Privacy & Cookie Policy

Last updated: May 2026

Paceville Pub Crawl ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This policy explains what we collect, how and why we use it, who we share it with, where it is stored, and the rights you have under the EU General Data Protection Regulation (GDPR) and Maltese data protection law.

1. Who We Are

Paceville Pub Crawl is operated by Keystone Global LLP, the data controller responsible for your personal data. We run guided nightlife experiences in Paceville, St Julian's, Malta.

For any privacy question or to exercise your rights, contact us at info@pacevillepubcrawl.com or by post at:

Keystone Global LLP
2 Frederick Street, Kings Cross
London, WC1X 0ND, United Kingdom

2. What We Collect

• Booking information — your name, email address, phone number, the date and time slot you book, ticket types and quantities, the amount paid, and your booking reference. This is collected through our own booking system when you book directly with us.
• Payment information — card payments are processed securely by Stripe. We do not see or store your full card details; we only receive confirmation of payment and limited transaction information.
• Enquiry and application information — anything you submit through our contact or careers forms (e.g. name, email, message, role applied for).
• Technical data — IP address, browser and device type, and pages visited, collected automatically via cookies and analytics.
• Marketing preferences — whether you have consented to receive offers and updates.

3. How We Use Your Data

• To process and confirm your booking, take payment, and send your e-ticket (including a QR code) and any booking-related updates.
• To check you in at the event and manage capacity.
• To respond to enquiries and job applications.
• To send you offers and news — only where you have consented — which you can withdraw at any time.
• To understand and improve our website and services through aggregated analytics.
• To meet our legal, accounting and tax obligations.

4. Legal Basis For Processing

We rely on the following legal bases under GDPR: contract — to deliver the booking you have made and provide the experience; consent — for marketing communications and non-essential cookies; legal obligation — to keep financial and tax records; and legitimate interests — to operate, secure and improve our business, provided these do not override your rights.

5. Who We Share Your Data With

We never sell your personal data. We share it only with trusted service providers ("processors") who help us operate, each bound by contract and their own data-protection obligations:

• Stripe — payment processing.
• Resend — sending your booking confirmation and e-ticket emails.
• Neon — the database where bookings are securely stored (EU region).
• Vercel — hosting of our booking application.
• Hostinger — hosting of this website (EU-based).
• Google Analytics — website usage analytics (only after you consent to analytics cookies).

Some bookings may originate from third-party platforms such as GetYourGuide, which act as separate controllers under their own privacy policies. If you book through them, their policy also applies.

6. Where Your Data Is Stored

Our booking database and website hosting are located within the European Union. Some of our providers (for example Stripe and Google) may process limited data outside the EU; where they do, they rely on appropriate safeguards recognised under GDPR (such as Standard Contractual Clauses) to protect your data.

7. Cookie Policy

Cookies are small files stored on your device that help the site function and let us understand how it is used. We use:

• Essential cookies — required for the site and booking process to work (including keeping your booking session and securing the admin area). These cannot be switched off.
• Analytics cookies — help us see how visitors use the site so we can improve it (Google Analytics).
• Marketing cookies — used to measure and optimise advertising, if and when we run ad campaigns (e.g. Meta and Google Ads).

When you first visit, our cookie banner lets you Accept all or choose Essential only. Non-essential cookies are only set after you consent, and you can change your choice at any time by clearing cookies in your browser.

8. Data Retention

We keep your booking and payment-related data for as long as needed to provide the service and to meet our legal, accounting and tax obligations (financial records are kept for the period required by law). Where data is no longer required, we review and delete it. You may ask us to delete your data at any time (see Your Rights), subject to any records we are legally required to keep.

9. Your Rights

Under GDPR you have the right to access your data, correct it, delete it ("right to be forgotten"), restrict or object to its processing, and to data portability. Where we rely on consent, you may withdraw it at any time. To exercise any of these rights, email info@pacevillepubcrawl.com. You also have the right to lodge a complaint with the Maltese Information and Data Protection Commissioner (IDPC) at idpc.org.mt.

10. Security

We apply appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure EU-based storage, restricted and two-factor-protected administrative access, and processing card payments exclusively through Stripe so that we never handle your full card details.

11. Children

Our services are intended for adults of legal drinking age in Malta (18+). We do not knowingly collect data from anyone under 18.

12. Changes To This Policy

We may update this policy from time to time. The latest version will always be posted on this page with the revision date above.

Questions about your data? Contact us →