Privacy Policy

A legal disclaimer

Island Lilly Ltd

Privacy & Cookie Policy

Effective Date: 1 January 2024

​

Island Lilly Ltd (“Island Lilly”, “we”, “us” or “our”) is committed to protecting your privacy. This Privacy & Cookie Policy explains how we collect, use, and safeguard your personal data when you visit our website or use our travel services.

1. Who We Are

Island Lilly Ltd is a licensed tour operator based in Mauritius offering curated holiday experiences to international travellers. We are the data controller of the personal data you provide.

Contact details:
Email: hello@island-lilly.com
Website: www.island-lilly.com

2. What Personal Data We Collect

We may collect and process the following types of personal data:

• Identity data: Name, nationality, date of birth, gender

• Contact data: Email address, phone number, billing address

• Travel details: Booking information, preferences, itinerary requests

• Payment data: Payment method, transaction ID (note: we do not store card details)

• Health data (optional): Any medical or dietary needs relevant to your travel

• Technical data: IP address, browser type, device type, and usage patterns

• Marketing preferences: Your consent choices and interests

3. How We Collect Your Data

We collect your data in several ways:

• When you book a holiday or submit a travel enquiry

• When you sign up for newsletters or download our travel planner

• Through cookies and analytics on our website

• Through communication by phone, email, or messaging apps

4. How We Use Your Data

We use your data for the following purposes:

• To process bookings and provide customer support

• To personalise your travel experiences

• To improve our website and marketing efforts

• To comply with legal obligations

• To send marketing emails (only with your consent)

5. Legal Basis for Processing

We process your data under the following lawful bases:

• Contractual necessity (e.g. managing your booking)

• Legal obligation (e.g. recordkeeping)

• Legitimate interest (e.g. customer service, security)

• Consent (for marketing and special category data)

6. Who We Share Your Data With

We only share your data when necessary, and with trusted third parties:

• Local service providers (e.g. hotels, drivers, wellness hosts)

• Payment processors (e.g. Stripe, PayPal)

• Marketing and analytics tools (e.g. Google Analytics, Meta)

• Legal or regulatory authorities where required

We do not sell or rent your data.

7. International Data Transfers

Some of our service providers may operate outside of Mauritius. Where we transfer data internationally, we ensure appropriate safeguards are in place in line with the Mauritius Data Protection Act 2017 and the GDPR where applicable.

8. Data Retention

We retain your data only as long as needed:

• Booking data: 8 years from travel completion

• Marketing data: Up to 8 years from last engagement or until you unsubscribe

9. Your Data Rights

You have the right to:

• Access and request a copy of your data

• Correct or update inaccurate data

• Request erasure or restrict processing

• Object to marketing communications

• Withdraw consent at any time

To exercise any of these rights, contact hello@island-lilly.com.

10. Security

We use secure systems, access controls, and SSL encryption to protect your data. However, no transmission over the internet is 100% secure.

11. Cookies

Cookies are small files placed on your device when you visit our website. They help us:

• Remember your preferences

• Analyse website traffic

• Personalise ads (with your consent)

You can manage cookies through your browser settings or via our cookie banner.

Types of Cookies We Use

Type

Purpose

Essential

Enable website functionality

Analytics

Track usage (Google Analytics)

Marketing

Personalise ads (e.g. Facebook)

12. Cookie Consent Banner  
When you visit our website, a cookie banner will appear with the following message:

“We use cookies to improve your experience, analyse traffic, and personalise content. By continuing to browse or by clicking ‘Accept’, you agree to our use of cookies.”

Button Options:
[Accept All] [Manage Settings]

13. Changes to This Policy

We may update this policy from time to time. Please check our website for the latest version. Significant changes will be notified via email or banner.

14. Questions or Complaints

If you have any concerns about your personal data, contact our Data Officer at hello@island-lilly.com.

You may also lodge a complaint with:

• The Mauritius Data Protection Commissioner

• Your national data protection authority (if located abroad)