Privacy Policy

Colours of Malta Travel & Incentives Ltd. is a Destination Management Company based in Malta.

Our website address is: https://www.coloursofmalta.com

We may collect and process the following data:

Contact information

Name, email address, phone number, company name.

Booking and event information

Information related to your travel, accommodation, event preferences, or service requests.

Technical data

IP address, browser type, operating system, referring URLs, and website usage data.

Marketing preferences

Your preferences in receiving marketing from us and your communication preferences.

We collect data through:

• Direct interactions — you contacting us by email or phone. This website has no forms.
• Automated technologies — privacy-preserving, cookieless website analytics.
• Third-party sources (e.g. event organisers or corporate partners providing your information).

We use your data to:

• Respond to your enquiries and provide services
• Process bookings and manage events
• Improve our website and customer experience
• Send you marketing communications (only if you’ve opted in)
• Comply with legal and regulatory obligations

Under the GDPR, we rely on the following lawful bases to process your personal data:

Consent

where you have given clear permission

Contractual necessity

when processing is required to fulfil a contract with you

Legal obligation

where we are legally required to do so

Legitimate interests

for the purposes of operating our business, provided your rights don’t override those interests

This website sets no cookies. Our website analytics are cookieless and do not fingerprint or track individual visitors across sites, so there is nothing to opt into and no cookie banner.

We do not sell your personal data. We may share your information with:

• Trusted third-party service providers (e.g. IT support, email marketing tools, CRM providers)
• Travel or event suppliers when necessary to deliver our services
• Regulators or law enforcement if required by law

All third parties are required to respect the security of your data and to process it in accordance with GDPR.

If we transfer your personal data outside the European Economic Area, we ensure an adequate level of protection by using standard contractual clauses or other lawful mechanisms.

We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for legal, accounting, or reporting requirements.

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing
• Withdraw consent at any time
• Lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) Malta

To exercise any of your rights, please contact us at incentives@com.com.mt or +356 9904 9514.

We have put in place appropriate technical and organisational measures to safeguard your data against loss, misuse, or unauthorised access.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date.