Privacy policy
Who is responsible
Party Island Group, Maltese VAT number MT32283622, is the controller of the personal data described in this policy. We run partyislandgroup.com and keep a single database for the Party Island websites, with one record per person, even if you sign up on more than one of them.
To reach us about your data:
- WhatsApp: +34 646 898 488.
- Email: reply to any email we have sent you. Replies reach our team directly.
- Contact form: the one on any Party Island destination website.
What we collect
Only what you give us, plus the minimum a website needs to work and to keep spam out. Your name is required on some forms, such as the travel-dates one, and optional on others, such as the Club.
- Party Island Club. Your email address, your first name if you add it, and the language of the page where you joined.
- Forms on the Party Island destination websites, when the form says your details go to the group's shared database. Newsletters and 'notify me' boxes: your email, your name if you add it, and the party, venue or list you asked about. Travel-date plans: your name, your email, your arrival and departure dates and, if you add them, the size of your group and a mobile number for WhatsApp alerts. Contact and VIP requests: what the form asks for, such as your name, email, phone and message (for a VIP table, also the party, the night and the size of your group), and whatever you write.
- Proof of what you accepted. With every sign-up and request we save the exact wording you agreed to, the page, the language, the time, the browser you used and an irreversible code made from your IP address. The IP address itself is never stored.
- The emails we send you. Which email it was, when it went out and whether it was delivered, bounced or reported as spam. Not its content.
- Unsubscribes and requests about your data, so that we can respect them.
- Chat assistant. Whatever you write in the chat goes to our AI provider so it can reply. We don't save your questions or its answers; we keep usage figures only (time, language, type of answer), tied to the irreversible code of your connection and never to your name or email.
- WhatsApp. If you message us, we receive your number, your profile name and what you send.
- Technical data. To deliver the pages and protect the forms, our systems handle connection data such as your IP address, your browser and the page requested, and keep a note of blocked spam with the email address partly hidden. Event posters load directly from the Party Island destination websites and from GetYourTickets, so their servers see your IP address and browser, as with any image online.
We don't create accounts or take payments here. This site doesn't measure your visit, show adverts or load social media trackers. Your language choice is kept in a cookie on your own device, as the cookie policy explains.
Why we use it, and on what basis
| What for | Legal basis (GDPR) |
|---|---|
| Sending the Club emails, a destination's newsletter, the alerts and travel-date plans you signed up for, and the same alerts on WhatsApp if you left your number for them | Your consent (Article 6(1)(a)). You can take it back whenever you like |
| Emails about the other Party Island destinations | Your consent, given by joining the Club or by ticking the separate, unticked box on a destination website's form. Withdrawing it leaves the emails of the site where you signed up untouched |
| Replying to your contact or VIP request, and sending the details of a VIP table to the venue | Steps you ask us to take before a booking (Article 6(1)(b)) and our legitimate interest in replying to the people who write to us (Article 6(1)(f)). A request never puts you on a mailing list |
| Replying to what you ask the chat assistant | Our legitimate interest in answering your questions (Article 6(1)(f)) |
| Keeping proof of your consents and unsubscribes, and dealing with requests about your data | Our legal obligation to be able to show your consent and that we respect your rights (Article 6(1)(c), with Articles 5(2) and 7(1)) |
| Delivering the sites, keeping out spam and abuse, keeping our systems secure and counting chat usage | Our legitimate interest in services that work and are not abused (Article 6(1)(f)) |
We use your travel dates, and the destinations you tell us you like, only to choose which parties to tell you about. Our spam checks run automatically: a sign-up that looks automated is discarded and joins no list, with no other effect on you. If yours didn't go through, message us. We never sell or rent your data, and we never give it to anyone for their own marketing.
Who receives it
The members of our team who reply to requests and send out alerts, each with a personal account. And these providers, which process data for us under contract and only for these purposes:
- Supabase: stores our database on servers in the European Union.
- Resend: delivers our emails, so it handles your address and what each email says.
- Groq: powers the chat assistant and processes what you write in it to produce a reply.
- Netlify: hosts the websites and runs their forms and the chat.
- GitHub: runs our scheduled tasks, such as alerts, backups and the deletion of old data.
- Google: provides the mailbox where our team receives new requests and your replies to our emails.
For a VIP table, we pass your name, phone, the night and the size of your group to the venue you picked so it can hold the table; from then on the venue is responsible for those details. If you message us on WhatsApp, Meta runs that service under its own terms. Nobody else receives your data unless a law or a court obliges us.
Data handled outside the European Union
Our database stays in the European Union. Resend, Groq, Netlify, GitHub and Google are based in the United States, and Meta may handle WhatsApp data there too. Those transfers are protected by the standard contractual clauses adopted by the European Commission or, for providers certified under it, by the Commission's adequacy decision for the EU–US Data Privacy Framework. Ask us and we will tell you which safeguard applies to each provider.
How long we keep it
| Data | How long |
|---|---|
| Club, newsletter and alert subscriptions | While you stay subscribed |
| Your details after you unsubscribe | Within 7 days we delete the travel dates and preferences linked to that list. Once you have left every list, your name and phone go too, unless a request you sent still needs them. Your email address stays, together with proof of what you agreed to and of when you left, so we can show both and make sure you don't hear from us again |
| Requests: contact, VIP and travel dates | 2 years from when you sent them |
| 'Notify me' entries | Until the alert is sent or cancelled, then 1 more year |
| Anyone left with no list, request or alert | Deleted after 2 years without activity |
| Log of the emails we sent you (not their content) | 1 year |
| The parties we have already told you about, so the same alert never reaches you twice | About 13 months |
| Technical, security and anti-spam records, and chat usage figures | 90 days at most |
| Sign-in records of our own team | 2 years |
| WhatsApp conversations | While they help us answer you, and no more than 2 years after your last message |
| Encrypted backups of the database | 30 days at most, so anything we erase also disappears from them within that time |
When you ask for erasure, everything goes except an irreversible code of your email address, kept so that an old list can never add you back by mistake. If you later sign up again yourself, that code is removed. We also keep a note that we dealt with your request, without your email address, to show that we did.
Your rights
You can ask to see the data we hold about you, to have it corrected or erased, to restrict how we use it and to receive a copy in a portable format. You can object to any use based on our legitimate interest and, at any time and without giving a reason, to our emails.
- To stop our emails: use the unsubscribe link at the bottom of any of them. You can leave just that website's list or everything from Party Island in one go. Unsubscribing also stops the WhatsApp alerts linked to that list.
- For everything else: WhatsApp +34 646 898 488, a reply to any of our emails or the contact form of a destination website. We may ask you to confirm the request from the email address concerned, so that nobody else can get hold of your data. We reply within one month.
Withdrawing consent works from that moment on and doesn't affect what we did before. If you're unhappy with how we have treated your data, you have the right to complain to Malta's Information and Data Protection Commissioner (idpc.org.mt) or to the data protection authority of the EU country you live or work in. We'd be grateful for the chance to put it right first.
Under 18s
This site and the Club are for people aged 18 or over, and we don't knowingly collect data from anyone younger. If you believe someone under 18 has given us their details, tell us and we will erase them.
Security
Everything travels over encrypted connections (HTTPS). The database is closed to the public: only our own systems and the members of our team, each with a personal account, can reach it, and sign-ins to our management area are recorded. IP addresses are stored only as irreversible codes. No system is free of risk, so if a breach ever affected your data we would report it to the supervisory authority and, where the law requires it, to you.
Destination websites and tickets
Each Party Island destination website, such as partyislandmalta.com, has its own privacy policy for what you do there. Tickets are sold by GetYourTickets, which handles the data of your purchase under its own privacy policy.
Changes and translations
If we update this policy, the new text goes up on this page with the date of the change. If a change affects how we use data you have already given us, we will tell you by email. This policy is written in English and translated into the other languages of the site; if a translation and the English text ever differ, the English text prevails.