top of page

DATA PRIVACY AND COOKIES POLICY

​Last Updated: 17 April 2026

 

This Privacy Policy applies to the following properties and their respective operating entities:

  • Voile Bleue Boutique Hotel– RELAIS POINTE AUX PIMENTS LTEE

  • Dodo Square Residence – NICOSHIR LTD

  • Mont Choisy Beach R – Niki Villas Ltd

  • Alalila Trou aux Biches – Société PATMAZ

 

Each entity acts as an independent Data Controller under the Mauritius Data Protection Act 2017 (DPA 2017) and, where applicable, the EU General Data Protection Regulation (GDPR).

​

​

1. DATA CONTROLLERS

 

The legal entity operating the property with which you interact is responsible for the processing of your personal data.

 

If you have any questions about how your personal data is handled, or if you wish to exercise your data protection rights (such as access, correction or deletion of your data), you may contact our Data Protection Officer:

 

Data Protection Officer

Maître Julie Adamjee Croissandeau

Office 1.29, Workshop 17

The Precinct Building

The Vale, Mauritius

Email: dpo@ayogroup.mu

 

Please note that operational matters relating to reservations, bookings, or hotel services should be directed to the hotel directly using the contact details available on the relevant website.

 

 

2. PERSONAL DATA WE COLLECT

 

We may collect and process the following categories of personal data:

  • Identity data (name, date of birth, nationality)

  • Contact details (address, email, phone)

  • Reservation and stay details

  • Payment confirmation information (no storage of full card numbers or CVV)

  • Guest preferences and communications

  • Limited dietary data where voluntarily provided

  • CCTV footage

  • Website usage data (IP address, cookies, device data)

 

​

3. HOW WE COLLECT DATA

 

  • Direct bookings

  • Check-in processes

  • Communications with guests

  • Website forms and cookies

  • Third-party booking platforms

  • CCTV systems at our premises

 

​

4. LEGAL BASES FOR PROCESSING

 

We process personal data on the following legal bases:

  • Contract performance – managing reservations and stays

  • Legal obligation – accounting, tax and regulatory compliance

  • Legitimate interests – security, fraud prevention and service improvement

  • Consent – marketing communications and non-essential cookies

  • Explicit consent – where special category data is processed

 

​

5. PURPOSES OF PROCESSING

 

  • Manage bookings and stays

  • Process payments

  • Communicate with guestsand improve services

  • Ensure safety and fraud prevention

  • Comply with legal obligations

​

​

6. DATA SHARING

 

We may share personal data with:

  • Payment processors

  • Reservation/PMS providers

  • IT and cloud providers

  • Marketing service providers

  • Travel agencies and authorities (where legally required)

 

All processors are contractually bound to confidentiality.

 

​

7. INTERNATIONAL TRANSFERS

 

Where personal data is transferred outside Mauritius or the European Economic Area, we ensure appropriate safeguards are in place, including contractual protections such as Standard Contractual Clauses or equivalent measures in accordance with applicable law.

 

​

8. DATA RETENTION

 

• Financial records: 4 years

• Guest records: up to XX years

• Marketing data: until consent is withdrawn

• CCTV footage: maximum 180 days unless required for investigation

 

Data is securely deleted or anonymised once retention periods expire.

 

​

9. YOUR RIGHTS

 

You have the right to access, rectify, erase, restrict processing, object to processing, withdraw consent, request data portability and lodge a complaint with the Mauritius Data Protection Office or a relevant supervisory authority.

Requests should be submitted to the DPO. We may require identity verification. We aim to respond within one month.

 

 

10. CCTV

 

CCTV systems operate in public areas of our premises for safety, security and crime prevention purposes. Cameras are not installed in guest rooms or private areas. Clear signage is displayed. Footage is retained for up to 180 days unless required for investigation. Access is restricted to authorised personnel and may be disclosed to law enforcement where legally required.

 

​

11. COOKIES POLICY

 

Our websites use cookies to ensure functionality and improve user experience.

 

Types of cookies used:

  • Strictly Necessary Cookies – essential for website operation (legal basis: legitimate interest)

  • Functional Cookies – remember preferences (legal basis: consent)

  • Analytics Cookies – measure website performance (legal basis: consent)

  • Marketing Cookies – advertising and tracking (legal basis: explicit consent)

 

Non-essential cookies are activated only after user consent via our cookie banner.Users may withdraw consent at any time through Cookie Settings or browser controls.

 

​

12. POLICY UPDATES

 

This policy may be updated from time to time. The latest version will always be available on our website.

bottom of page