Privacy Policy

1. Who We Are

J Group Villas is a private villa rental company operating three exclusive beachfront residences at Mont Choisy, Grand Baie, Mauritius. We are the data controller for the personal information described in this policy.

For all privacy-related enquiries, please contact us at:
Email: [email protected]
Address: Mont Choisy, Grand Baie, Mauritius

2. What Personal Data We Collect

We collect the following categories of personal data when you make a booking enquiry or reservation:

We do not collect sensitive personal data (health, religion, political views, etc.), and we do not collect payment card numbers directly — all card payments are processed by PayPal.

3. How We Use Your Data

We use your personal data for the following purposes:

• Booking management — to process your reservation request, confirm availability, and manage your stay.
• Communications — to send booking confirmations, payment links, arrival instructions, and respond to your queries.
• Guest portal access — to allow you to log in to your booking dashboard using a secure magic link or reference number.
• Legal and accounting obligations — to maintain financial records required under Mauritius tax law and applicable regulations.
• Service improvement — to understand how our guests use our services (in aggregate, non-identifiable form only).

The legal bases under which we process your data are: performance of a contract (processing your booking), legitimate interests (communicating with guests, maintaining records), and legal obligation (tax and accounting records).

4. Who We Share Your Data With

We do not sell your personal data. We share it only with the following third-party service providers, and only to the extent necessary:

• Resend (email delivery) — your name and email address are passed to Resend Inc. to deliver booking confirmation and notification emails. Resend processes data on servers based in the European Union (Frankfurt, Germany). See Resend's Privacy Policy.
• PayPal — when you make a deposit or balance payment, you are redirected to PayPal's secure platform. J Group Villas does not see or store your card details. See PayPal's Privacy Policy.
• Bluehost / web hosting — our website and booking database are hosted on servers in the United States (Bluehost / Newfold Digital). Data transfers are covered by standard contractual clauses.

We do not share your data with any advertising networks, analytics platforms, or marketing companies.

5. How Long We Keep Your Data

• Booking records — retained for 7 years from the date of the booking, as required for tax and accounting purposes under Mauritius law.
• Email correspondence — retained for up to 2 years after your stay, then deleted.
• Guest portal session data — session cookies expire automatically when you close your browser or after 4 hours of inactivity. Magic login links expire after 24 hours.
• Declined or cancelled bookings — contact details retained for 12 months, then deleted.

6. Your Rights

Depending on your location, you may have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right of rectification — to request correction of inaccurate or incomplete data.
• Right to erasure — to request deletion of your data (subject to our legal retention obligations).
• Right to object — to object to processing based on legitimate interests.
• Right to portability — to receive your data in a structured, machine-readable format.
• Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time.

To exercise any of these rights, please email [email protected]. We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.

7. Cookies

Our website uses only functional session cookies — these are strictly necessary for the guest portal to work (keeping you logged in during your session). We do not use:

• Advertising or tracking cookies
• Analytics cookies (Google Analytics or similar)
• Third-party social media cookies

Session cookies are deleted automatically when you close your browser. You can also clear them at any time through your browser settings. Because we only use strictly necessary cookies, no cookie consent banner is required.

8. GDPR & International Transfers

Although J Group Villas is based in Mauritius, we take the requirements of the EU General Data Protection Regulation (GDPR) seriously when handling data from guests in the European Economic Area.

Our email delivery partner (Resend) processes data on servers located in Frankfurt, Germany (EU). For transfers to other destinations, we rely on standard contractual clauses approved by the European Commission.

If you are an EEA resident and believe your data has been processed unlawfully, you have the right to lodge a complaint with your national data protection authority.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:

• HTTPS encryption on all web pages and API endpoints
• The booking database is stored outside the public web root
• Admin access protected by bcrypt-hashed passwords and session timeouts
• Guest portal access via time-limited magic links (no passwords stored)

No method of transmission over the internet is 100% secure. In the unlikely event of a data breach that poses a high risk to your rights, we will notify you without undue delay.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically. Continued use of our services after a change constitutes acceptance of the updated policy.

11. Contact Us

For any questions, requests, or concerns about this Privacy Policy or our data practices, please contact:

J Group Villas
Mont Choisy, Grand Baie, Mauritius
[email protected]
+230 525 42020