Last updated: 20 August 2026

Isle of Sun Malta ("we", "us") is committed to safeguarding the privacy of everyone who visits our website or books a tour with us. This policy explains what personal data we collect, why we collect it, who we share it with and the rights you have over it.

We process personal data in line with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Maltese Data Protection Act (Cap. 586). Isle of Sun Malta is the data controller for the processing described here. You can reach us at hello@isleofsunmalta.com.

1. Information We Collect

Information you give us

• Enquiries. Our contact form opens your own email application, so any message you send reaches us as an ordinary email containing your name, email address and whatever you choose to tell us. Nothing is stored on our website.
• Bookings. Bookings are made through Calendly, a third-party scheduling service. When you book, Calendly collects the details needed to confirm your place (such as your name, email address, phone number and party size) and shares them with us so we can run the tour and contact you about it.

Information collected automatically

• Analytics data. We use Google Analytics to understand how visitors use our site. It records the pages you view, how you arrived here, how long you stay, the type of device and browser you use, your approximate location (country or city, derived from your IP address, which Google Analytics does not store) and interactions such as clicking a "Book or Enquire" button. See section 3 for details.
• Server logs. Like most websites, our hosting and security providers keep standard server logs (IP address, page requested, date and time) for security and troubleshooting.

2. How and Why We Use Your Data

• To respond to your enquiries and manage your booking (performance of a contract, or steps taken at your request before entering one).
• To understand which tours and pages are popular and to improve the website and our services (our legitimate interest in running and improving our business, and your consent where the law requires it for cookies).
• To keep the website secure and prevent abuse (legitimate interest).
• To comply with legal and accounting obligations.

We do not sell your personal data and we do not use it for automated decision-making or profiling.

3. Cookies and Google Analytics

We ask before we set these cookies. When you first visit, a banner asks whether you accept analytics cookies. Nothing is set unless you accept, and declining leaves the site fully working. You can change your answer at any time using the Cookie settings link at the bottom of every page; declining also deletes any analytics cookies already stored.

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics sets cookies on your device so that it can recognise repeat visits and tell one visitor apart from another. The information is used to produce aggregated, statistical reports about how the site is used; it is not used to identify you personally.

Google may process this data on servers outside the European Economic Area, including in the United States. Such transfers are covered by the EU-U.S. Data Privacy Framework and Google's standard contractual clauses. Google Analytics user-level data is deleted automatically at the end of the retention period set in our account, which is never more than 14 months. For more information see How Google uses information from sites that use its services and the Google Privacy Policy.

Opting out of analytics

• Use the Cookie settings link in the footer of any page to withdraw your consent. This is the simplest option and takes effect immediately.
• Install the Google Analytics opt-out browser add-on, which stops Google Analytics from collecting data on any website you visit.
• Block or delete cookies in your browser settings. The site will keep working normally; we will simply no longer be able to count your visit.

We do not set any other tracking or advertising cookies. Third-party services you choose to use from our site (such as the Calendly booking page) may set their own cookies, which are governed by their respective privacy policies.

4. Third-Party Services

We rely on the following service providers, each of which processes personal data on our behalf or as an independent controller under its own privacy policy:

• Google Analytics (Google Ireland Limited) - website usage statistics, as described above.
• Calendly (Calendly LLC) - tour booking and scheduling. Your booking details are processed under the Calendly Privacy Notice.
• Google Fonts (Google Ireland Limited) - your browser downloads the fonts used on this site from Google's servers, which involves sending your IP address to Google.
• Cloudflare (Cloudflare, Inc.) - hosts the service that shows live tour availability on our pages. Requests for availability pass through Cloudflare's network, which may process your IP address for security purposes. No booking or personal details are sent through this service.
• Social media - links to our Facebook, Instagram and LinkedIn pages take you to those platforms, whose own privacy policies apply once you leave our site.

Beyond these providers, we will not share your information with third parties without your consent, except where required or permitted by law.

5. How Long We Keep Your Data

• Enquiry emails are kept for as long as needed to deal with your enquiry and for a reasonable period afterwards in case you come back to us.
• Booking records are kept for as long as required by Maltese tax and accounting law.
• Analytics data is retained by Google Analytics as described in section 3.

6. Security

The website is served over HTTPS and we implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

7. Your Rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected and incomplete data completed;
• have your data erased, or its processing restricted, in the circumstances set out in the GDPR;
• object to processing based on our legitimate interests, including analytics;
• receive the data you provided to us in a portable format;
• withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email us at hello@isleofsunmalta.com. If you are not satisfied with our response, you have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) in Malta at idpc.org.mt, or with the supervisory authority in the EU country where you live or work.

8. Changes to This Policy

We may update this policy from time to time, for example when we start using a new service. The date at the top of this page shows when it was last revised. Significant changes will be highlighted on this page.

Terms and Conditions

1. Bookings & Payments

All bookings must be made in advance through our website or approved booking partners. Full payment is required at the time of booking to secure your place on the tour.

2. Cancellation & Refund Policy

• Cancellations made more than 48 hours before the scheduled start time are eligible for a full refund.
• Cancellations made within 48 hours of the tour are non-refundable.
• No-shows or late arrivals will be treated as cancellations and are non-refundable.

3. Changes & Rescheduling

We understand that plans can change. Where possible, we will do our best to accommodate date changes requested more than 48 hours in advance, subject to availability.

4. Weather Conditions

Our tours operate in most weather conditions. However, in the case of unsafe or extreme weather, we reserve the right to modify, reschedule, or cancel the tour. In such cases, guests will be offered an alternative date or a full refund.

5. Itinerary Changes

While we aim to follow the planned itinerary, we reserve the right to adjust routes, stops, or timings due to weather, safety, traffic conditions, or other unforeseen circumstances.

6. Participant Responsibility

Guests are responsible for ensuring they are physically able to participate in the tour, which may include walking on uneven terrain, swimming (optional), and exposure to natural elements. Appropriate footwear and clothing are recommended.

7. Safety & Conduct

We reserve the right to refuse participation or remove any guest whose behavior is deemed unsafe, disruptive, or inappropriate, without refund.

8. Personal Belongings

Guests are responsible for their personal belongings at all times. Isle of Sun Malta is not liable for lost, stolen, or damaged items during the tour.

9. Content Creation & Media

By participating in our tours, you agree that photos and videos taken during the experience may be used by Isle of Sun Malta for promotional and marketing purposes. If you prefer not to appear in any content, please inform us in advance.

10. Liability Disclaimer

Isle of Sun Malta is not liable for any injury, loss, damage, or delay incurred during the tour, except where required by law. Participation is at your own risk.

11. Food & Dietary Requirements

We may provide food and drinks as part of the experience. Guests are responsible for informing us in advance of any dietary requirements or allergies. We cannot guarantee an allergen-free environment.

12. Punctuality

Guests must arrive on time at the designated meeting point. The tour will depart as scheduled, and late arrivals may miss the experience without refund.