Privacy Policy

Last updated 25.06.2026

Who We Are

This website is operated by Tuta Agrotourism, a licensed agritourism farmstay located in Kercem, Gozo, Malta. Our website address is: https://tuta.mt. For privacy-related enquiries, contact us at: [email protected]


Comments

When visitors leave comments on the site, we collect the data shown in the comment form, along with the visitor’s IP address and browser user agent string to help with spam detection.

An anonymised string created from your email address – known as a hash – may be shared with the Gravatar service to check whether you use it. The Gravatar service privacy policy is available at: https://automattic.com/privacy/. Once your comment is approved, your profile picture may be visible to the public alongside your comment.


Media

If you upload images to the website, please avoid uploading images with embedded location data (EXIF GPS). Visitors to the site can download and extract location data from any images published on the website.


Cookies

Our website uses cookies for functionality, analytics, and advertising purposes. Cookies are small text files stored in your browser. You can control or disable cookies through your browser settings, though some features of the site may not work correctly if you do so.

If you leave a comment, you may opt in to saving your name, email address, and website in cookies for your convenience, so you do not need to fill in your details again next time. These cookies last for one year.

If you visit our login page, a temporary cookie will be set to check whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, several cookies are set to save your login information and display preferences. Login cookies last for two days and screen option cookies last for one year. If you select “Remember Me”, your login will persist for two weeks. Logging out removes all login cookies.

If you edit or publish an article, an additional cookie will be saved containing the post ID of the article you edited. This cookie contains no personal data and expires after one day.


Analytics

We use Google Analytics to understand how visitors interact with our website. This service collects anonymised data about your visit, including pages viewed, time spent on site, device type, and general geographic location. This data is aggregated and does not identify you personally.

Google Analytics sets cookies in your browser to track sessions across pages. You can opt out at any time by installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

For more information on how Google handles your data: https://policies.google.com/privacy


Advertising and Tracking

Our website uses the Meta Pixel, a piece of code that allows us to measure the effectiveness of our advertising on Facebook and Instagram, and to show relevant content to people who have previously visited our site.

The Meta Pixel may collect data about your actions on this website and associate this with your Facebook or Instagram profile if you are logged into those platforms. This data is processed by Meta Platforms Ireland Ltd. Their privacy policy is available at: https://www.facebook.com/privacy/policy/

You can manage your advertising preferences or opt out of interest-based advertising through Meta’s Ad Preferences settings: https://www.facebook.com/ads/preferences


Embedded Content from Other Websites

Pages on this site may include embedded content from third-party platforms such as Instagram or YouTube. Embedded content behaves exactly as if you had visited those platforms directly. These websites may collect data about you, set their own cookies, embed additional third-party tracking, and monitor your interaction with the embedded content – including if you have an account and are logged in to that website.


Who We Share Your Data With

If you request a password reset, your IP address will be included in the reset email. We do not sell personal data to third parties.

Data collected through Google Analytics is processed by Google LLC. Data collected through the Meta Pixel is processed by Meta Platforms Ireland Ltd. Both are subject to their respective privacy policies linked above.


How Long We Retain Your Data

If you leave a comment, the comment and its metadata are retained indefinitely so we can recognise and approve follow-up comments automatically rather than holding them in a moderation queue.

For users who register on the website, we store the personal information provided in their user profile. All users can view, edit, or delete their personal information at any time, except they cannot change their username. Website administrators can also view and edit that information.

Enquiry and booking data is retained for as long as necessary to manage your stay and comply with applicable legal obligations.


What Rights You Have Over Your Data

Under the General Data Protection Regulation (GDPR), you have the right to request an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include data we are required to retain for administrative, legal, or security purposes.

To exercise any of these rights, please contact us at: [email protected]. You may also lodge a complaint with the Information and Data Protection Commissioner (Malta): https://idpc.org.mt


Where We Send Your Data

Visitor comments may be checked through an automated spam detection service. Data collected through Google Analytics may be processed on servers outside the European Economic Area – Google relies on Standard Contractual Clauses to ensure adequate protection. Data collected through the Meta Pixel is processed by Meta Platforms Ireland Ltd, based in Dublin, Ireland.


Changes to This Policy

We may update this policy periodically. The most current version will always be available at https://tuta.mt/privacy-policy. Last updated: June 2026.