Last updated 17 October 2026.
Who is responsible
GozoLife is published by GozoLife, in Malta. For anything on this page, including a request to see or delete your data, write to hello@gozolife.com.
Because we are established in Malta, this site is subject to the EU General Data Protection Regulation and to Maltese data protection law. The supervisory authority is the Office of the Information and Data Protection Commissioner.
What this site collects
Nothing is required of you to read this site. There are no accounts, no logins, no newsletter sign-up as things stand, and no forms that ask for personal details.
Automatically, by the hosting provider
The site is served by Vercel. Like any web server, it processes the technical information a browser sends in order to deliver a page: your IP address, the page requested, the time, your browser and operating system, and the page you came from. Vercel acts as our processor for this and holds it for a limited period for security and performance purposes. The lawful basis is our legitimate interest in running a site that works and is not being attacked.
If you allow analytics
If, and only if, you choose to allow analytics in the cookie banner, we use Google Analytics 4 to count which pages are read and which are not. This tells us which pages are thin and worth rewriting. We have IP anonymisation enabled, we do not enable Google Signals or advertising features that build a profile of you, and we do not attempt to identify individual readers.
The lawful basis is your consent. You can withdraw it at any time using the button in the sidebar or in the footer, and withdrawal takes effect immediately.
If you allow marketing
If you allow the marketing category, a click on a booking or hire link may carry a parameter identifying which page it came from, so that the partner can attribute a booking to this site and pay the commission that funds the writing. That parameter identifies the page, not you.
Once you leave this site for a partner, you are on their site under their privacy policy, and they will set their own cookies. We have no control over and no visibility into that. The partners we intend to work with are named in the disclaimer.
Campaign parameters
If you arrive from an advertisement, a newsletter or a search
advertisement, the link may carry campaign parameters such as
utm_source. We keep those in your browser's session storage
for the length of your visit so that attribution survives the click path,
and they are discarded when you close the tab. They are not a cookie,
they are not sent anywhere unless you have allowed the relevant category,
and they do not identify you.
Live weather
Beach and coast pages fetch a live forecast from Open-Meteo. That request is made by your browser directly and carries the coordinates of the bay you are reading about, not your location. We never ask for your location, and the site does not use the browser geolocation API.
What this site does not do
- No advertising network, no retargeting, no audience sold or shared.
- No social media tracking pixels.
- No fingerprinting, and no attempt to work around a declined consent.
- No profile built about you, and no decision made automatically about you.
- No collection of special category data, and nothing collected from children.
Cookies and similar storage
The cookie policy lists every item of storage this site uses, what it is for, how long it lasts, and which of them depend on your consent. The only thing stored without your consent is the record of the choice you made, because the alternative is asking you again on every page.
Transfers outside the EEA
Vercel and Google are United States companies and may process data outside the European Economic Area. Both rely on the European Commission's Standard Contractual Clauses and on the EU-US Data Privacy Framework. If you decline analytics, no data reaches Google at all.
How long anything is kept
Server logs: a short rolling window set by the hosting provider. Analytics, if you allowed it: the retention period configured in Google Analytics, which we keep at the shortest setting that still allows year-on-year comparison. Your cookie choice: twelve months, after which you are asked again. Session storage: until you close the tab.
Your rights
Under the GDPR you have the right to ask what we hold about you, to have it corrected, to have it deleted, to restrict or object to its processing, and to receive it in a portable form. You also have the right to withdraw consent at any time and the right to complain to the IDPC.
In practice, we hold almost nothing that could identify you, so the honest answer to most access requests is that there is nothing to produce. Write to hello@gozolife.com and you will get a straight answer within one month.
Changes
If this policy changes materially, the date at the top changes and the cookie banner is shown again where the change affects what you consented to. Minor wording corrections will not trigger that.