Privacy policy

The data controller is Party Island Group (partyislandgroup.com), VAT number MT32283622, which runs Party Island Zante (partyislandzante.com) and the other Party Island websites. For anything about this policy or your data, use the contact form on our Contact page or WhatsApp (+34 646 898 488).

Only what you give us. The contact form asks for your name, email, phone (optional) and message. The travel-dates form asks for your name, email and arrival and departure dates, and then, optionally, your phone for WhatsApp alerts. The notify boxes ask for your email and record which event or page you asked to be told about. If you use the chat assistant, the messages you type are sent to answer you; we do not keep the text of the conversation, only technical usage data (time, page language, whether it answered) linked to a one-way code of your connection, not to you. If you write to us on WhatsApp, we receive your phone number, your profile name and the content of your messages. We do not create accounts and we do not ask for payment details: tickets are bought on GetYourTickets, which has its own privacy policy. Each form also records the time it was submitted, the page, the language of the site, your browser and a one-way code of your connection, as proof of what you accepted and to stop abuse.

To answer your contact request. To email you the parties during your travel dates that are already on sale and, after that, to alert you when other parties for those dates go on sale. To tell you when a specific event or category goes on sale (notify boxes). To measure how the site is used, in aggregate, if you accept analytics cookies. We do not sell your data and we do not use it for automated decisions about you.

Your consent, which you give by ticking the box on each form and which you can withdraw at any time, for the emails about your travel dates, the alerts and any newsletter. Our pre-contractual relationship with you, for answering a contact request you sent us. Our legitimate interest in keeping the site working and protected against abuse, for the technical anti-spam checks and server logs. Analytics only run with your consent through the cookie banner.

The contact, travel-dates and alert forms have a separate, unticked box: 'I also want news from the other Party Island destinations'. If you leave it unticked, you only hear about Zante. If you tick it, we may email you about parties in the other destinations of the group (such as Malta, Tenerife, Mykonos, Punta Cana or Albania). You can withdraw that consent from any email we send or by writing to us through our Contact page, without affecting your Zante alerts. The newsletter sign-up does not have that box: it only subscribes you to Zante.

Your data is stored by Party Island Group (partyislandgroup.com). These providers process it on our behalf and only for this purpose: Supabase (database, hosted in the European Union), Resend (sends our emails; it receives your email address and the content of each message), Groq (runs the chat assistant; it receives the messages you type to produce the answer), Netlify (hosts the websites), GitHub (runs our scheduled tasks, such as alerts, backups and the deletion of old data) and Google (provides the mailbox where our team receives new requests and your replies to our emails). If you accept analytics cookies, Google Analytics 4 receives usage data as described in the cookie policy. If you contact us on WhatsApp, Meta processes the conversation under its own terms. We do not sell your data and we do not share it with anyone else, except when the law requires it.

Our database is hosted in the European Union. Some providers may process data in the United States: Resend (email), Groq (chat assistant), Netlify (hosting), GitHub (scheduled tasks), Google (team mailbox), and Google Analytics and Meta when you use them. Where that happens, the transfer relies on the European Commission's standard contractual clauses or on an adequacy decision (such as the EU-US Data Privacy Framework for certified providers), as published by each provider. You can ask us through our Contact page which providers we use at any time.

Contact and travel-date requests: two years after you sent them. Alert and newsletter subscriptions: while you stay subscribed. If you unsubscribe from everything, within seven days we delete your name, phone and travel dates and keep only your email address with the record of your consent and of your unsubscribe, so that we never write to you again by mistake and can prove what you agreed to. Waiting-list entries: one year after the alert was sent or cancelled. A record with no subscriptions, requests or alerts: deleted after two years without activity. The log of emails we sent you (date, subject and delivery status, not the content): one year. The list of parties we already told you about: about thirteen months. Anti-spam, security and chat usage data: ninety days. If you ask us to erase your data, we delete it and keep only a one-way code of your email so that it is not added again by mistake; if you sign up again yourself later, that code is removed. Analytics data: as configured in Google Analytics, by default fourteen months. Data we must keep by law is kept for the legal period and then deleted. WhatsApp conversations: while they help us answer you, and no more than two years after your last message. Encrypted backups of the database: thirty days at most, so anything we erase also disappears from them within that time.

You can ask us to access, correct, delete or limit your data, to send you a copy of it in a portable format, and to stop any processing based on our legitimate interest. You can withdraw any consent at any time, from a link in our emails or by writing to us through our Contact page, and the withdrawal does not affect what was done before it. If you think we have not handled your data properly, you can complain to the Maltese data protection authority (Information and Data Protection Commissioner, idpc.org.mt) or to the authority of the EU country where you live. We answer requests within one month.

This site is for people aged 18 and over; entry rules for each party, including the minimum age, are set by the venue. We do not knowingly collect data from anyone under 18; if you believe we have, tell us through our Contact page and we will delete it.

Forms are sent over an encrypted connection. Access to the lead database is limited to the people who answer requests and send alerts. We cannot guarantee that no breach will ever happen, but if one affects your data we will tell you and the authority as the law requires.

If this policy changes, the new version is published on this page with its date. Material changes to how we use data you already gave us are announced by email where we have your address.