Wellcome Privacy Policy of Xemxija HillPool Terrace
Last updated: [2025]
At Xemxija Hill Pool & Terrace (hereinafter, “we,” “the restaurant“), we value your privacy. This policy explains how we collect, use, and protect the personal data you provide when booking sunbeds or using our services.
1. Data We Collect
To manage your sunbed reservation or rental, we collect:
- Full name.
- Email address (for confirmations and communication).
- Payment method (Stripe, PayPal, or on-site payment). We do not store full credit card details.
2. Purpose of Processing
We use your data to:
- Process your sunbed reservation and rental.
- Send confirmations and invoices (if applicable).
- Comply with legal obligations (e.g., billing).
- Marketing only with your explicit consent (you may withdraw consent at any time).
3. Legal Basis
- Contract: To manage your reservation.
- Consent: If you opt in for promotions (you may unsubscribe by emailing [xemxijapoolandterrace@gmail.com]).
4. Sharing Data with Third Parties
- Payment providers: Stripe or PayPal (for secure transactions).
- Authorities: Only if required by law (e.g., tax compliance).
We do not sell or share your data for unauthorized commercial purposes.
5. Security and Retention
- Your data is stored securely and deleted after 2 years of inactivity (or as legally required).
- We use technical measures (e.g., encryption) to protect your data.
6. Your Rights
You may request to:
- Access, correct, or delete your data.
- Object to processing or withdraw consent.
- Receive your data in a portable format.
7. Changes to This Policy
We will update this policy on our website for significant changes.

