Privacy Policy

Policy Version Number CMB09

About Data Collection, Cookies, and Your Choices.

Throughout this privacy policy, the terms "this site" or "the site", refers to this website. By continuing to use this site via a mobile application or web browser you acknowledge and agree to the terms outlined in this Privacy Policy.

Data Controller

The data controller of this website is Paula Muñoz.

Scope of This Privacy Policy

This Privacy Policy applies to all information that is collected through this site; it does not apply to any information that may be collected by other software, mobile applications or websites linked from this site. You should therefore also review the privacy statements of other software, mobile applications or websites that have been linked from this site and which you choose to navigate to so that you understand how those other software, mobile applications or websites collect, use, process, and share your information.

Collection of Submitted Information

When you submit a form (e.g. contact form) on our website, we collect technical and personal data including the date and time of submission, the page URL, your IP address, user agent string (browser and device details) and referrer URL. This information helps us identify spammers and their location, improve security, improve site performance, and fulfill legal obligations. Your data may be shared with trusted third-party services or authorities only as necessary. We also collect information you provide directly to us. For example we collect information when you make a purchase, fill out a form, leave a comment, request customer support or otherwise communicate with us. The types of information we may collect include your Name, Last Name and Email Address, Phone Number, Physical Address, and any other information you choose to provide.

Automatic Collection of Information

When you access or use this site, some information is automatically collected through our hosting infrastructure :

Statistical Information: We collect statistical data about website usage, including the number of visitors, page views, most visited pages, average number of pages viewed per visit, bandwidth usage, geographic traffic sources, browser types, operating systems, and referring websites.
Access Logs and Error Logs: We maintain access and error logs for security and troubleshooting. These logs include IP address information unless the visitor uses privacy tools or services that mask their IP. Logs are retained for a maximum of 30 days and are automatically deleted thereafter.
Purchase History: We process purchase information for sales handling and fraud prevention. This information includes contact information, billing details, delivery details, and goods or services purchased, and other info as provided by the user during checkout. Purchase records may include the buyer’s IP address, which helps us block fake transactions or BIN attacks originating from specific IPs.

Use of Collected Information

We may use information about you for various purposes, including to:

Improve the website experience and performance;
Support marketing and advertising efforts;
Provide you with the service or product you requested;
Process transactions and send you related information, including confirmations and receipts;
Send you technical notices, updates, security alerts, and administrative messages;
Respond to your comments, questions, and requests, and provide customer service;
Detect, investigate, and prevent fraudulent transactions and other illegal activities;
Retain your personal information to comply with legal obligations, prevent fraud, collect fees owed, resolve disputes, troubleshoot problems, enforce our Terms of Use, and take other lawful actions.

Legal Bases for Processing

We process personal data on the following legal bases:

To perform a contract or take steps at your request before entering a contract (such as processing orders and providing customer support);
To comply with legal obligations, including tax, accounting, and fraud‑prevention requirements;
For our legitimate interests, provided these do not override your rights (such as website security, preventing abuse, and improving site performance);
Based on your consent where required by law.

Sharing of Information

We may share information about you in the following circumstances:

With our current and future partners, service providers, and any hired sub-contractors who assist in operating the website or fulfilling requests made through it;
In connection with, or during negotiations of, any merger, sale of assets, financing, or acquisition of all or part of our business by another entity;
In response to lawful requests, such as those required by applicable legislation, regulation, or legal process;

Payments

Payments are processed securely by Trust Payments. We do not store or process your card details; these are handled directly by the payment processor.

International Transfers

All website hosting, email delivery, and data processing activities are carried out within the European Union. We do not transfer your personal data outside the European Economic Area.

Security of your Personal Information

We take reasonable precautions to protect your personal information from unauthorized access, use, or disclosure. We are aware of our responsibilities to protect the security, confidentiality and integrity of your information. Despite precautions, no physical or electronic security system is impenetrable. As a result, we cannot guarantee the security of our data, nor can we guarantee that the information you supply will always remain private.

Type of Cookies We Use

Cookies are small files placed on your computer, mobile device, or any other device you use to access this website. Cookie names may vary depending on your browser, device type, or software version, but their functions remain consistent with the descriptions provided in this policy. Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain stored on your device even after you go offline and are retained until they expire or are manually deleted. Session Cookies are temporary and are automatically deleted as soon as you close your web browser. We use both types of cookies for the purposes set out below.

Necessary / Essential Cookies

woocommerce_cart_hash

Type: Session Cookie
Provider: First‑party (this website)
Purpose: Helps the website determine when cart data has changed during a browsing session.
Why it's Essential: Tracks cart changes—without it, the cart wouldn't update properly.

woocommerce_items_in_cart

Type: Session Cookie
Provider: First‑party (this website)
Purpose: Records whether items have been added to the cart during the session.
Why it's Essential: Maintains cart state across pages so the cart contents remain visible and functional.

wp_woocommerce_session_

Type: Persistent Cookie (expires after 2 days)
Provider: First‑party (this website)
Purpose: Stores a unique session identifier that allows the system to retrieve cart information from the database.
Why it's Essential: Enables the website to associate a user with their cart, even if they navigate away and return.

Payment Security Cookie

Type: Persistent Cookie (expiry varies)
Provider: First‑party (this website)
Why it's Essential: Used to store technical browser or device information and unique identifiers required to verify legitimate payment attempts, prevent fraud, and ensure the checkout process functions correctly.

Caching Cookie

Type: Persistent Cookie
Provider: First‑party (this website)
Purpose: Stores caching and performance-related preferences to help the website load efficiently for returning users.
Why it’s Essential: Ensures consistent site performance and reduces load times, improving the overall user experience.

Security Cookie

Type: Session Cookie
Provider: First‑party (this website)
Purpose: Supports essential security functions such as session validation and protection against unauthorized access attempts.
Why it’s Essential: Maintains the security and integrity of user sessions, helping prevent malicious or automated access.

Optional Cookies

This website serves no first party or third party optional cookies. For this reason, no cookie banner or consent mechanism is required.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. In particular:

Order information is retained for the period required by Maltese tax and accounting laws.
Customer accounts are retained until you request deletion.
Contact form submissions are not stored on the website; they are delivered directly to our email system.
Email correspondence is retained only for as long as necessary to handle your enquiry or maintain business records.
Access and error logs are retained for up to 30 days.

Your Rights Under GDPR

If you are located in the European Union, you may contact us to request information about the personal data we process about you, or to request correction or deletion where applicable. You may also raise a concern with the Information and Data Protection Commissioner (IDPC) in Malta. These rights apply to the limited personal data we process in connection with orders, enquiries, and the operation of this website.

Your Choices

Erasing Account Information: If you wish to delete your account and account history, please email us. Note that we may retain certain information as required by law or for legitimate business purposes. We may also retain backup or archived copies of your information for a limited time, in accordance with our data retention policies.
Erasing Information Posted on this Website: If you wish to have any information you’ve submitted on this website deleted, please contact us.
Erasing Cookies: If you prefer to avoid the use of cookies on this website, you must first disable cookies in your browser settings and then delete any cookies stored by this site. Most browsers accept cookies by default, but you can configure them to remove or reject cookies. Please refer to your browser’s help function for detailed instructions. Instructions may vary depending on your browser or device. Disabling cookies may affect site functionality.

Changes to this Privacy Policy

We reserve the right to modify or amend this Privacy Policy at any time by posting the amended Policy here. All amended terms take effect upon posting. Each time you use this site, the current version of the Privacy Policy will govern your use.

Contact Information

We welcome your comments regarding our policy. If you believe that we have not adhered to this policy, or if you have any questions please contact us on maltalatin.tours@gmail.com