Privacy Policy

This Privacy Policy (“Policy”) applies to the Villa Nautica Maldives information and enquiry website operated under the domain villanautica.reservationsandsales.com (the “Website”) by Maldives Sales and Reservations Agent Pvt Ltd (“we”, “us”, “our”).

Please read this Policy carefully to understand what personal data we collect, how we use it, with whom it may be shared, how long we keep it and what rights you may have in relation to your information. By using this Website or sending us an enquiry, you acknowledge that you have reviewed and understood this Policy.

Last updated: 3 October 2025

1. Introduction

The Website is designed to help you learn about Villa Nautica Maldives and to request personalised package quotes. When you submit information to us, we act as a reservations and sales agent, using your details to prepare offers, coordinate with our partners and, where requested, complete bookings.

We are committed to handling your personal data lawfully, fairly and in a transparent manner, and to implementing appropriate safeguards to keep your information secure.

2. Who We Are (Data Controller)

The data controller for personal data collected via this Website is:

Maldives Sales and Reservations Agent Pvt Ltd
Company Registration No: C26192025
Registered address:
Ma. Zeeniyamaage, 1st Floor, Majeedheemagu 20286, K. Malé’, Maldives

We operate this Villa Nautica Maldives page as an independent Maldives reservations and booking management company. We are not owned, operated or controlled by Villa Nautica or Villa Resorts.

3. What Personal Data We Collect

Depending on how you use the Website, we may collect:

• Contact details – such as your full name, email address, phone number or WhatsApp number, and country of residence.
• Travel information – including preferred check-in and check-out dates, number of nights, number of adults, children and infants, preferred villa or package type, meal plan, budget and any special occasion details (e.g. honeymoon, anniversary, birthday).
• Booking-related data – such as guest names, ages of children, arrival and departure flight details and any relevant preferences you choose to share (for example dietary needs), where necessary to arrange your stay.
• Message content – information you include in enquiry forms, emails or WhatsApp messages, as well as notes from our communication with you.
• Technical and usage data – IP address, browser type and version, device type, country / city-level location, pages visited, time spent on pages, and interactions with forms or links.
• Cookie and tracking information – collected through cookies, pixels and similar technologies, including those used for analytics, security and advertising (see section 11).

4. How We Collect Data

We obtain personal data in the following ways:

• Directly from you, when you complete the “Get a Quote” form, email us, contact us via WhatsApp or otherwise provide information through the Website or our contact details.
• Automatically, when you browse the Website. Certain technical and usage information is collected using cookies, server logs, analytics tools and advertising platforms such as Google Ads and Google Analytics.

5. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

5.1 Responding to enquiries

To review your Villa Nautica request, prepare personalised quotes, check availability, suggest suitable villa types and meal plans, and send you information about the resort and travel options.

Legal bases: our legitimate interest in responding to enquiries and promoting our services, your consent where required, and taking steps at your request prior to entering into a contract.

5.2 Facilitating bookings

To coordinate with Villa Nautica, Villa Resorts or authorised wholesale and contracting partners to confirm reservations, arrange transfers and ensure your stay is correctly set up.

Legal bases: performance of a contract and taking pre-contract steps at your request, plus your consent where needed.

5.3 Communicating with you

To send you confirmations, updates, clarifications, reminders and follow-up messages about your enquiry or booking, including via email or WhatsApp.

Legal bases: contract performance, legitimate interest in providing customer service, and consent where applicable.

5.4 Improving and securing our Website and services

To monitor Website performance, understand how visitors use our pages, diagnose issues, prevent abuse or fraud and improve content, layout and user experience.

Legal basis: our legitimate interests.

5.5 Advertising, analytics and measurement

We may use Google Ads (including tag AW-17756055963), Google Analytics and related tools to measure conversions such as form submissions, understand which traffic sources are effective and refine our advertising and marketing.

Where required (for example for users in the EEA, UK and Switzerland), we obtain your consent before using non-essential cookies or similar technologies for advertising and analytics. In other regions, we may rely on our legitimate interests in promoting and improving our services.

6. Data Retention

We only keep your personal data for as long as reasonably necessary for the purposes described in this Policy, including:

• Enquiry records – typically up to 24 months from your last interaction, to allow for follow-up and repeat enquiries.
• Booking and transaction data – retained for the period required under applicable laws (for example tax, accounting or regulatory requirements).

We may keep information for longer if needed to establish, exercise or defend legal claims. Where data is no longer needed, we will securely delete it or anonymise it.

7. Data Sharing and Disclosure

We do not sell your personal data. We may, however, share it with:

• Villa Nautica / Villa Resorts and authorised partners, where necessary to check availability, confirm bookings, arrange transfers or handle in-resort services related to your stay.
• Wholesale and contracting partners we work with to obtain contracted rates and issue reservations on your behalf.
• IT, hosting, CRM, email and analytics providers who support our Website, communication and booking systems.
• Google LLC and associated services, when we use Google Ads, Google Analytics or other measurement tools on the Website.
• Professional advisors and authorities (such as lawyers, auditors, regulators or law-enforcement), where disclosure is required by law or reasonably necessary to protect our rights, guests or partners.
• Successors in business, in the context of a merger, restructuring or sale of all or part of our business, subject to confidentiality obligations.

8. International Transfers

Your data may be processed in the Maldives and in other countries where we or our service providers operate, including locations outside your home jurisdiction (for example, in the EU, the United Kingdom, the United States or Singapore).

Where required by law, we rely on appropriate safeguards for these transfers, such as Standard Contractual Clauses (SCCs) and data protection commitments in our agreements with processors, as well as Google’s data protection terms and transfer mechanisms for Google Ads and Analytics.

9. Data Security

We implement technical and organisational measures designed to keep your personal data secure, including encrypted connections (such as SSL/TLS), restricted access, secure servers and ongoing monitoring for unusual activity.

While we strive to protect your information, no method of transmission over the internet or method of electronic storage can be guaranteed fully secure. You are encouraged to use secure devices and networks when communicating with us.

10. Your Rights

Depending on your country of residence and applicable data protection laws, you may have some or all of the following rights in relation to your personal data:

• To request access to the personal data we hold about you;
• To ask us to correct inaccurate or incomplete information;
• To request deletion of your data in certain circumstances (for example where it is no longer needed for the original purpose);
• To ask us to restrict the processing of your information in specific situations;
• To object to certain types of processing, including direct marketing;
• To withdraw consent where processing is based on your consent (this will not affect prior processing);
• To request that we provide your data in a portable format, where applicable; and
• To lodge a complaint with a relevant data protection authority if you believe your rights have been infringed.

To exercise any of these rights, please contact us using the details in section 15. We may need to verify your identity before fulfilling your request.

11. Cookies, Google Ads and Tracking Technologies

The Website uses cookies and similar technologies to help it function correctly, to understand how visitors use it and, where applicable, to support advertising and measurement.

Cookies are small text files stored on your device. They may be used for:

• Essential operations – making the site work.
• Performance and analytics – counting visits, seeing which pages are popular and improving our content.
• Advertising and measurement – for example with Google Ads remarketing or conversion tracking to understand which campaigns lead to enquiries.
• Preferences – remembering certain choices or settings.

Where required by law (for example in the EEA, UK and Switzerland), our cookie banner and consent tools allow you to manage your preferences for non-essential cookies. You can also control cookies via your browser settings, although blocking some types may affect how the site functions.

For more details on how Google handles data in its advertising and analytics products, please refer to Google’s business data protection information and Ads Data Processing Terms.

12. Children’s Privacy

This Website is intended for adults planning travel, and we do not knowingly collect personal information directly from children under 18 for marketing purposes.

When you provide details of children as part of an enquiry or booking, you confirm that you are their parent or legal guardian, or that you otherwise have authority to share their information for travel arrangements.

13. Links to Third-Party Sites

The Website may contain links to third-party websites (including Villa Nautica, Villa Resorts and other partners). We are not responsible for the privacy practices or content of those external sites. We recommend that you review the privacy policies of any sites you visit via links from this Website.

14. Changes to This Policy

We may update this Privacy Policy from time to time, for example to reflect changes in legal requirements, our services or how we handle personal data. Any updates will be posted on this page with an updated “Last updated” date.

We encourage you to review this page periodically. Your continued use of the Website after changes have been posted will indicate your acknowledgement of the updated Policy.

15. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or how we handle your personal information, you can contact us at:

Maldives Sales and Reservations Agent Pvt Ltd
Email: sales@reservationsandsales.com
Company Registration No: C26192025
Address: Ma. Zeeniyamaage, 1st Floor, Majeedheemagu 20286, K. Malé’, Maldives

This Privacy Policy applies specifically to the Villa Nautica Maldives information and enquiry page operated at villanautica.reservationsandsales.com.