This Privacy Policy explains how personal data is collected, used, stored, and protected when you visit Canaima.mt, contact us, make an enquiry, book a stay, or use services connected to Canaima.
Canaima is a boutique yacht stay located at Grand Harbour Marina, Birgu, Malta.
1. Data Controller
The data controller responsible for this website and for direct enquiries/bookings is:
Name: Canaima
Website: https://canaima.mt
For any privacy-related questions, please contact us using the contact page.
2. What Personal Data We Collect
We may collect and process the following types of personal data:
- Name
- Email address
- Phone number
- Booking details
- Arrival and departure dates
- Number of guests
- Messages, enquiries, and special requests
- Payment and invoice-related information
- VAT/tax-related information where applicable
- Information relating to private gatherings or custom event enquiries
- Technical website data, such as IP address, browser type, device type, operating system, pages visited, date/time of access, and basic usage data
- Communication data from email, contact forms, WhatsApp, booking platforms, or other communication channels
- Review or feedback content if you choose to provide it
We do not intentionally collect sensitive personal data unless you voluntarily provide it and it is necessary for a specific request.
3. How We Collect Personal Data
We may collect personal data when you:
- Visit Canaima.mt
- Use the contact form
- Send us an email
- Contact us via WhatsApp or another messaging channel
- Make a direct booking or enquiry
- Use the Smoobu booking system embedded or linked on the website
- Book through third-party platforms such as Airbnb, Booking.com, or similar platforms
- Request information about private gatherings or custom events
- Stay aboard Canaima
- Leave a review or provide feedback
4. Purposes of Processing
We process personal data for the following purposes:
- To respond to enquiries
- To manage bookings and reservations
- To provide accommodation and guest services
- To send check-in, access, and guest information
- To manage payments, invoices, deposits, refunds, and cancellations
- To comply with legal, tax, accounting, tourism, and regulatory obligations
- To manage private gathering or event enquiries
- To prevent misuse, fraud, damage, security incidents, or unauthorised access
- To protect the yacht, guests, marina users, staff, and our legitimate business interests
- To improve the website, booking process, and guest experience
- To manage reviews, complaints, claims, disputes, or insurance-related matters
- To maintain website security and performance
5. Legal Bases for Processing
We process personal data on one or more of the following legal bases:
Performance of a contract
When processing is necessary to manage a booking, provide accommodation, communicate check-in details, or deliver requested services.
Pre-contractual steps
When you send an enquiry or request information before making a booking.
Legal obligation
When processing is necessary for tax, accounting, tourism, regulatory, safety, or other legal requirements.
Legitimate interests
When processing is necessary to operate the website, manage guest communication, secure the yacht and website, handle disputes, prevent misuse, improve services, or protect our business interests.
Consent
Where required, for example for optional marketing communications, certain cookies, or WhatsApp contact initiated by you.
6. Website Hosting and Technical Infrastructure
Canaima.mt is a static website. It is hosted on Cloudflare Pages, and Cloudflare also provides security, performance, DNS, caching, and related technical services. The website's source files are kept in a repository on GitHub; GitHub does not receive visitor data.
Cloudflare may process technical data such as IP addresses, server logs, security logs, browser data, and usage data in order to deliver the website, protect it from abuse, improve loading speed, and maintain security.
The website itself does not run a content management system, does not use analytics or advertising trackers, and does not set its own cookies.
7. Contact Form
The contact form on Canaima.mt does not send or store anything on this website. When you submit it, your message is prepared in WhatsApp on your own device, and you decide whether to send it. The information you enter, such as your name, dates, number of guests, and message, is only transmitted once you send the WhatsApp message (see section 8).
We use this information to respond to your enquiry and provide requested information or offers.
8. WhatsApp Contact
We may offer a WhatsApp contact button or link on the website.
If you contact us via WhatsApp, your message, phone number, profile name, and any information you provide may be processed by WhatsApp and by us for the purpose of responding to your enquiry.
WhatsApp is a third-party service and processes data under its own privacy terms. Please do not send sensitive personal information through WhatsApp unless necessary.
9. Smoobu Booking System
We use Smoobu as a booking and property management system.
When you make a booking, send a booking enquiry, or use the booking functionality connected to Canaima.mt, Smoobu may process personal data required to manage your reservation. This may include your name, contact details, booking dates, number of guests, messages, booking status, and other reservation-related data.
Smoobu acts as a processor or service provider for booking management purposes.
10. Third-Party Booking Platforms
Canaima may also be listed on third-party booking platforms such as Airbnb, Booking.com, or similar platforms.
If you book through a third-party platform, that platform will process your personal data under its own privacy policy and terms. We may receive booking-related information from the platform, such as your name, booking dates, number of guests, messages, payment status, and reservation details.
We use this information to manage your stay, communicate with you, comply with obligations, and provide the booked service. Please review the respective privacy policy of the platform you use.
11. Payments and Deposits
Payments may be processed through Smoobu, third-party booking platforms, payment processors, or bank transfer, depending on the booking channel.
We do not normally receive or store full credit card details. Payment providers and booking platforms process payment information under their own terms and privacy policies.
We may process payment status, invoice details, refund information, security deposit information, and related accounting records.
12. Cookies and Similar Technologies
Canaima.mt itself does not set cookies and does not use analytics, marketing, or retargeting cookies.
Third-party services that you actively use through the website may set their own cookies or use similar technologies, in particular:
- The Smoobu booking calendar embedded on the booking page
- Cloudflare, where strictly necessary for security and delivery of the website
The booking page also loads a small script library from Cloudflare’s public CDN (cdnjs), which the Smoobu calendar needs to work.
If non-essential cookies such as analytics or marketing cookies are introduced in the future, they will be used only where legally permitted and, where required, with your consent.
You can manage cookies through your browser settings.
13. Google Fonts
The website uses the open-source fonts League Spartan and Poppins. They are hosted locally, which means fonts are loaded from the website itself rather than from Google, and no visitor data is transferred to Google for font loading.
14. Security and Anti-Spam
We may use security, firewall, caching, backup, monitoring, and anti-spam tools to protect the website and guest communication.
This may involve processing technical data such as IP addresses, login attempts, browser data, spam indicators, server logs, or security events.
These measures are used to protect the website, prevent misuse, maintain availability, and secure personal data.
15. Recipients and Service Providers
We may share personal data with trusted recipients where necessary, including:
- Website hosting, security and performance providers, including Cloudflare
- Smoobu booking system
- Payment providers
- Airbnb, Booking.com, and other booking platforms where relevant
- Email and communication providers
- WhatsApp, if you contact us through WhatsApp
- Cleaning, maintenance, guest support, or check-in support providers
- Accountants, tax advisors, legal advisors, and insurance providers
- Marina management where necessary for access, safety, incident handling, or compliance
- Public authorities, regulators, courts, law enforcement, or tax authorities where required by law
We do not sell personal data.
16. International Data Transfers
Some service providers may process data outside Malta or outside the European Economic Area.
Where personal data is transferred internationally, we rely on appropriate safeguards where required, such as adequacy decisions, standard contractual clauses, data processing agreements, or other lawful transfer mechanisms.
17. Data Retention
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.
Typical retention periods include:
- Booking and guest communication: for as long as needed to manage the booking and handle follow-up matters
- Tax, accounting, invoice, and payment records: for the legally required retention period
- Contact form enquiries: for a reasonable period after the enquiry has been answered
- Dispute, damage, insurance, or incident-related records: for as long as necessary to handle claims or protect legal rights
- Website security logs: for a limited period necessary for security and troubleshooting
When personal data is no longer required, it will be deleted, anonymised, or securely archived where appropriate.
18. Data Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.
These measures may include secure hosting, HTTPS encryption, access controls, website security tools, backups, and limited access to personal data.
However, no website, online system, email system, booking platform, or communication channel can be guaranteed to be completely secure.
19. Your Data Protection Rights
Subject to applicable law, you may have the following rights:
- Right of access to your personal data
- Right to rectification of inaccurate or incomplete data
- Right to erasure of your personal data
- Right to restriction of processing
- Right to object to processing
- Right to data portability
- Right to withdraw consent where processing is based on consent
- Right to lodge a complaint with a supervisory authority
We may need to verify your identity before responding to a request.
20. Complaints
If you believe your personal data has been processed unlawfully, you may contact us first so we can try to resolve the matter.
You also have the right to lodge a complaint with the competent data protection authority. In Malta, this is the Office of the Information and Data Protection Commissioner.
21. Children
Bookings must be made by adults.
If children stay aboard Canaima, the booking adult is responsible for them at all times. We do not knowingly collect personal data from children directly unless provided by the booking adult and necessary for the stay.
22. Reviews and Testimonials
If you leave a review on Airbnb, Booking.com, Google, or another platform, that review may be processed and displayed according to that platform’s terms and privacy policy.
We may display selected public reviews or testimonials on Canaima.mt or in marketing material. Where possible, we limit the personal information shown.
23. Marketing Communications
We will only send marketing communications where permitted by law or where you have given consent.
You can unsubscribe or object to marketing communications at any time.
24. Links to Other Websites
Canaima.mt may contain links to third-party websites, booking platforms, maps, social media pages, or other services.
We are not responsible for the content, security, or privacy practices of third-party websites. Please review their privacy policies before using them.
25. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
The latest version will be published on Canaima.mt with the updated date.
26. Contact
For questions about this Privacy Policy or your personal data, please get in touch via our contact page.
Last updated: 02.10.2026