Privacy Policy

Who we are

JL Properties ("we", "us") lets apartments across the Maltese islands. This policy explains what personal data we collect through this website, why, and what rights you have over it. For any privacy question, contact us at info@jlproperties.com.mt or +356 99999472.

What we collect

When you send us a stay inquiry, we collect what you choose to give us: your name, email address, and optionally your phone number, check-in and check-out dates, number of guests, the residence you’re asking about, and any message you write. We do not ask for payment details, ID documents, or any other sensitive information through this form.

Why we use it

Solely to reply to your inquiry — to answer your questions, discuss availability, and arrange a stay if you go ahead. We do not use it for advertising, and we do not sell or rent it to anyone.

Who can see it

Your inquiry is stored in our booking system and is visible only to JL Properties staff who need it to respond to you. It also passes through two service providers acting on our behalf: our database and hosting provider (Supabase, hosted in the EU) and our email delivery provider (Resend, based in the United States, used only to send you our reply and to alert our office). Where a provider is located outside the EU/EEA, we rely on their standard contractual clauses or an equivalent safeguard recognised under EU data protection law.

How long we keep it

We keep inquiry records for as long as needed to handle your stay and for our own business records afterwards, and in any case no longer than 24 months from your last contact with us, unless you ask us to delete it sooner or the law requires us to keep it longer.

Your rights

Under the General Data Protection Regulation (GDPR), you can ask us to:

• show you the personal data we hold about you;
• correct it if it’s wrong or incomplete;
• delete it;
• restrict or object to how we use it; and
• give you a copy in a portable format.

To use any of these, email info@jlproperties.com.mt. If you’re not satisfied with our response, you can complain to Malta’s data protection authority, the Information and Data Protection Commissioner (IDPC).

Cookies

This website does not use cookies and does not run any analytics or advertising tracking. The only thing saved on your device is a temporary, local copy of an inquiry form you’re part-way through filling in, so you don’t lose it if you navigate away — it never leaves your browser and is cleared once you submit or close the form.

Security

We limit access to your data to staff accounts we’ve individually approved, protect it with the security controls our database provider enforces, and send it over encrypted connections. No method of transmission or storage is completely secure, but we take reasonable, proportionate steps to protect what you share with us.

Children

This website and our services are intended for adults arranging their own stay. We don’t knowingly collect personal data from children.

Changes to this policy

If we change how we handle your data, we’ll update this page and change the date at the top. Please check back from time to time.