Privacy Policy
Privacy Policy
Last updated: 28 August 2026
1. Who We Are
ÎleBook is the controller of personal data processed through this booking platform. For privacy questions or requests, contact contact@ilebook.mu or WhatsApp +230 9419177.
2. Information We Collect
We collect account and booking details you provide, including name, email, phone or WhatsApp number, hotel, country, guest details, preferences and special requests. We also receive payment status from Stripe and, with consent, limited device and usage information from Google Analytics.
3. Purposes and Lawful Bases
We process booking and contact data to perform our contract with you; payment and accounting records to meet legal obligations; service messages, fraud prevention and support for our legitimate interests; analytics and promotional email only with your consent. You may withdraw consent at any time without affecting earlier lawful processing.
4. How We Share Data
We share only the data needed with the relevant activity operator, Stripe for payments, ZeptoMail for transactional email, hosting and technical providers, and authorities where legally required. We do not sell personal data.
5. International Transfers
Stripe may process data in the United States and ZeptoMail may process data in India. Where data leaves an adequate jurisdiction, we rely on safeguards such as the European Commission's Standard Contractual Clauses and supplementary security measures. Copies of applicable safeguards may be requested from us.
6. Retention
Account data is kept while your account is active and erased or anonymized within 30 days of a valid deletion request. Booking and payment records are kept for up to 7 years where tax or accounting law requires it; otherwise booking contact data is removed after 24 months. Support correspondence is kept for 24 months, marketing consent records for 5 years after withdrawal, and Google Analytics data for up to 14 months.
7. Cookies and Analytics
Essential storage is used to operate the service. Google Analytics is disabled unless you select Accept. You can reject it or change your choice at any time through Cookie Settings in the footer.
8. Marketing
Promotional email is optional and requires an unchecked, affirmative opt-in. Operational booking emails are not marketing. You can withdraw marketing consent at any time by contacting us or using an unsubscribe option where provided.
9. Your Rights
Subject to applicable law, you may request access, correction, deletion, restriction, objection, and a portable copy of your data. You may withdraw consent and object to processing based on legitimate interests. The dashboard provides profile editing, JSON export and account deletion tools.
10. Complaints
You may complain to the data protection authority where you live, work, or believe an infringement occurred. You may also contact the Mauritius Data Protection Office. Please contact us first if you would like us to address a concern directly.
11. Automated Decisions
We do not make decisions producing legal or similarly significant effects solely by automated processing, and we do not use personal data for automated credit or eligibility decisions.
12. Security
We use access controls, encrypted transmission and restricted administration to protect personal data. No internet service is completely risk-free; we review our safeguards and limit access to those who need it.
13. Children
The service is not directed to children under 16. Guest counts may include children, but the booking must be made by an adult. Contact us if a child has provided personal data directly.
14. Policy Changes
We may update this policy when our services or legal duties change. The current version and effective date are displayed on this page; material changes will be communicated where required.