How we handle data — the short version, then the long version.
The short version. We collect the minimum we need to host you properly — your name, email, company, and the details of your brief. We do not sell your data, ever. We use Supabase (EU) to store it and basic analytics to understand which pages are working. We honour deletion requests within 30 days.
PORTUS ("we", "us") is a private B2B corporate hospitality house based in Valletta, Malta. Data controller: PORTUS Ltd. Contact: hello@weareportus.com.
When you submit a brief or contact us, we collect your name, work email, company, role, and the details of your enquiry (guest count, date, dietary notes, special requests). When you browse the site, we log anonymous analytics (page views, source, device type) and a session ID stored in your browser. We do not use third-party advertising cookies.
To respond to your brief, operate your booking, invoice you, and improve the house. Legal basis: legitimate interest (responding to enquiries) and contract (fulfilling bookings).
Only the houses required to deliver your booking (the specific restaurant, yacht, venue or chauffeur), and only the information they need. We never share with marketing partners or data brokers.
Supabase (EU West — Ireland). Encrypted at rest and in transit. Retained for 24 months after last interaction, or longer if required for tax/accounting (7 years under Maltese law).
Under GDPR you have the right to access, correct, delete, export or restrict processing of your data. Email hello@weareportus.com and we respond within 30 days. You can also complain to the Maltese Information and Data Protection Commissioner.
See our cookies page — short list, all first-party, no tracking ads.
Last updated: April 2026.