Cookie Policy

1. What are cookies?

Cookies are small text files or pieces of information stored on, or accessed from, your computer, telephone, tablet or other device when you visit a website. They can be used to provide essential website functions, remember preferences, improve security, measure website use or enable third-party features.

Similar technologies can include local storage, pixels, tags, software development kit identifiers and other methods of storing or accessing information on a device.

2. The rules that apply

Our use of cookies and similar technologies is governed by the Communications (Personal Data and Privacy) Regulations 2006, the Gibraltar General Data Protection Regulation and the Data Protection Act 2004.

Non-essential cookies and similar technologies will not be placed or accessed unless the visitor has been given clear information and has provided any consent required by law.

3. How we use cookies

We seek to keep the use of cookies and similar technologies to what is necessary for the website and its visitor services. Cookies may fall into the categories below.

Strictly necessary — these technologies are required for the operation, security or delivery of a service that you have requested. They may be used to protect the website, manage traffic, maintain essential functions, process form submissions or remember your privacy choices. Consent is not required where a cookie or similar technology falls within a legal exemption, but information about its use must still be provided.

Analytics —analytics technologies help us understand how visitors use the website, for example which pages are viewed and how visitors reach the site. Where analytics involve storing or accessing information on a visitor's device and do not fall within an exemption, they will remain disabled until consent has been given.

Functional — functional technologies may support optional features such as embedded media, interactive maps or other third-party content. Where these technologies are not strictly necessary, they will only be activated after any required consent.

Advertising and profiling —the core purpose of www.stmichaelscave.com does not require behavioural advertising or profiling cookies. If such technologies are introduced in the future, this policy and the website's consent controls must be updated before they are activated.

4. Your choices

Where non-essential cookies are used, the website will provide a clear choice before they are activated. The consent interface should allow you to accept or reject non-essential cookies without being encouraged towards one choice.

Where applicable, the controls should provide:

• Accept All
• Reject All
• Cookie Settings or an equivalent option to choose by category

Rejecting non-essential cookies will not prevent access to the main visitor information on the website.

5. Changing or withdrawing consent

Where we rely on consent, you may change or withdraw your choice at any time. A permanent Cookie Settings link, or an equivalent readily available control, should be available on the website so that changing your preference is as easy as giving it.

Changing a preference will prevent future use of the affected technology. Depending on the technology, information already stored on your device may also need to be removed through the consent tool or your browser settings.

6. Current cookie inventory

The current cookie and similar-technology inventory for www.stmichaelscave.com should be displayed within the website's Cookie Settings panel. That inventory forms part of this Cookie Policy and must be kept up to date whenever the website or its service providers change.

For each cookie or similar technology, the inventory should identify:

• name
• provider
• purpose
• category
• whether it is first-party or third-party
• duration or expiry
• whether consent is required

The inventory should be generated from the final production website rather than the development environment, so that it reflects the technologies actually deployed on www.stmichaelscave.com.

7. Third-party content and services

The website may contain links to external websites or may, where enabled, include third-party content such as maps, videos, booking tools or social content.

A link to another website does not by itself allow that website to place cookies through www.stmichaelscave.com. If third-party content is embedded directly into this website, we will assess whether it stores or accesses information on a visitor's device and whether consent is required before it loads.

Once you leave www.stmichaelscave.com, the external website may use its own cookies under its own privacy and cookie terms.

8. Website analytics

If website analytics are enabled, the service will be configured in a manner intended to minimise the collection of personal data. Any analytics technology that requires consent under Gibraltar law will remain disabled until the visitor has chosen to allow it.

If a different analytics provider or tracking configuration is introduced, the cookie inventory and consent controls must be updated before deployment.

9. Browser controls

Most web browsers allow you to view, block or delete cookies. Browser controls operate separately from the website's own Cookie Settings. Blocking all cookies may affect features that depend on strictly necessary storage.

10. How long cookies remain on your device

Some cookies last only for the duration of a browsing session and are deleted when the browser closes. Others remain for a defined period. The duration of each cookie or similar technology should be shown in the current cookie inventory within Cookie Settings.

We will not set a non-essential cookie for longer than is reasonably necessary for its stated purpose.

11. Updates to this Cookie Policy

We may update this Cookie Policy when website functionality, service providers, cookies, similar technologies or applicable legal requirements change. The date shown at the beginning identifies the latest published version.

12. Contact

Questions about cookies, privacy or personal data may be sent to:
General website enquiries: info@stmichaelscave.com
HM Government of Gibraltar Data Protection Officer: dpo@gibraltar.gov.gi

You may also contact the Gibraltar Regulatory Authority:
Gibraltar Regulatory Authority
Information Rights Division
2nd Floor, Eurotowers 4
1 Europort Road
Gibraltar GX11 1AA
Telephone: +350 200 74636
Email: privacy@gra.gi
Website: www.gra.gi