Privacy Policy

1. Who we are

Maldiverooms ("we", "us", "our") is an accommodation booking platform connecting travellers with private homestays, guesthouses, and boutique hotels on local Maldivian islands. We are based in Malé, Republic of Maldives. You can contact us at [email protected].

2. Information we collect

We collect information you provide directly to us, including booking enquiries, account registration details, property listings, and payment information processed by Stripe.

We also collect limited technical data automatically when you visit our site, including your IP address, browser type, pages visited, and referring URL. This is used solely for security and performance monitoring.

3. How we use your information

We use the information we collect to process booking enquiries, connect you with property owners, operate owner accounts, process payments via Stripe, send transactional communications, improve the platform, and comply with legal obligations. We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Legal basis for processing (GDPR)

Where the General Data Protection Regulation (GDPR) applies, we process your personal data on the following legal bases: (a) contract performance — to fulfil booking enquiries and owner agreements; (b) legitimate interests — to operate and improve our platform; (c) legal obligation — where required by applicable law; and (d) consent — where you have explicitly agreed, such as accepting cookies.

5. Cookies

We use strictly necessary cookies to operate the site (session management, security). We may also use analytics cookies to understand how visitors use our site. You can control cookie preferences through the cookie consent banner displayed on your first visit. You can also manage cookies through your browser settings at any time.

6. Data sharing

We share your information only with property owners (to facilitate your stay), Stripe (payment processing), hosting and infrastructure providers (on our instructions only), and legal authorities (where required by law).

7. Data retention

We retain booking enquiry data for up to 2 years to handle any follow-up queries. Owner account data is retained for as long as the account is active, plus 1 year after closure. You may request deletion of your data at any time by contacting us at [email protected].

8. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, and to withdraw consent at any time. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Passwords are hashed using industry-standard algorithms. Payment data is processed exclusively by Stripe over encrypted connections.

10. International transfers

Our platform is operated from the Maldives. If you are located in the European Economic Area (EEA) or United Kingdom, your data may be transferred to and processed in countries outside the EEA/UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with applicable data protection law.

11. Children's privacy

Our platform is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of our platform after changes constitutes acceptance of the updated policy.

13. Contact us

For any privacy-related questions or to exercise your rights, please contact us: