Privacy Policy

Last updated: 12 August 2026

Stay Easy Co Ltd ("StayEasy", "we", "us", "our") operates the StayEasy travel booking platform. We take the privacy of your personal data seriously. This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have over it. It is written to comply with the Mauritius Data Protection Act 2017 ("the Act").

1. Who we are

StayEasy is the data controller responsible for your personal data.

Controller	Stay Easy Co Ltd, trading as StayEasy
Business Registration Number	C26232251
Data Protection registration	C23496 (Data Protection Office, Mauritius)
Registered office	Bundhun Road, L'Aventure 1410-04, Republic of Mauritius
Data protection contact	dpo@stayeasybooking.com

2. Our role — booking as agent

StayEasy is a travel platform that arranges bookings with independent accommodation, transport, car rental and experience providers ("Suppliers") on your behalf. When you make a booking, a service contract is formed between you and the Supplier; StayEasy facilitates that booking and handles your payment as agent. To make your booking happen, we necessarily share certain of your data with the Supplier who will provide your stay or service, as described below.

3. What we collect

We collect the following categories of personal data:

Information you give us

Identity and contact data — your name, email address, telephone number, and country.
Account data — your login credentials and booking history, where you create an account.
Booking data — the details of your trip: dates, travellers, itinerary, and any preferences you enter.
Identity-document data, only where a booking requires it — a passport number for certain accommodation bookings, or a driving-licence number for a car rental. These are collected only to complete that specific booking.

Information we collect automatically

Technical and usage data — your device, browser, IP address and how you use the platform, collected through cookies and similar technologies (see our Cookie Policy).

We do not collect special-category data. We do not store health, dietary, medical, mobility or accessibility information. Where you have such a requirement, any note you provide is passed directly to your Supplier so they can look after you, and is not retained by StayEasy.

Payment data

Your card details are processed directly by our secure payment provider and are never stored by StayEasy. We hold only a tokenised reference and the record of the transaction.

4. Why we use your data, and our legal basis

To create and manage your booking	Necessary to perform our contract with you
To share necessary details with your Supplier so your booking is honoured	Necessary to perform our contract with you
To take payment and issue confirmations and invoices	Contract, and our legal obligations (tax and accounting)
To provide customer support and handle complaints	Our legitimate interest in serving you well
To keep the platform secure and prevent fraud	Our legitimate interest, and legal obligation
To send you marketing, where you have opted in	Your consent, which you may withdraw at any time
To meet tax, accounting and regulatory duties	Our legal obligations

5. Who we share it with

We share your personal data only as far as necessary, with:

Suppliers — the accommodation, transport, car-rental or experience provider fulfilling your booking, so they can deliver your service.
Our payment provider — to process your payment securely.
Our technology provider — who builds and hosts the platform under a strict data-processing agreement and may process your data only on our instructions.
Authorities and advisers — where we are required by law, or to establish or defend legal claims.

We do not sell your personal data to anyone.

6. Where your data is held, and international transfer

Our platform and primary database are hosted in Germany, within the European Union, which provides a high standard of data protection. Certain backups and business systems are held in Mauritius. Where your data is transferred outside Mauritius, we ensure it is protected in accordance with the Act.

7. How long we keep it

Booking records, invoices and itineraries	7 years (to meet tax and accounting law)
Passport and driving-licence numbers	Deleted 90 days after your booking is completed
Card data	Not retained — tokenised by our payment provider
Your account (profile, history)	For the life of your account, then anonymised after 3 years of inactivity
Marketing consent records	While relied upon, and 3 years after last use

8. Your rights

Under the Act, you have the right to:

Access the personal data we hold about you;
Correct data that is inaccurate or incomplete;
Erase your data, where there is no lawful reason for us to keep it;
Restrict or object to our processing in certain circumstances;
Object to direct marketing at any time — this is absolute, and we will stop immediately;
Withdraw consent at any time, where we rely on your consent;
Complain to the Data Protection Office of Mauritius.

To exercise any of these rights, contact us at dpo@stayeasybooking.com. We respond to access requests within one month. Exercising your rights is free of charge.

9. How we protect your data

We use appropriate technical and organisational measures to keep your data secure, including encryption of data in transit and at rest, access controls, and the tokenisation of payment data. No system can be guaranteed perfectly secure, but we work continuously to protect your information and will notify you and the authorities of a serious data breach as the law requires.

10. Children

The platform is intended for adults making travel bookings. Where a booking includes children, we process their data only as part of that booking and on the responsibility of the adult making it.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it last changed, and material changes will be notified on the platform.

12. Contact us

For any question about this policy or your personal data, contact our data protection contact at dpo@stayeasybooking.com, or write to us at Stay Easy Co Ltd, Bundhun Road, L'Aventure 1410-04, Mauritius. You also have the right to lodge a complaint with the Data Protection Office of Mauritius.

Back