Last updated: 1 December 2025
SeaAndStone.blog (“we”, “our”, “the website”) is a travel and lifestyle blog focused on providing information about Malta. This Privacy Policy explains what personal data we collect, how we use it, and how visitors may exercise their rights under the GDPR.
1. Data We Collect
We collect only the data necessary for the functioning of this website.
1.1. Data collected automatically
When you browse the website, standard technical data may be collected automatically, such as:
- IP address (anonymised, if supported by your analytics provider)
- browser type and device information
- pages visited and time spent on the website
This data is used solely for website analytics and performance monitoring.
1.2. Email (optional)
If you voluntarily subscribe to our email updates (via MailerLite), we may collect:
- your email address
- the time and date of subscription
You can unsubscribe at any time using the link included in every email.
2. Cookies
We use cookies to ensure the correct functioning of the website (functional cookies) and for anonymous analytics.
Your cookie preferences can be changed at any time using the cookie banner displayed on the website.
3. How We Use Your Data
We use your data only for the following purposes:
- website functionality
- statistics and analytics
- sending newsletters (only if you subscribe)
- improving content quality and user experience
We do not sell, trade, or share your personal data with third parties for marketing purposes.
4. Legal Basis for Processing (GDPR)
We process personal data on one of the following legal bases:
- Consent – when you accept cookies or subscribe to the newsletter
- Legitimate interest – to maintain website operation, security, and analytics
- Contract – only when you voluntarily enter into a direct communication (e.g., email subscription)
5. Data Storage & Security
We take reasonable technical measures to protect your data.
Your data may be stored or processed by:
- SiteGround (hosting provider – EU servers)
- MailerLite (email service provider – EU based, GDPR compliant)
- Google Analytics / Site Kit (if enabled)
We retain personal data only as long as necessary for the purposes outlined in this policy.
6. Third-Party Services
The website may include links to third-party websites. We are not responsible for their privacy practices.
Our primary service providers include:
- SiteGround (hosting)
- Google (analytics, performance insights)
- MailerLite (email newsletter)
Each service provider processes data according to its own GDPR-compliant policies.
7. Your Rights
Under the GDPR, you have the right to:
- access your personal data
- request correction or deletion
- withdraw consent (e.g., cookie settings)
- unsubscribe from emails at any time
To exercise your rights, contact us at:
info@seaandstone.blog
8. Contact
If you have questions about this Privacy Policy, please contact:
info@seaandstone.blog
9. Changes to This Policy
We may update this Privacy Policy occasionally. The “Last updated” date at the top will always reflect the latest version.