Privacy
Policy

2. Data Collected

We collect the following data:

• Identification data: first name, last name, email address, phone number.
• Booking data: booking history, service preferences, dates and locations.
• Payment data: banking information processed by Stripe (we do not store any banking data).
• Browsing data: IP address, browser type, pages visited, visit duration.
• Professional data: for providers and concierges, certifications, references, professional contact details.

3. Purposes of Processing

Your personal data is used to:

• Create and manage your user account.
• Process your bookings and track services.
• Manage payments and refunds.
• Communicate about your bookings (confirmations, reminders).
• Improve our services and your user experience.
• Send marketing communications (with your prior consent).
• Comply with our legal and regulatory obligations.

4. Legal Basis

The processing of your data is based on the following legal grounds:

• Performance of the contract: processing necessary to provide our services.
• Consent: for marketing communications and non-essential cookies.
• Legitimate interest: to improve our services and ensure the Platform's security.
• Legal obligation: to comply with accounting and tax obligations.

5. Data Sharing

Your data may be shared with:

• Providers: the information necessary to perform the service (name, location, preferences).
• Stripe: for secure payment processing.
• Analytics tools: Google Analytics (anonymized data).
• Authorities: in the event of a legal obligation.

We never sell your personal data to third parties.

6. Retention Period

Personal data is retained for the time necessary for the purposes for which it was collected:

• Account data: until the account is deleted, then 3 years.
• Booking data: 5 years from the end of the contractual relationship.
• Payment data: 10 years (accounting obligation).
• Browsing data: 13 months.

7. Your Rights

In accordance with the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure: request the deletion of your data.
• Right to restriction: restrict the processing of your data.
• Right to portability: receive your data in a structured format.
• Right to object: object to processing on legitimate grounds.

To exercise your rights, contact us at: privacy@maia.sb

8. Security

We implement appropriate technical and organizational measures to protect your personal data against any unauthorized access, modification, disclosure, or destruction. This includes SSL encryption, firewalls, and strict access controls.

9. Cookies

For more information about the use of cookies, please see our Cookie Policy.

10. Contact

For any questions regarding the protection of your personal data:

• Email: privacy@maia.sb
• Address: Rue de la République, Gustavia 97133, Saint-Barthélemy

You may also file a complaint with the French Data Protection Authority (CNIL).