Privacy policy

Data controller

Data we collect

• Identification details : first and last name, email address and phone number provided when making a booking, requesting a quote or submitting a special enquiry.
• Booking details : date and type of activity, number of participants.
• Payment details : processed exclusively by our provider Stripe; no banking information is stored on this website.
• Browsing data : your cookie preferences; with your advertising consent, Google Tag Manager and Meta Pixel may process technical identifiers, visit data and interactions to measure campaigns.

Why we process your data

• Manage your bookings and quote requests
• Communicate with you about the services you have requested
• Process payments securely
• Meet our legal and accounting obligations
• With your consent: measure visits, campaign performance and advertising interactions through Meta Pixel and permitted tags in the Google Tag Manager container

Third-party services

We use the following providers to deliver our services. Each has its own privacy policy:

• Stripe (online payments): processes transactions over a secure, encrypted connection. No payment information is stored on our website — see Stripe's privacy policy.
• OVH (hosting): hosts our website and the data passing through it.
• Google Tag Manager (Google) : advertising tag manager, container GTM-5KNTC6V8; only loaded after you consent to Advertising. Actual processing depends on the tags configured in that container. Google privacy.
• Meta Pixel (Meta Platforms) : ID 974532871250412; measures visits and advertising campaign performance after you consent to Advertising. Meta privacy.

We do not enable a dedicated Google Analytics tag in the website code. Tags in the GTM container must also respect your preferences. Providers may transfer data outside the European Union depending on their processing; please refer to their information about the applicable safeguards.

Data retention

• Booking data: 3 years after the last interaction
• Billing data: 10 years, in accordance with our legal obligations
• Marketing data: according to the relevant provider's retention period, subject to your rights and withdrawal of consent; this is separate from the preference cookie's lifetime.

Cookies

This website sets a cookie called tv_consent, which is strictly necessary: it records only your cookie choice (accepted, declined or customised by category) for 180 days. It is not a tracking or audience measurement cookie. With your advertising consent, Meta and the tags enabled through GTM may use other trackers or identifiers, whose lifetimes depend on their policies.

The public_locale cookie remembers your language choice for one year. It is essential for this preference and is not used for advertising tracking.

You can accept, reject or customise non-essential trackers, then change or withdraw your consent at any time through Cookie settings in the footer. Rejecting them does not prevent bookings. Withdrawal prevents them loading on future visits; it cannot erase data already sent to providers.

Your rights

Under the GDPR, you have rights of access, rectification, erasure, objection and portability in relation to your personal data, as well as the right to withdraw consent at any time where processing relies on it. You can also lodge a complaint with the French data protection authority, CNIL (cnil.fr).

To exercise these rights, contact us at contact@tropicalvibes-location.com.

Data security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure.

Changes to this policy

This privacy policy may be updated to reflect legal, technical or business developments. We encourage you to check it regularly.