, email and message you submit through our contact form or send us by email/WhatsApp.
Usage & analytics data: anonymous, aggregated information such as pages visited and device type, used to improve the website.
Language preference cookie (me-lang): stores your selected site language.
Cookie consent (cookie_consent): stores your cookie banner choice.

3. Purpose & Legal Basis

We process your data on the following legal bases under GDPR:

Booking & payment data — performance of a contract: to process, confirm and deliver your reservation, and to communicate with you about it (confirmations, changes, reminders, cancellations).
Contact enquiries — legitimate interest: to respond to your questions.
Analytics — legitimate interest: to maintain, secure and improve the website.
Language preference & cookie consent — consent / legitimate interest: to remember your choices and make the site work as expected.

4. Third Parties We Share Data With

We do not sell your personal data. We share it only with the service providers necessary to deliver your booking:

Stripe — secure payment processing.
Resend — sending booking confirmation and transactional emails.
Netlify — website hosting and delivery.
Resira / Sips Water Sports Malta — the booking system and licensed activity provider. The details needed to fulfil your activity (name, contact details, activity, date, time and number of participants) are shared with the provider so they can deliver the experience.

5. Data Retention

We keep booking data for up to 2 years for accounting, tax and legal-compliance purposes. Where you have given consent for marketing, we retain that data until you withdraw your consent. You may request earlier deletion at any time, subject to applicable legal requirements.

6. Your Rights Under GDPR

You have the right to:

Access — obtain a copy of the personal data we hold about you.
Rectification — correct inaccurate or incomplete data.
Erasure — request deletion of your data ("right to be forgotten").
Portability — receive your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests.
Lodge a complaint — with the Maltese supervisory authority, the Information and Data Protection Commissioner (IDPC), at https://idpc.org.mt.

To exercise any of these rights, email maltaexplorerclub@gmail.com.

7. Cookies

We use only essential cookies and do not run third-party tracking or advertising cookies. For full details of every cookie we use and how to manage them, see our Cookie Policy.

8. Contact

For any privacy questions or requests, contact us at maltaexplorerclub@gmail.com or via WhatsApp at +356 7965 4501.