Privacy Policy

Last updated: June 2026

1. Who We Are

OdysseyAttraction is a tourist activity and accommodation booking platform operating in Mauritius and nearby islands. When you use our website, we collect and process certain personal data as described below.

2. Data We Collect

• Account data: name, email address, phone number when you register.
• Booking data: booking details, dates, party size, and payment reference.
• Inquiry data: name, email, message content when you submit an inquiry.
• Technical data: IP address, browser type, pages visited (for security and analytics).
• Cookie data: session identifiers, cart contents, and consent preferences.

3. How We Use Your Data

• To process and confirm your bookings.
• To send booking confirmation and relevant communications.
• To respond to inquiries.
• To improve our website and services.
• To comply with legal obligations.

4. Payments

All card payments are processed by Stripe or PayPal. We never store your card details — payment data is handled entirely by these PCI-DSS certified providers.

5. Data Sharing

We do not sell or rent your personal data. We may share data with:

• Payment processors (Stripe, PayPal) to complete transactions.
• Email providers (e.g. SendGrid) to send booking confirmations.
• Hosting providers for infrastructure purposes.

6. Cookies

We use strictly necessary cookies (session, CSRF) and, with your consent, functional cookies (cart contents, language preference). We do not use advertising cookies.

7. Your Rights

You have the right to access, correct, or delete your personal data. Contact us at [email protected] to exercise any of these rights.

8. Data Retention

Booking and account data is retained for 7 years for legal and tax purposes. You may request deletion of non-essential data at any time.

9. Contact

For any privacy-related questions, email us at [email protected].