Privacy Policy

Vineleaves at Montekristo Estate, Ħal Farruġ Road, Siġġiewi SGW, Malta handles your reservation details with support from Montekristo Estate. For privacy questions or requests, contact [email protected].

We collect your name, email, phone number, booking details and optional message to handle your reservation or enquiry. Contact and table details are required for online requests; you can also call us. Please discuss allergies by phone rather than include health information in the form.

Bookings are processed to arrange and provide the service you request. Our legitimate interests are answering enquiries, maintaining correspondence, protecting the website and understanding aggregate visitor statistics. Technical data may include IP addresses and browser details. We also process data where legally required. We do not use reservation details for marketing or automated decisions.

Montekristo’s enquiry service and booking team receive requests. Resend delivers emails; Vercel provides hosting and analytics. Cloudflare Turnstile verifies form submissions. Our email providers process correspondence. We do not sell your data.

Providers may process data outside the EEA; transfers require an applicable adequacy decision or safeguards such as standard contractual clauses. Contact us for details and copies.

We keep enquiries while needed for your booking, follow-up or unresolved complaints, and longer for legal obligations or claims. Technical records follow provider retention settings.

Cloudflare Turnstile loads when you reach the contact step of the reservation form to protect it from automated submissions. Cloudflare receives technical connection and browser information for this security check; reservation contact details and notes are not sent to Cloudflare. See its privacy policy.

Vercel Analytics provides aggregate page, referral, approximate location and device statistics without tracking cookies. Form contents are not sent to analytics. Restricted previews use a necessary access cookie lasting up to 14 days.

Google Maps loads only with your permission. Google receives connection details and may use cookies under its privacy policy. Close the map to stop further loading; manage existing cookies in your browser. Permission resets each visit. External websites apply their own policies.

Where applicable, you can access, correct, delete or receive a portable copy of your data, restrict its use, object to processing based on legitimate interests or withdraw consent without affecting earlier lawful processing. Email [email protected]; we normally respond within one month. You can complain to Malta’s Information and Data Protection Commissioner or another competent authority.