Legal
Privacy policy
What happens to your details when you use the Nights Events website, the forms of the Nights websites or the host's assistant — in plain words.
Last updated: 9 November 2026
Who we are
Nights Events is the home of the Nights websites: Malta Nights, Tenerife Nights, Zante Nights, Mykonos Nights, Punta Cana Nights and Albania Nights. VAT number MT32283622.
This policy covers the Nights Events website, its forms and the assistant "Ask the host", which runs on nightsevents.com; Nights Events is the controller of the data they collect. The forms of this website and those of Tenerife, Zante, Mykonos, Punta Cana and Albania Nights are stored in the group's central database, run by the same company, and their emails are sent by the group's central back office. To reach us about your data, use the contact form or message us on WhatsApp at +356 7759 0493.
What we keep and why
- The list. Your email, your first name if you give it, the destinations you switch on and your language. We use them to email you when nights go on sale and about offers from the Nights websites, because you ticked the box that says so (your consent).
- Date alerts and "notify me". On the destination websites you can leave your travel dates or ask for one specific night. Both ask for the same consent as the list, so they count as list sign-ups; we keep those dates or that night to send you that alert.
- Messages. When you write to us, we keep your name, email, your mobile if you add it and your message, so we can answer you (a step you asked for).
- What each sign-up records. Your email and the website it came from, the type of form (list, dates, a single night or contact), your language, the date and time, and whatever you typed: name, mobile, message, dates, group size or interest. For list sign-ups we also keep, as proof of your consent, the version of the text you accepted and the page you accepted it on.
- Security. To stop spam and abuse, the forms carry a hidden trap field, check how long each one took to fill in and limit repeated requests. We don't store your IP address with a valid sign-up: it's used only briefly, in memory, to limit repeated requests.
The assistant "Ask the host"
When you ask the assistant something, your question is sent to an AI provider (Groq) to write the answer. We don't store the text of your conversation: your browser keeps it only until you close the tab. What we record is technical usage data without the text of your messages — website, language, outcome and timings — and the hosting provider's server logs keep it for a short time. Don't share personal details in the chat.
Emails
Every email about the list, an alert or a message is sent by the group's central back office, and every list email has a link to leave in one click. We don't track whether you open our emails or click their links. For one year we keep each email's delivery status (sent, delivered, bounced or complaint) and a copy of the email itself.
How long we keep it
- On the list (date alerts and "notify me" sign-ups included): while you're on it. Leaving stops the emails at once; seven days later we erase your name, mobile, message, dates, group size and interest, and keep only your email, the website, your language, where you signed up and the mark that you left, so we don't add you again by mistake.
- "Notify me" for a single night: an alert not yet sent stays until that night, or the one replacing it, goes on sale, and one year at most; an alert already sent is erased once the night has passed. Leaving cancels that website's pending alerts at once, and they're erased in the next daily pass.
- Messages sent without list consent: erased two years after the last activity.
- Technical security records: up to 90 days.
- You can ask us to erase your details at any time.
Who helps us
We don't sell your details or share them with venues, promoters or advertisers. These providers process them on our behalf, and only for what's described here:
- Supabase — the database.
- Resend — sending the emails, through an account of the Nights websites in Resend's EU region.
- Netlify — hosting the website.
- Groq — the AI model behind the assistant.
Some of them are outside the European Economic Area (for example, in the United States). Those transfers rely on the European Commission's standard contractual clauses or another safeguard the GDPR allows.
Your rights
You can ask to see, correct or delete your details, to limit or object to how we use them and to receive them in a portable format. We handle an erasure request within one month. You can withdraw your consent whenever you like — the link at the bottom of every list email takes one click — without affecting anything that happened before.
If you think we've handled your data badly, you can complain to Malta's data protection authority, the Information and Data Protection Commissioner (idpc.org.mt).
Age
The Nights websites are about nights out for adults. If you're under 18, please don't send us your details.
Changes and law
If this policy changes, the date at the top changes too, and if the change matters we'll tell the people on the list. This policy is governed by the law of Malta and the GDPR.
