Privacy Policy

Last updated: January 2026

This Privacy Policy describes how St John's Co-Cathedral Foundation ("we", "us", or "our") collects, uses, and protects your personal information when you use our online ticket booking service.

Information We Collect

When you purchase tickets through our website, we collect:

Name and contact information (email address, phone number)
Payment information (processed securely through Stripe)
Visit date preferences
Technical data (IP address, browser type, device information)

How We Use Your Information

We use your personal information to:

Process and confirm your ticket purchases
Send you booking confirmations and digital tickets
Communicate important information about your visit
Improve our services and website experience
Comply with legal obligations

Payment Security

All payment transactions are processed through Stripe, a PCI-DSS compliant payment processor. We do not store your credit card information on our servers. All payment data is encrypted and securely transmitted.

Data Sharing

We do not sell or rent your personal information to third parties. We may share your information with:

Payment processors (Stripe) to complete transactions
Email service providers to send confirmations
Legal authorities when required by law

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, typically for a period of 3 years after your visit.

Your Rights

Under GDPR, you have the right to:

Access your personal data
Rectify inaccurate data
Request deletion of your data
Object to processing of your data
Request data portability

Cookies

We use cookies to enhance your browsing experience and analyze website traffic. You can control cookie settings through your browser preferences.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

St John's Co-Cathedral Foundation
St John's Street, Valletta VLT 1152, Malta
Email: [email protected]