Privacy policy

In force as of 12 August 2026

Article 1 — Introduction

The purpose of this policy is to inform users of the website how their personal data is collected and processed, what rights they have, who the data controller is, and what the website's approach to cookies is.

Personal data means any information that makes it possible to identify a natural person, directly or indirectly: name, postal or e-mail address, telephone number, IP address, and so on.

Processing is governed by the Data Protection Act 2017 of the Republic of Mauritius. As the website also addresses clients residing in the European Union, Regulation (EU) 2016/679 (GDPR) additionally applies to the processing of their data, pursuant to its Article 3(2). This policy supplements the legal notice and the terms of use.

Article 2 — Data controller

The controller of personal data is:

• Company name: JINVESTY LUXURY CONCIERGERIE Ltd
• Legal form: private company limited by shares, incorporated under the laws of Mauritius
• Trading name: Candau Private Office
• Publication director: Jean-Luc Candau
• Incorporation: Corporate and Business Registration Department, Port Louis, on 21 November 2024 — company number 215416
• Business Registration Number (BRN): C24215416
• VAT number: 28333964
• Registered office: 2nd Floor, Motorway M2, Lower Vale, Grand Baie 1207-02, Republic of Mauritius
• Registered activity: real estate activities (estate agency) on a fee or contract basis
• Telephone: +230 …
• E-mail: contact [at] candau-ile-maurice.com

No data protection officer has been appointed to date. The controller performs that role directly and can be reached at the contact details above.

Article 3 — Data collected and purposes

3.1 Data collected

When browsing the website and using the contact form, the following data may be collected:

• first name and last name;
• e-mail address;
• telephone number (optional);
• company name (optional);
• the content of the message sent and, where applicable, the property the enquiry relates to;
• the subject of the enquiry (general enquiry or investment project);
• the time at which consent was given;
• technical data: IP address, browser, operating system, pages viewed, time of visit (server logs).

This data is processed for the following purposes:

• replying to enquiries about a property or a property project;
• assisting the User with their search, purchase or rental;
• keeping the website secure and preventing automated submissions;
• measuring the website's audience and improving its content, subject to your consent;
• complying with the publisher's legal, accounting and tax obligations.

3.2 Legal bases

• Consent for data submitted voluntarily through the contact form — the User ticks a dedicated box before sending;
• Legitimate interest of the publisher in website security and the retention of technical logs;
• Legal obligation for the retention of accounting and tax records.

3.3 Mandatory or optional fields

Fields marked with an asterisk in the form are required in order to handle the enquiry. Without them, the publisher would be unable to reply. All other fields are optional.

3.4 Retention periods

• contact form data: 3 years from the last contact that did not lead to further discussion;
• data relating to a contractual relationship: for the duration of that relationship, then for the period required by the applicable Mauritian legal and tax obligations;
• technical server logs: 12 months at most.

Article 4 — Recipients and processors

Data is never sold, rented or transferred to third parties for commercial purposes. It is accessible only to authorised staff of the publisher and to the technical providers strictly necessary for the website to operate:

• Hostinger International Ltd (61 Lordou Vironos Street, 6023 Larnaca, Cyprus), the website's hosting provider, for storing and serving the pages. The servers are located in France;
• the e-mail delivery provider, for routing contact form messages and acknowledgements;
• Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), for audience measurement, only if you have consented to it.

4.1 Where the data is stored

The data you send us through the contact form is hosted in France, within the European Union.

The web fonts and every other asset used by the website are served from that same hosting: no request is made to any third-party server until you have given your consent.

Only audience measurement, if you accept it, involves a transfer of data to the United States. Google LLC adheres to the EU–US Data Privacy Framework and relies on the European Commission's standard contractual clauses. That transfer is covered by the appropriate safeguards provided for by the Data Protection Act 2017 and by the GDPR.

Article 5 — Cookies and trackers

A cookie is a small file stored on your device when you visit a website. This website uses two categories of cookies, and only two.

5.1 Strictly necessary cookies

These do not require your consent, as the website cannot work without them:

• a session cookie, set when the contact form is used, to secure the submission and display the confirmation message. It is deleted when the browser is closed;
• a cookie_consent cookie, which remembers your choice regarding audience measurement for 6 months, so that you are not asked on every visit.

The form's anti-robot protection relies on a proof-of-work mechanism running in the browser (ALTCHA), which sets no cookie and performs no profiling.

5.2 Audience measurement cookies

The website uses Google Analytics 4 to understand how its pages are viewed: number of visits, page views, referral source, device type. These cookies are set by Google and are used to produce aggregated statistics.

They are set only after your explicit consent, collected through the banner displayed when you arrive on the website. Until you accept, no Google script is loaded and no measurement cookie is written. If you refuse, any measurement cookies set during a previous visit are deleted.

The website uses no advertising cookies, performs no profiling and never sells browsing data.

5.3 Withdrawing or changing your choice

You may change your decision at any time using the “Manage cookies” link at the bottom of every page. You may also configure your browser to refuse cookies; refusing the session cookie may, however, prevent the contact form from being submitted.

Article 6 — Processing principles

In accordance with the Data Protection Act 2017 and Article 5 of the GDPR, personal data is:

• processed lawfully, fairly and transparently;
• collected for specified, explicit and legitimate purposes;
• adequate, relevant and limited to what is necessary;
• accurate and kept up to date;
• kept no longer than necessary for the purposes;
• processed in a manner that ensures its security, through appropriate technical and organisational measures (encrypted connections over HTTPS, restricted access to the website's administration).

Article 7 — Your rights

Users have the following rights over their data:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to data portability;
• right to object, in particular to direct marketing;
• right to withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.

These rights may be exercised by e-mail at contact [at] candau-ile-maurice.com or by post at the address given in Article 2. Proof of identity may be requested. The publisher replies within one month at the latest.

If, after contacting the publisher, a User considers that their rights have not been respected, they may lodge a complaint with the Data Protection Office of the Republic of Mauritius. Users residing in the European Union may also contact the supervisory authority of their country of residence.

Article 8 — Changes to this policy

The publisher reserves the right to amend this policy at any time in order to keep it compliant with applicable law. Users are invited to review it regularly.