Privacy Policy.

South Bicycle Rentals (“we”, “us”) is a sole trader operating a bicycle rental service out of 39 Triq San Gwakkin, Il-Kappara, Malta. We are the data controller for any personal data you share with us when enquiring about or making a booking.

Reach us on WhatsApp at +356 77 715 510 or by email at toptiereventsmlt@gmail.com.

Only what's needed to rent you a bicycle. Specifically:

• Your name and WhatsApp number (so we can talk to you).
• Your requested rental dates (to confirm availability and cost).
• A delivery address, only if you ask for delivery.
• A photograph of a government-issued ID (security deposit verification).
• Proof of the 10% deposit payment (as sent to us by you via WhatsApp).

We do not collect marketing preferences, track your location, or use cookies on this website for analytics or advertising. There is no tracking pixel on any page.

We rely on two lawful bases under the GDPR (Regulation (EU) 2016/679):

• Performance of a contract — we can't rent you a bike without knowing who you are, when you want it, and having a refundable deposit on file.
• Legitimate interests — the ID photo is kept for up to 30 days after your rental ends, to resolve any damage claims or incidents that may come to light post-return.

ID photo

Deleted 30 days after the rental end date.

WhatsApp conversation

Retained in the business inbox for up to 12 months for booking records, then deleted.

Proof of deposit / payment

Retained for up to 6 years to comply with Maltese tax recordkeeping requirements.

Booking details (name, dates, amount)

Retained for up to 6 years for the same reason.

We do not sell your data. Your information is shared only with the service providers we use to operate the booking flow:

• Meta Platforms Ireland Ltd. — WhatsApp Business Cloud API (messaging).
• Google Ireland Ltd. — Google Workspace for bookings spreadsheet, calendar, and ID photo storage within the EU zone.
• Make.com (Celonis SE) — automation platform that relays messages between the services above. EU data zone.
• OpenAI Ireland Ltd. — language model used to assist with the WhatsApp chat. Conversation content may be processed to generate replies; it is not used to train OpenAI's models (API data is excluded by default).
• Revolut Bank UAB — payment processor for the 10% deposit link.
• Vercel Inc. — hosts this website (no visitor analytics or cookies are collected beyond those required for the site to function).

These processors have their own privacy notices. Where data leaves the EEA, transfers rely on Standard Contractual Clauses or equivalent safeguards.

Under the GDPR, you can ask us at any time to:

• See what personal data we hold about you (right of access).
• Correct anything that is wrong (right of rectification).
• Delete your data, where we're not required to keep it for tax reasons (right to erasure).
• Export a copy of your data (right to data portability).
• Object to any processing relying on legitimate interests (right to object).
• Complain to the Maltese data protection regulator, the Information and Data Protection Commissioner.

To exercise any of the above, message us on WhatsApp or email toptiereventsmlt@gmail.com. We'll respond within 30 days, usually sooner.

This website sets no analytics or advertising cookies. The Google Maps embed on the Contact page is hosted by Google and is subject to Google's privacy policy; it may set cookies when you interact with it.

If we update this policy — for instance, if we add a new service provider or change retention windows — we'll change the “Last updated” date at the top of the page. Material changes will also be flagged to active customers on WhatsApp.