Privacy Policy

1. Information We Collect

When you submit an enquiry, contact us, or use our website, we may collect the following:

• Contact details — your name, email address, phone number, and WhatsApp number
• Travel preferences — preferred travel dates, number of guests, resort interests, budget range, and any special requests
• Communication records — messages, emails, or WhatsApp conversations between you and our team
• Website usage data — pages visited, time spent on site, browser type, and device information (collected via cookies and analytics tools)
• Newsletter preferences — if you subscribe to updates, your email address and subscription status

We do not collect or store payment card details. All payment processing, where applicable, is handled directly through the resort or a licensed third-party payment provider.

2. How We Use Your Information

We use the information you provide to:

• Respond to your enquiry and prepare a personalised Maldives trip proposal
• Communicate updates related to your booking or travel arrangements
• Coordinate with resort partners and suppliers on your behalf
• Send you newsletters or travel inspiration (only if you have opted in — you may unsubscribe at any time)
• Improve our website and services through anonymised analytics
• Meet our legal and regulatory obligations

We will never sell your personal data to third parties or use it for purposes unrelated to your travel with IM Maldives.

3. Sharing Your Information

We may share your information with:

• Resort and hotel partners — only the details necessary to confirm your reservation (e.g. name, arrival date, special requests)
• Transfer & activity providers — limited to what is required to arrange services you have requested
• Service providers — third-party tools we use to run our business (e.g. email platforms, CRM) who are contractually bound to keep your data secure
• Legal authorities — if required by law or to protect the rights and safety of IM Maldives, our clients, or others

4. Cookies & Analytics

Our website uses cookies — small text files stored in your browser — to help the site function and to understand how visitors use it. We use:

• Essential cookies — required for the website to operate (session management, security)
• Analytics cookies — we use Google Analytics to understand site usage. Data is anonymised and does not identify you personally. You may opt out via Google's opt-out tool.
• Remarketing cookies — we may use Google Ads remarketing. You can manage these via Google's Ad Center.

You can adjust your browser settings to refuse cookies, though some site features may not function correctly if you do so.

5. Data Security

We take appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse. Access to personal data is restricted to authorised team members, and sensitive communications are transmitted over encrypted connections.

No internet transmission is 100% secure. While we do our best to protect your data, we cannot guarantee absolute security of information submitted online.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and meet our legal obligations. Enquiry data is typically retained for up to 3 years. Newsletter subscriptions are retained until you unsubscribe. You may request deletion at any time (see Section 7).

7. Your Rights (Including GDPR)

Depending on where you are located, you may have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to correction — ask us to correct inaccurate or incomplete data
• Right to deletion — request that we delete your personal data (“right to be forgotten”)
• Right to object — object to how we use your data, including for direct marketing
• Right to portability — request your data in a portable electronic format
• Right to withdraw consent — unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at info@immaldives.com. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to third-party websites, including resort websites and booking platforms. We are not responsible for the privacy practices of those sites and recommend reviewing their policies before providing any personal information.

9. Children’s Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently done so, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “last updated” date at the top of this page will reflect any changes. Continued use of our website after an update constitutes your acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy, or wish to exercise your data rights, please contact us:

You may also use our contact page to reach us directly.