The short version
We collect only what we need to answer your enquiry and prepare your quotation. We never sell your personal data, we do not show you adverts, and we do not use tracking or marketing cookies.
If you have any question about your data, write to [email protected] and we will help.
Who we are
Maldives Desk (maldivesdesk.com) is owned and managed by Splendid Asia Pvt Ltd, a Maldivian company and our parent company. Splendid Asia Pvt Ltd is responsible for your personal data under this policy (in legal terms, the “data controller”).
- Company: Splendid Asia Pvt Ltd
- Company registration number: C-58/2006
- Address: G. Kasthoorige, 2nd Floor, Alikilegefaanu Magu, Malé 20119, Republic of Maldives
- Email: [email protected]
- Phone / WhatsApp: +960 724 1111
Our Data Protection & Website Supervisor looks after privacy questions and requests. You can reach them through the email address above.
What we collect
- When you send an enquiry: your name, email address, phone or WhatsApp number (if you give it), country of residence, travel dates, number of guests (and children’s ages, if you mention them), the resort you are interested in and your message.
- When you use our AI concierge: the messages and travel preferences you type into the chat.
- When you tap a WhatsApp button: the chat continues in WhatsApp. Anything you send there, including voice messages, reaches our booking team. WhatsApp (owned by Meta) handles it under its own privacy policy.
- When you browse: basic technical information such as your IP address, browser type and the pages you open. We use this to keep the site secure, to stop spam and to show a rough country estimate to our team.
Please share only what we need for a quotation. Do not send passport copies, payment card numbers or health details through our forms or chat. We never ask for card details on this website.
Why we use it, and our legal basis
Some laws, such as the EU and UK GDPR, ask us to explain the legal reason for each use. Here they are:
- To answer your enquiry and prepare your quotation. You ask us to do this before a possible booking (steps before a contract).
- To arrange and look after your booking if you decide to go ahead (performing our contract with you).
- To keep records we must keep by law, for example for accounting and tax (legal obligation).
- To translate your message into English for our booking team and to send you a confirmation email, so we can serve guests in many languages (steps before a contract, and our legitimate interest).
- To protect the site and our inbox from spam, fraud and abuse (our legitimate interest).
- To understand, in total numbers only, how the site is used so we can improve it (our legitimate interest).
We do not sell, rent or trade your personal data, we do not use it for advertising, and we do not add you to any mailing list.
Who we share it with
Your enquiry goes to the Splendid Asia booking team in Malé, which prepares your quotation. If you book, we pass the details needed for your stay (such as names and arrival time) to your resort and transfer providers.
We also use a small number of trusted service providers, who handle data only on our instructions:
- Cloudflare: hosts the website and our server code, runs Turnstile (an invisible check that tells people from bots), keeps short-lived spam-protection counters, and provides cookie-free visitor statistics.
- Resend: delivers your enquiry by email to our booking team and sends your confirmation email.
- OpenAI: powers the AI concierge’s replies and translates enquiry messages written in other languages into English for our team. Under OpenAI’s business terms, data sent through its service is not used to train its models by default.
We may also share information if the law requires it, or to protect our rights, our guests or the public.
International transfers
Our team is in the Maldives, and our service providers may process data in the United States and other countries. Where the law of your country requires it (for example for data leaving the EU, the EEA or the UK), we rely on recognised safeguards such as the Standard Contractual Clauses that these providers offer.
How long we keep it
- Enquiries that do not lead to a booking: up to 2 years from our last contact, so we can help if you come back to us. After that we delete them.
- Bookings: 5 years after your stay, as required by Maldives law.
- Spam-protection counters (your IP address and a scrambled, unreadable form of your email address): deleted automatically within about 25 hours.
- Concierge chats: we do not save chat conversations on our own servers. OpenAI may keep them for up to 30 days to detect abuse, then deletes them.
- Email delivery and server logs: kept by our providers only for a short period for security and troubleshooting.
You can ask us to delete your data sooner (see “Your rights” below).
How we protect it
The whole site uses SSL/TLS encryption (the “https” and padlock in your browser), so data you send through our forms or chat cannot be read by others on the way. Only the people who handle enquiries and bookings can see them, our accounts are protected with strong passwords and two-step sign-in where available, and our forms have spam and abuse protection. No system is perfectly secure, but we take care to protect your data and will act quickly if anything goes wrong.
Cookies and local storage
We do not use advertising, tracking or marketing cookies, and we do not use Google Analytics or social media trackers. That is why you do not see a cookie banner.
- Your language choice is saved in your own browser’s local storage, so the site opens in your language next time. It stays on your device and is not sent to us.
- Cloudflare Web Analytics counts visits in total numbers without cookies and without following you across other websites.
- Cloudflare Turnstile may check your browser for signs of automated spam when you use an enquiry form. It is used only for security, never for advertising.
You can clear it at any time in your browser settings.
Links and embedded content
Our pages link to other websites, such as resort websites and WhatsApp. Their own privacy policies apply once you leave our site. If we add videos from YouTube in the future, we will use YouTube’s privacy-enhanced mode, which does not set YouTube cookies until you press play, and we will update this policy.
Your rights
Wherever you live, you can ask us to:
- tell you what personal data we hold about you, where it came from, who received it and why we use it;
- correct anything that is wrong or out of date;
- delete your data;
- restrict or stop how we use it, or object to a use based on our legitimate interest;
- give you a copy of your data in a portable format.
To use any of these rights, email [email protected] or call +960 724 1111. We aim to reply within 24 to 48 hours on working days and to complete your request within one month at the latest. We may need to check your identity first. This is free of charge.
If you are not happy with our answer, you can complain to the data-protection authority in the country where you live or work (for example, in the EU or UK). We would appreciate the chance to sort it out with you first.
Children
This website is meant for adults planning a holiday. We do not knowingly collect personal data from children under 16. If you travel with children, you can tell us their ages in your enquiry so we can prepare the right quotation.
Changes to this policy
We may update this policy when our services or the law change. We will post the new version on this page and change the “last updated” date at the top. If a change is significant, we will make it clear on the site.
Contact us
For any question about this policy or your personal data, contact our Data Protection & Website Supervisor at Splendid Asia Pvt Ltd, G. Kasthoorige, 2nd Floor, Alikilegefaanu Magu, Malé 20119, Republic of Maldives. Email [email protected] or phone/WhatsApp +960 724 1111.