Last updated: 15 January 2026

 

Relax in Gozo Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, make an enquiry, or book a stay with us.

 

This policy is designed to comply with:

​

• The EU General Data Protection Regulation (EU GDPR)

• The UK General Data Protection Regulation (UK GDPR)

• The Data Protection Act 2018 (UK)

• The Data Protection Act (Chapter 586 of the Laws of Malta)

​

1. Who We Are (Data Controller)

​

Relax in Gozo Ltd operates holiday accommodation in Gozo, Malta, including the property Dar il-Hena.

 

Data Controller: Relax in Gozo Ltd
Email: relaxingozo24@gmail.com
Location: Gozo, Malta

 

If you have any questions about this Privacy Policy or how we handle your data, you can contact us using the details above.

 

2. Personal Data We Collect

​

We may collect and process the following categories of personal data:

​

a) Information You Provide Directly

​​

• Full name

• Email address

• Telephone number

• Billing address

• Booking details (dates of stay, number of guests, special requests)

• Payment-related information (processed securely by third-party payment providers; we do not store card details)

• Communications sent to us via email, contact forms, or messaging platforms

 

b) Information Collected Automatically

 

When you visit our website, we may automatically collect:

​

• IP address

• Browser type and version

• Device type and operating system

• Pages visited and time spent on the website

• Referral source

 

This data is collected using cookies and similar technologies.

 

3. How We Use Your Personal Data

​

We use your personal data for the following purposes:

​

• To respond to enquiries and provide information about our accommodation

• To manage bookings, reservations, and guest communications

• To process payments and issue confirmations

• To comply with legal and regulatory obligations (including guest registration requirements)

• To improve our website, services, and customer experience

• To prevent fraud and ensure website security

 

We will only use your personal data where we have a lawful basis to do so.

​

4. Lawful Bases for Processing

 

Under EU and UK data protection laws, we rely on the following lawful bases:

​

• Contractual necessity: Processing is necessary to manage bookings and provide accommodation services

• Legal obligation: Compliance with Maltese and EU legal requirements (e.g. tax, accounting, guest registration)

• Legitimate interests: Operating and improving our business and website, provided your rights are not overridden

• Consent: Where you have given explicit consent (e.g. optional marketing communications or non-essential cookies)

 

You may withdraw consent at any time where consent is the lawful basis.

 

5. Cookies and Tracking Technologies

 

Our website uses cookies and similar technologies to:

​

• Ensure the website functions properly

• Analyse website traffic and usage

• Improve performance and user experience

 

You will be given the option to accept or manage cookies when visiting our website. Non-essential cookies will only be used with your consent.

​

You can also manage or delete cookies through your browser settings.

​

6. Sharing Your Personal Data

 

We do not sell your personal data.

 

We may share your data only where necessary with:

​

• Booking and property management systems

• Payment service providers

• IT and website hosting providers

• Professional advisers (e.g. accountants, legal advisers)

• Public authorities where legally required

 

All third parties are required to process your data securely and in accordance with data protection laws.

 

7. International Data Transfers

 

Some of our service providers may be located outside the European Economic Area (EEA) or the UK.

 

Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as:

​

• Adequacy decisions

• Standard Contractual Clauses approved by the European Commission or UK authorities

 

8. Data Retention

 

We retain personal data only for as long as necessary for the purposes set out in this policy, including:

​

• Booking and accounting records: retained as required by law

• Guest communications: retained for operational purposes

• Marketing data: retained until consent is withdrawn

 

When data is no longer required, it is securely deleted or anonymised.

​

9. Your Data Protection Rights

 

Under EU and UK GDPR, you have the right to:

​

• Access your personal data

• Request correction of inaccurate or incomplete data

• Request erasure of your data ("right to be forgotten")

• Restrict processing of your data

• Object to processing based on legitimate interests

• Data portability (where applicable)

• Withdraw consent at any time

• Lodge a complaint with a supervisory authority

 

Supervisory Authorities

​

• Malta: Office of the Information and Data Protection Commissioner (IDPC)

• UK: Information Commissioner's Office (ICO)

 

10. Security of Your Data

 

We implement appropriate technical and organisational measures to protect personal data against:

​

• Unauthorised access

• Loss or misuse

• Alteration or disclosure

 

These measures include secure hosting, encryption where appropriate, and limited access to personal data.

 

11. Third-Party Links

 

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. Please review their privacy policies separately.

 

12. Changes to This Privacy Policy

 

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

 

We encourage you to review this policy periodically.

 

13. Contact Us

 

If you have any questions about this Privacy Policy or how your personal data is handled, please contact:

 

Relax in Gozo Ltd
Email: relaxingozo24@gmail.com