Privacy policy
This policy explains what data we collect on this site, why, and how to exercise your rights. It is based on the Mauritius Data Protection Act 2017 and, for visitors in the European Union, on the General Data Protection Regulation (GDPR).
Data controller
MDM Gestion & Conciergerie Cie Ltée, 4 Impasse Naz, Quatre Bornes, Mauritius. Contact for any question about your data: [email protected]. Responsible person: Vanesha Du Buisson.
Data collected and purposes
- Contact form: name, email or phone, subject, message, where relevant the property concerned, and the page and date of sending. To reply to your enquiry. If you give an email address, you receive an automatic acknowledgement. Basis: your consent and the pre-contractual steps you request.
- Protection against bots: when you start filling in the form, Cloudflare Turnstile checks that it is not an automated submission, using technical data (IP address, browser characteristics), without advertising cookies. We also keep a non-reversible fingerprint of your IP address for 48 hours, only to limit abusive submissions. Basis: our legitimate interest in protecting the form.
- PDF file request: email address. To send you the requested file and contact you about it. Basis: your consent.
- Visit statistics: anonymous audience measurement without cookies (Cloudflare Web Analytics). No data that could identify you is kept. Basis: our legitimate interest in improving the site.
- YouTube videos: no data is sent to YouTube until you play a video. When you do, YouTube (Google) may collect data under its own policy.
The form can only be sent once the consent box is ticked; the date of sending is kept with the enquiry.
Retention
Enquiries received through the form are kept for 24 months and then deleted automatically. A copy also reaches us by email. If your enquiry leads to a contract, the relevant information is kept for the duration of that contract and the related legal obligations.
Recipients
Your data is handled only by the MDM team. It is never sold or passed on. We use technical providers who process it on our behalf: Cloudflare (site hosting, protection against bots, statistics), Supabase (database, servers in Ireland), Dynadot (email), and Resend (automatic emails: alert to our team and acknowledgement; Resend keeps a log of sent emails for 30 days, in the United States).
Transfers outside Mauritius
Some providers are located outside Mauritius (European Union, United States). These transfers are covered by appropriate contractual safeguards.
Your rights
You may at any time ask to access, correct or erase your data, object to its processing, withdraw your consent or request its portability, by writing to [email protected]. You may also lodge a complaint with the Data Protection Office of Mauritius or, if you live in the European Union, with your national authority.
Cookies
This site uses no advertising or tracking cookies. Only the administration area, reserved for the MDM team, uses a session cookie required for signing in.
Security
The site is served over HTTPS. Access to data is limited to the MDM team, with two-factor authentication for administration.
Updates
Last updated: 30 September 2026.