Legal Disclosure

Privacy Policy

Effective Date: January 1, 2026. This Privacy Policy sets out how Happyroschoiceindx Travel & Cultural Media Ltd. processes, protects, and respects your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Data Protection Act (Cap. 586 of the Laws of Malta).

1. Introduction & Data Controller

Happyroschoiceindx Travel & Cultural Media Ltd. ("we", "us", "our", or "the Company") is registered in Malta under Company No. C-984210, with registered offices at 44 St. Barbara Bastion, Valletta VLT 1961, Malta. We are committed to safeguarding the privacy and fundamental rights of all visitors who access our website at happyroschoiceindx.beauty.

2. Information We Collect

We collect personal information under two primary categories:

  • Information You Voluntarily Provide: When you submit inquiries through our contact forms, subscribe to our editorial bulletins, or request customized itinerary recommendations, we may collect your name, email address, country of residence, and specific travel inquiries.
  • Automatically Collected Technical Data: When you navigate our platform, our servers automatically log technical parameters, including your anonymized IP address, browser type and version, operating system, referring URL, time zone setting, and navigation sequences across our guides.

3. Cookies & Tracking Technologies

We employ standard HTTP cookies and local storage tokens to remember your consent choices, persist your customized itinerary selections, and calculate aggregated readership statistics. Full operational details regarding our cookie mechanisms are outlined in our dedicated Cookie Policy.

4. Legal Basis for Data Processing

We process your personal data solely under recognized legal bases defined under Article 6 of the GDPR:

  • Consent: Where you have granted explicit consent for analytical cookies or newsletter subscriptions.
  • Legitimate Interests: To maintain site security, prevent fraudulent bot access, and improve the quality of our Malta travel journalism.
  • Contractual / Pre-Contractual Measures: To respond directly to your inquiries and deliver requested trip planning advice.

5. Data Sharing & Third-Party Services

We do not sell, rent, or trade your personal data to external commercial brokers. We may share limited data with trusted technical infrastructure providers (such as EU-based cloud hosting networks, content delivery networks, and transactional email gateways) bound by strict Data Processing Agreements (DPAs).

6. Data Retention Periods

Inquiry communications submitted via our contact forms are retained for up to 24 months to support ongoing travel advisory threads, after which they are securely purged. Aggregated analytical logs are retained in anonymized format for statistical benchmarking.

7. Data Security Measures

We maintain comprehensive physical, technical, and organizational security protocols, including TLS 1.3 encryption for all data in transit, strict access controls, periodic vulnerability assessments, and secure database clustering.

8. Your Rights Under GDPR

As a data subject within the European Economic Area or visiting our Maltese platform, you possess the right to:

  • Request access to copies of your personal data held by us;
  • Request rectification of inaccurate or outdated information;
  • Request the erasure of your personal data ("Right to be Forgotten");
  • Restrict or object to specific processing operations;
  • Request the transfer of your data to another provider (Data Portability);
  • Withdraw your consent at any time without affecting past processing lawfulness;
  • Lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta (idpc.org.mt).

9. Children's Privacy

Our website and services are intended for general adult audiences and travelers. We do not knowingly collect or solicit personal data from minors under the age of 16.

10. Updates to this Policy

We may periodically update this Privacy Policy to reflect changes in regulatory standards or site features. The latest revision date will always appear prominently at the top of this document.

11. Contact Our Data Protection Officer

If you have any questions or wish to exercise your statutory privacy rights, please contact our Data Protection Officer at:

Happyroschoiceindx Travel & Cultural Media Ltd.
Attn: Data Privacy Desk
44 St. Barbara Bastion, Valletta VLT 1961, Malta
Email: [email protected]