Privacy policy
Last updated 17 July 2026
Draft. This wording has not been reviewed by a lawyer and the business details are not final. It is here so the page exists, not because it is ready.
This site is run from Gozo, Malta, which is in the EU, so the GDPR and the ePrivacy rules apply. In plain terms: we collect as little as we can get away with, and nothing at all until you say yes.
Cookies and analytics
We use Google Analytics to understand which pages help people. No analytics cookies are set until you accept them — if you decline, or ignore the banner, nothing is stored and nothing is sent that could identify you. You can change your mind by clearing this site's data in your browser.
Your IP address is anonymised before it reaches Google.
If you sign up to the newsletter we store your email address with our email provider for the sole purpose of sending you that newsletter. We do not sell it, rent it, or pass it on. Every email has an unsubscribe link, and it works.
Affiliate links
When you click an outbound booking link, the partner may set their own cookie to attribute the booking to us. That is their cookie under their policy, not ours. See our affiliate disclosure.
What we never do
- Sell your data.
- Fire tracking before you consent.
- Collect anything about children.
Your rights
Under the GDPR you can ask what we hold about you, ask us to correct or delete it, and complain to the Maltese Information and Data Protection Commissioner. To do any of that, contact us.
Contact
TODO: business entity, registered address and contact email — pending from Rob (BRIEF.md §15.7).