PRIVACY POLICY

Data Controller
SARL K2 – Villa M’Bay, 102 Résidence La Carrière, 97215 Rivière-Salée, Martinique
E-mail: hello@mbaymartinique.com
This policy explains what data we collect, why we collect it, how long we keep it, who we share it with, and your rights.

1. Data we collect

Contact form: name, email, phone number, message content.
Enquiry / booking (via Hostaway): identity, contact details, travel dates, group composition, stay preferences.
Payment and security deposit: amounts and transaction identifiers via Stripe/PayPal (the villa does not store card numbers).
Customer service: email/WhatsApp exchanges, request history.
Browsing: cookies and trackers (see “Cookies”), including Google Analytics and Google reCAPTCHA.

2. Purposes and legal bases (GDPR)

Handling enquiries and bookings: performance of a contract or pre-contractual steps.
Payments and card pre-authorisation (deposit): performance of a contract, legal obligations (accounting), and legitimate interest (fraud/security).
Guest communications (arrival, practical info, checkout): performance of a contract.
Audience measurement (Google Analytics): consent.
Site security and anti-spam/bot protection (reCAPTCHA): legitimate interest.
Legal compliance: tax/accounting obligations, responses to authorities.

3. Retention periods

Prospects / forms without booking: up to 3 years after last contact.
Guest files / contracts: duration of the stay, then up to 5 years.
Invoicing: 10 years.
Payment data: handled by Stripe/PayPal under their own retention rules; we never store card numbers.
Cookies: according to their purpose and settings (see “Cookies”).

4. Recipients and processors

OVH: site hosting.
Hostaway: booking management and contract dispatch/signature.
Stripe: card payments and pre-authorisations.
PayPal: payments via PayPal account.
Google: Google Analytics (audience) and reCAPTCHA (anti-spam security).
These providers act as processors, handling only the data necessary to deliver their services.

5. Transfers outside the EU

Some processing by Google, Stripe, Hostaway, or PayPal may involve transfers outside the European Union. Such transfers are covered by the European Commission’s Standard Contractual Clauses or equivalent safeguards.

6. Cookies and trackers

We use a consent banner. You can accept, refuse, or customise non-essential cookies at any time.

6.1 Essential cookies

Required for the site to function (security, forms, display). Set without consent.

6.2 Google Analytics (audience measurement)

Statistics to help us understand and improve site usage. Set only with your consent. You can withdraw consent via “Manage cookies”. Data are aggregated and do not directly identify you.

6.3 Google reCAPTCHA (anti-spam security)

reCAPTCHA protects our forms against automated submissions and spam. It may analyse technical elements (cursor movements, browser configuration, existing Google cookies) to distinguish a human from a bot. This processing relies on our legitimate interest in securing the site and forms. Google’s Privacy Policy and Terms of Service apply to this service.

7. Security

The site is served over HTTPS. Access to admin tools is restricted and protected. Payments are processed on secure Stripe/PayPal pages; we never store card numbers.

8. Your rights

You have the rights of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent for consent-based processing.
To exercise your rights: hello@mbaymartinique.com.
You may lodge a complaint with the French Data Protection Authority (CNIL) if needed.

9. Minors

Bookings must be made by an adult. Any information relating to children is collected only for organising the stay and kept to a strict minimum.

10. Changes

This policy may evolve. The online version is authoritative.
Last updated: 15/08/2025.