top of page

Privacy Policy

We respect your privacy and seeks to protect your personal data. The following information describes how we gather and use data which we may collect about you while you are navigating the pages of this Website as well as details on how we use the information you provide to us.


What sort of data is collected?

Our company is hosted on the platform. provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through’s data storage, databases and the general applications. They store your data on secure servers behind a firewall. All direct payment gateways offered by and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.


In general, as a user of our Website, you may visit the site without telling us who you are or revealing any information about yourself. You may however choose to provide us with personal information when you send an e-mail to us via the “contact” link on our Website. We shall store the data that you provide us with in any such e-mail and further process it as may be necessary for us to respond to and administer any request that you may so make.


We receive, collect and store any information you enter on our website or provide us in any other way. In addition, we collect the Internet protocol (IP) address used to connect your computer to the Internet; login; e-mail address; password; computer and connection information and purchase history. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page. We also collect personally identifiable information (including name, email, password, communications); payment details (including credit card information), comments, feedback, product reviews, recommendations, and personal profile.

Provision of personal data to third parties

We do not pass on your details collected from you as a visitor to any third party unless you give us your consent to do so, or in the instances indicated below.  We do not transfer your personal information to any third parties for marketing purposes. You will be aware however that data sent via the Internet may be transmitted across international borders even where sender and receiver of information are located in the same country. Consequently, data relating to you may be transmitted via a country having a lower level of data protection than that existing in your country of residence.


Without prejudice to anything contained in this Privacy Policy, we reserve the right to disclose personal data relating to you, to any third party, if such disclosures are necessary inter alia for the following purposes:


  • For the purpose of preventing, detecting or suppressing fraud

  • To protect and defend our rights and property or that of users of our Website

  • To protect against abuse, misuse or unauthorised use of our Website

  • To protect the personal safety or property of users of our Website (e.g. if you provide false or deceptive information about yourself or attempt to pose as someone else, we shall disclose any information we may have about you in our possession so as to assist any type of investigation into your actions)

  • For any purpose that may be necessary for the performance of any agreement you may have entered into with us; or

  • As may be allowed or required by or under any law or court order.

Retention of personal data

No personal data that we process will be kept longer than necessary for the purposes for which it is processed.


Privacy Compliance

Our Privacy Policy is compliant with the  EU General Data Protection Regulation (GDPR) directive 2016/679.



We use reasonable efforts to safeguard the confidentiality of all personal data that we process relating to you and regularly review and enhance our technical, physical and managerial procedures so as to ensure that your personal data is protected from:

  • Unauthorised access

  • Improper use or disclosure

  • Unauthorised modification

  • Unlawful destruction or accidental loss

To this end, we have implemented security policies, rules and technical measures to protect the personal data that we have under our control. All our employees and data processors, who have access to and are associated with the processing of personal data, are further obliged to respect the confidentiality of our visitors’ personal data.

By its very nature, however, the Internet is not a secure medium and data sent via this medium can potentially be subject to unauthorised acts by third parties. We cannot guarantee the privacy or confidentiality of any information passing over our Website. We shall accept no responsibility or liability whatsoever for the security of your data while in transit through the Internet.


Third Party Websites

Our Website may from time to time contain links to both local and international third-party Web sites after obtaining permission from them. Any such links are not an endorsement by us of any information in such Web sites or products and/or services offered through the same. We shall not accept any responsibility whatsoever for the content, use, availability, privacy practices or the content of any such Websites. Please note that upon entering such other Web sites, you become subject to the Privacy Policy of such other sites. No third party is permitted to link any other Website to our Website without obtaining our prior written consent.



We may contact you to notify you regarding your account, to troubleshoot problems with your account, to resolve a dispute, to collect fees or monies owed, to poll your opinions through surveys or questionnaires, to send updates about our company, or as otherwise necessary to contact you to enforce our User Agreement, applicable national laws, and any agreement we may have with you.


For these purposes, we may contact you via email, telephone, text messages, and postal mail. If you don’t want us to process your data anymore, please contact us at or send us mail to: 35, Triq il-Parocca, Mellieha, Malta.



Right of Access/Questions

You have a right to request access to and/or correction of your personal data processed by Ghand in-Nanna B&B. Any such request must be made in writing to Ghand in-Nanna B&B at the address indicated on the homepage of the Website and must be signed by yourself as the data subject to whom the particular data relates. We reserve the right to modify this Privacy Policy at any time. It is therefore in your own interest to visit regularly the “Privacy Policy” page so as to be aware of any changes which may occur from time to time.

bottom of page