Privacy

How we look after your details

Last updated 16 October 2026. Questions: isleroyalmv@gmail.com

Who we are

Isle Royal Inn, a guesthouse in Fuvahmulah, Maldives, runs this website and decides how your details are used.
For any question about your details, write to us at the email address at the foot of every page.

Your name, email and phone, the dates and rooms you ask for, the number of guests and your meal and activity choices.
For diving: the number of divers, certification level and experience you give us.
Payment receipts you upload, and messages you send us.
At check-in, the guest registration details Maldivian law asks guesthouses to keep, such as your passport details.
If you open an account: your name, email and password. The password is stored only in a scrambled form that we cannot read.

To handle your booking request, your payment and your stay, and to arrange your dives and activities.
To reply to your questions and send you emails about your booking.
To meet our legal duties, such as tax records and guest registration.
To keep the website safe, for example by limiting repeated sign-in attempts.
We do not sell your details, and we do not send you marketing emails unless you ask for them.

Our own staff, as far as their work needs it.
The dive school that runs your dives: your name, certification and dive dates.
Companies that run parts of this website for us: Vercel (hosting), Supabase (database and file storage) and Brevo (email). They use your details only to provide that service.
Maldivian authorities, when the law requires it.

We use only the cookies the website needs: one keeps you signed in to your account, and one keeps staff signed in to the admin.
We do not use advertising or tracking cookies.
The map on the Fuvahmulah page is shown by Google Maps, which has its own privacy policy.

Booking, payment and invoice records are kept for as long as Maldivian tax and tourism rules require.
Payment receipts and registration details are deleted once they are no longer needed for those rules.
Your account stays until you ask us to delete it.

You can ask for a copy of the details we hold about you, ask us to correct them, or ask us to delete them where the law allows.
To do any of these, or to delete your account, write to us at the email address at the foot of this page.
Guests from the EU and UK have these rights under the GDPR, and can also complain to their own data protection authority.

When the way we use your details changes, we update this page and the date at the top.