Privacy policy
What we collect, why we collect it, and what you can ask us to do with it.
This policy covers personal data collected by Aloha Boat Trips through this website. We are the data controller for it. For anything to do with your data, email alohaboattrips@gmail.com.
What we collect
When you book: your name, email address, phone number, the number of people in your party and your chosen date. Card payments are handled by our booking provider — we never see or store your full card number.
When you use the contact form: your name, email address and whatever you write in the message.
When you call or email: whatever you tell us, and a record of the correspondence.
Why we use it
- To take, confirm and run your booking, and to contact you about it.
- To reach you if the trip has to change or be cancelled, which is the main reason we ask for a phone number.
- To answer questions you send us.
- To keep the accounting and tax records Maltese law requires.
The legal basis is performance of your booking contract for the first two, our legitimate interest in answering enquiries for the third, and a legal obligation for the fourth. We do not send marketing email, and we do not sell or rent your data to anyone.
Who else sees it
Only the suppliers needed to run the business: our booking and payment provider, our email provider, the provider that delivers the contact form, and our accountant. Each handles the data on our instructions. If you booked through a third party such as GetYourGuide or Viator, that company is a separate controller for the data you gave them, under its own privacy policy.
Cookies and analytics
This site sets no advertising or tracking cookies and does not profile visitors. The booking widget may set cookies that are strictly necessary for the booking to work.
How long we keep it
Booking records are kept for as long as tax and accounting law requires, which in Malta is generally ten years. Contact-form messages and general correspondence are kept for up to two years, then deleted.
Where it is stored
Within the European Economic Area wherever possible. If a supplier stores data outside it, that transfer is covered by the safeguards the GDPR requires.
Your rights
You can ask us for a copy of the data we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to have it sent to another provider. Email alohaboattrips@gmail.com and we will respond within one month. We may need to keep booking records that tax law requires us to hold, even after a deletion request.
If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Office of the Information and Data Protection Commissioner in Malta.
Changes
If this policy changes, the updated version will appear on this page.