Privacy Policy

Last updated 30 July 2026

This policy explains what personal data South Wind Guesthouse collects when you visit our website, enquire with us or stay with us, why we collect it, and what rights you have over it.

Who we are

South Wind Guesthouse, Triq Sant’ Andrija, Marsaxlokk MXK 1412, Malta, is the data controller for the personal data described in this policy.

What we collect

When you book a stay

Your name, email address, telephone number, postal address, arrival and departure dates, number and names of guests, payment details, and any preferences or requests you tell us about. Bookings are taken through our online reservation and property management system.

When you contact us

Your name, contact details and the content of your message, whether you reach us by email, telephone, our contact form or the chat widget on this website.

When you subscribe to offers

Your name and email address, and whether you have opened or clicked our emails.

When you browse this website

Your IP address, device and browser type, approximate location, the pages you visit and how you arrived. Most of this is collected through cookies and only where you have consented. See our Cookie Policy.

Why we use it, and our lawful basis

PurposeLawful basis
Taking and managing your reservation, and providing your stayPerformance of a contract
Answering enquiries and providing guest supportPerformance of a contract, or our legitimate interests in responding to you
Keeping records required by Maltese tax, accommodation and tourism lawCompliance with a legal obligation
Sending marketing emails and offersYour consent, which you may withdraw at any time
Website analytics, advertising and measurementYour consent, given through our cookie banner
Preventing fraud and securing our websiteOur legitimate interests

Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract and on our instructions. These fall into the following categories:

Category of recipientWhat it is used for
Reservation and property management providersTaking bookings, managing availability and running your stay
Payment processorsTaking deposits and settling payment for your stay
Website hosting and content delivery providersPublishing and serving this website securely
Consent management providersRecording and evidencing your cookie choices
Analytics and advertising platformsUnderstanding how our website is used and measuring our advertising
Messaging and live chat providersOperating the chat service on this website
Email marketing providersSending offers and updates you have subscribed to

We may also disclose data to our accountants and professional advisers, or to public authorities where we are legally required to do so. If you would like to know which specific providers we currently use, please contact us and we will tell you.

Transfers outside the EEA

Some of the providers we use are based in, or store data in, countries outside the European Economic Area, including the United States. Where that happens, the transfer is covered by an approved safeguard such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

How long we keep it

  • Booking and guest records: for as long as required by Maltese tax and accommodation law, and then deleted.
  • Enquiries and chat conversations: normally no longer than two years after our last contact.
  • Marketing subscriptions: until you unsubscribe, and for a short period afterwards to record that you opted out.
  • Cookie and analytics data: for the retention periods set out in our Cookie Policy.

Your rights

Under the General Data Protection Regulation you have the right to:

  • ask what personal data we hold about you, and receive a copy;
  • have inaccurate data corrected;
  • ask us to delete your data, where we have no continuing reason to keep it;
  • ask us to restrict how we use it;
  • receive your data in a portable format;
  • object to processing based on our legitimate interests;
  • withdraw consent at any time, including for marketing and cookies.

To exercise any of these, email us at info@southwindguesthouse.com.mt. We are a small team and normally reply within a few days — and in any event within one month, as the law requires.

If you are not satisfied with our response you may complain to the Maltese supervisory authority, the Office of the Information and Data Protection Commissioner (IDPC), at idpc.org.mt.

Security

We use reputable providers, restrict access to guest data to those who need it, and protect this website with encryption in transit. No online service can be completely secure, but we take reasonable steps to protect your information and to notify you and the IDPC if a breach is likely to affect your rights.

Children

Our website is not directed at children, and we do not knowingly collect their data online. Where children stay with us as part of a booking, we process only the details needed for the reservation, provided by the adult making it.

Changes to this policy

If we change how we handle personal data we will update this page and revise the date above.

Contact

South Wind Guesthouse
Triq Sant’ Andrija, Marsaxlokk MXK 1412, Malta
info@southwindguesthouse.com.mt · +356 21654215