How we handle data — the short version, then the long version.
The short version. We collect the minimum we need to host you properly — your name, email, company, and the details of your brief. We do not sell your data, ever. It lives on EU-hosted infrastructure. We honour deletion requests within 30 days.
PORTUS ("we", "us") is a private B2B corporate hospitality house based in Valletta, Malta. Data controller: PORTUS Ltd. Contact: reservewithportus@gmail.com.
When you submit a brief or contact us, we collect your name, work email, company, role, and the details of your enquiry (guest count, date, dietary notes, special requests). When you browse the site and consent to analytics cookies, we use Google Analytics 4 (GA4) to measure page views, scroll depth, button clicks and form interactions. GA4 sets two cookies (_ga and _ga_NSNQQHNXPJ) that expire after two years. If you decline analytics cookies, GA4 operates in cookieless mode with no identifying data collected. We also log anonymous page-view events to our own database (Supabase, EU-hosted) using a session ID stored in sessionStorage. We do not use advertising cookies or retargeting.
To respond to your brief, operate your booking, invoice you, and improve the house. Legal basis: legitimate interest (responding to enquiries) and contract (fulfilling bookings).
Only the houses required to deliver your booking (the specific restaurant, yacht, venue or chauffeur), and only the information they need. We never share with marketing partners or data brokers. Google Ireland Limited processes anonymised analytics data on our behalf under a Data Processing Agreement. Data is stored in the EU (europe-west1). Google does not use this data for advertising.
EU-hosted cloud infrastructure (Ireland region). Encrypted at rest and in transit. Retained for 24 months after last interaction, or longer if required for tax or accounting (7 years under Maltese law).
Under GDPR you have the right to access, correct, delete, export or restrict processing of your data. Email reservewithportus@gmail.com and we respond within 30 days. You can also complain to the Maltese Information and Data Protection Commissioner.
See our cookies page — short list, all first-party, no tracking ads.
Last updated: April 2026.