Privacy policy

Effective date: 2 June 2026

We Stay Maldives ("we", "us", "our") operates https://westaymaldives.com as an independent Maldives travel specialist. This policy explains what personal information we collect, how we use it, and the choices available to you. It applies to visitors and guests who contact us through this website.

This policy is provided for transparency and does not constitute legal advice. If you need advice for your situation, consult qualified counsel in your jurisdiction.

1. Who is responsible for your data?

The data controller for information collected through this website is We Stay Maldives. For privacy questions or requests, contact us at reservations@westaymaldives.com.

2. Information we collect

We collect only what we need to respond to travel inquiries and improve our service.

Information you provide

When you submit an inquiry form, we may collect:

• Your name and contact details (email address and phone or WhatsApp number)
• Travel dates, number of adults and children, and optional room or meal preferences
• Any property or offer you were viewing, and the page you came from
• Special requests or notes you choose to include in your message

Information collected automatically

Like most websites, our hosting and analytics tools may record technical data such as IP address, browser type, device type, referring URL, and pages viewed. We use this in aggregate to understand site performance and improve content—not to identify you personally unless combined with an inquiry.

3. How we use your information

We use personal information to:

• Respond to your inquiry and prepare tailored Maldives proposals
• Coordinate with resorts, guest houses, and transfer operators on your behalf when you proceed with a booking
• Send confirmations, updates, and service-related messages by email or phone
• Maintain internal records of inquiries and bookings for operational and accounting purposes
• Improve our website, offerings, and client experience
• Comply with applicable law, tax, or regulatory obligations

We do not sell your personal information to third parties for their marketing.

4. Legal bases for processing

Depending on your location, we rely on one or more of the following:

• Contract or pre-contract steps: processing needed to respond to your inquiry or arrange travel you have requested
• Legitimate interests: operating our business, securing our systems, and improving our service in a way that does not override your rights
• Consent: where required—for example, optional marketing updates you explicitly opt into
• Legal obligation: where we must retain or disclose information under applicable law

5. How we share information

We share personal information only when necessary to serve your request or operate the site:

• Accommodation and transport partners: resorts, guest houses, airlines, and transfer providers receive the details needed to hold availability, issue confirmations, or arrange logistics
• Service providers: hosting, email delivery, database, and administrative tools that process data on our instructions and under appropriate safeguards
• Professional advisers: lawyers, accountants, or insurers where reasonably required
• Authorities: when required by law or to protect rights, safety, or security

Partners and suppliers are expected to handle data responsibly and only for the purpose we specify.

6. International transfers

Maldives travel planning often involves suppliers and systems outside the Maldives. Where data is transferred internationally, we take reasonable steps to ensure appropriate protection consistent with applicable law.

7. Retention

We retain inquiry and booking records for as long as needed to fulfil your request, manage our relationship, resolve disputes, and meet legal or accounting requirements—typically up to seven years for financial records unless a longer period is required by law. Marketing contact details are kept until you unsubscribe or ask us to delete them, subject to any suppression list we must maintain.

8. Security

We use administrative, technical, and organisational measures appropriate to the sensitivity of the data we hold, including access controls and encrypted connections where supported by our providers. No method of transmission over the internet is completely secure; please use discretion when sending sensitive health or payment details and prefer secure channels we provide for deposits.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to data portability or withdrawal of consent where processing is consent-based. To exercise these rights, email reservations@westaymaldives.com. We may need to verify your identity before responding. You may also have the right to lodge a complaint with a supervisory authority in your country of residence.

10. Cookies and similar technologies

Our site may use essential cookies required for security and basic functionality, and optional analytics cookies to understand how pages are used. You can control non-essential cookies through your browser settings. Blocking essential cookies may affect how the site works.

11. Children

Our services are directed at adults planning travel. We do not knowingly collect personal information from children under 16 without parental consent. If you believe a child has provided us data, contact us and we will delete it where appropriate.

12. Third-party links

Our site may link to resort websites, social platforms, or map services. Those sites have their own privacy policies; we are not responsible for their practices.

13. Changes to this policy

We may update this policy from time to time. The effective date at the top will change when we do. Material changes will be reflected on this page; continued use of the site after an update constitutes notice of the revised policy where permitted by law.

14. Contact

Questions about this privacy policy or your personal data: reservations@westaymaldives.com.