Privacy policy

Data controller: Malta Nights · VAT MT32283622 · info@maltapartyvibes.com

Last updated: 5 November 2026

This policy explains which personal data Malta Nights collects on maltanights.com, what we use it for and what rights you have. It only describes what our website and systems really do.

Who is responsible

Data controller: Malta Nights (VAT MT32283622), info@maltapartyvibes.com.

Malta Nights shares a central customer database with the Party Vibes family of websites (World Party Vibes and its destinations: Malta, Zante, Mykonos, Tenerife, Punta Cana and Albania). The requests you make through the forms on maltanights.com are saved in that database, which is managed from worldpartyvibes.com.

What data we collect

  • Forms on maltanights.com (contact, VIP table request, “Notify me” for a party, the Malta 2027 list, the newsletter and the club lists): depending on the form, your name, email address, mobile number (optional, or asked for in a second step), language, travel dates, group size, the party, venue or list you are interested in, the date and number of people for a VIP table request, your message and the page you sent the form from.
  • Chat assistant: the messages you write in the chat (the bubble at the bottom of the page), which is answered from worldpartyvibes.com.
  • Emails we send you: a copy of each email, when it was sent and the delivery status reported by our email provider (for example, delivered or bounced).
  • Technical data: to protect the forms against spam and abuse, we use your IP address for a short time and check how the form was filled in (for example, how long it took). The IP address is not saved with your request. If a submission is rejected as suspected spam, we keep a security record for 90 days (an irreversible fingerprint of the IP and the partly hidden email address).
  • Browsing the store: Shopify, which hosts maltanights.com, collects technical data about your visit (such as your IP address, device, browser and the pages you view) to make the store work and, only if you accept them in the cookie banner, for statistics.

We don't ask for sensitive data. Tickets are paid on the ticket platform, not on maltanights.com, so we never receive your card details.

Why we use it and on what legal basis

  • To answer your requests (contact messages, VIP table requests, questions to the chat): because you ask us to, as a step before a possible booking (Art. 6(1)(b) GDPR), and our legitimate interest in answering you (Art. 6(1)(f) GDPR).
  • To send you the confirmation and the emails you signed up for: your consent (Art. 6(1)(a) GDPR). If you sign up for one of our lists (alerts for a party or a venue, waitlists, the newsletter or the season lists), we will send you what you signed up for and also parties and offers from all the Party Vibes destinations (Malta, Tenerife, Zante, Mykonos, Punta Cana and Albania), by email and, if you gave us your mobile number, by WhatsApp. You can withdraw your consent at any time: every email includes an unsubscribe link.
  • Statistics on how the store is used: your consent, given in the cookie banner.
  • To keep the website and the forms secure, prevent spam and abuse, and keep a record of the emails we send: our legitimate interest (Art. 6(1)(f) GDPR).

Writing to us through the contact form or requesting a VIP table does not sign you up for promotional emails. If you gave us your mobile number, we may also write to you on WhatsApp about your request or about the parties you asked to hear about.

Who receives your data

We never sell your data. We only share it with:

  • The Malta Nights team and the team that manages the shared Party Vibes database, so they can answer you and send you what you asked for.
  • The venue hosting the party, only for VIP table requests: your name, the number of people, your email and your mobile number (if you gave it), so the venue can book your table.
  • Our service providers, who process the data on our behalf: Shopify (the platform that hosts this store), Supabase (database), Netlify (hosting of worldpartyvibes.com, which receives the forms and the chat), Resend (sending emails and managing our mailing lists), Brevo (backup email sending, only when Resend is unavailable) and the AI providers OpenAI, Google (Gemini) and Groq, which generate the chat assistant's answers and only receive the messages you write in the chat.
  • WhatsApp, only if we write to you there or you write to us through one of our WhatsApp buttons.

When you click a ticket button, you go to GetYourTickets, the ticket platform that sells the tickets and processes your purchase under its own terms and privacy policy. When you book a water activity, you go to Malta Explorers (maltaexplorers.com), which handles the booking under its own terms and privacy policy.

International transfers

Some of these providers are based outside the European Economic Area (for example, in the United States) or may process data there. In that case, the transfer is protected by the European Commission's standard contractual clauses or by another safeguard provided for in the GDPR, such as an adequacy decision.

How long we keep your data

  • Lists and alerts: while you stay subscribed. Alerts linked to a trip stop on their own once your travel dates have passed. If you unsubscribe, we stop emailing you straight away; 7 days later we erase your details and keep only your email address marked as unsubscribed, so that nobody can add you to our lists again by mistake.
  • Requests (contact, VIP): in the central database, so we can follow them up and recognise you if you write to us again, for 2 years after your last request; after that they are erased.
  • Chat: messages are not saved in our database; they are only used to generate the answer (a first question and its answer may stay in a temporary memory for up to 15 minutes). The AI providers may keep them for a limited time under their own terms.
  • Record of the emails we send: kept for 1 year to document our communications, then erased.
  • Data about your visit to the store: kept by Shopify under its own privacy policy.

Cookies and your browser

maltanights.com uses the cookies Shopify needs for the store to work (for example, the session and your cookie choice). Statistics and marketing cookies are only used if you accept them in the cookie banner.

In your browser we also keep the chat conversation until you close the tab and, if a form cannot be sent because of a connection problem, a copy of it so it can be sent the next time you open maltanights.com.

You can delete or block cookies in your browser settings.

Your rights

You can request access to your data, its rectification or erasure, restrict or object to its processing, receive it in a portable format and withdraw your consent at any time (this does not affect anything done before). Write to info@maltapartyvibes.com, ideally from the email address concerned, and we will reply within the time limits set by law. To unsubscribe from a list, just use the link at the bottom of any of our emails.

To learn how Shopify uses the data it collects and to exercise your rights over it, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

You may also lodge a complaint with the Maltese supervisory authority, the Information and Data Protection Commissioner (idpc.org.mt), or with the authority of your country of residence.

Security

Your data travels encrypted (HTTPS). The central database can only be accessed from our websites' servers, our internal scripts and an internal panel protected by a password.

Changes to this policy

If we change this policy, we will publish the new version on this page with its date.