Grand Case • Saint-Martin

thedovesnestsxm@gmail.com

Book Your Stay →

Privacy Policy

Last updated: 2 November 2026

The Dove’s Nest respects your privacy. This policy explains what personal data we collect when you visit our website, contact us, subscribe to our newsletter or book a stay, how we use and protect it, and the rights you have. It should be read together with our Cookie Policy and Terms & Conditions.

1. Who is responsible for your data

The Dove’s Nest (“we”, “us”, “our”) is a family-run guesthouse at 31 route de la Petite Plage, Grand-Case 97150, Saint-Martin. We are the data controller for the personal data described in this policy.

Privacy contact: thedovesnestsxm@gmail.com · +590 690 66 04 00

2. Personal data we collect

Information you give us

  • Reservations and check-in — name, contact details (email, telephone and, where relevant, billing address), reservation dates, apartment, number of occupants, names of guests, billing details, information needed at check-in, and details of services you request (for example airport transfers, beach equipment or dining). Payments are handled by our payment providers (see section 5).
  • Enquiries and messages — your name, email address, phone number (if provided), apartment of interest, preferred dates, number of guests and your message, whether you use our website forms, email, WhatsApp or telephone.
  • Newsletter — your email address, chosen language, the page you subscribed from, the subscription date and a hashed version of your IP address (used only to prevent abuse). We also keep a record of your consent and of any unsubscribe request.
  • Correspondence — emails, WhatsApp messages and notes of telephone conversations.

Information collected automatically

  • Technical and usage data — IP address, browser type and version, device type, operating system, referring page, pages viewed, date and time, and server logs. This is collected by our hosting provider and our servers to operate the website, keep it secure and diagnose problems.
  • Cookies and similar technologies — see section 10 and our Cookie Policy.

Video surveillance

The parking area at the property is monitored by video surveillance. The system may record images of guests, visitors and vehicles. It is used only to protect people and property and to investigate incidents; access to recordings is restricted. Further details are in section 11.

We do not intentionally collect special categories of personal data (such as health information). Please do not send us such information unless it is necessary for your stay; if you choose to do so, we will process it with your explicit consent where the law requires it.

3. How and why we use your data

  • Managing reservations and your stay — to confirm, administer and provide your booking, communicate with you, manage check-in and check-out, take and release security deposits, and provide requested services. Legal basis: performance of a contract (Article 6(1)(b) GDPR).
  • Payments — to process deposits, balances and refunds through our payment providers. Legal basis: performance of a contract (Article 6(1)(b)).
  • Enquiries — to respond to your questions and provide availability, rates and booking information. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b)) and our legitimate interest in responding to you (Article 6(1)(f)).
  • Legal, tax and accounting records — invoices, tax records and guest registration where required by law. Legal basis: legal obligation (Article 6(1)(c)).
  • Newsletter — to send you seasonal rates, island news and special offers. Legal basis: your consent (Article 6(1)(a)), which you may withdraw at any time using the unsubscribe link in every email or by contacting us.
  • Website security and improvement — server logs, abuse prevention, troubleshooting and understanding how the site is used so we can improve it. Legal basis: our legitimate interests (Article 6(1)(f)) in keeping the website secure and improving our service.
  • Security and video surveillance — to protect people and property, prevent incidents and investigate them where they occur. Legal basis: our legitimate interests (Article 6(1)(f)) in ensuring the security of the property and its guests.
  • Legal claims — to establish, exercise or defend legal claims. Legal basis: our legitimate interests and/or legal obligations.

We do not make automated decisions about you and do not use your data for profiling. We do not sell or rent personal data, and we do not share it for unrelated marketing.

4. How long we keep your data

  • Routine guest records: up to 3 years after the end of your stay, after which they are securely deleted or anonymised.
  • Accounting, tax and invoice records: for the period required by applicable law (currently up to 10 years under French rules), or longer where necessary for a legal claim.
  • Guest registration records: up to 6 months where required by applicable law.
  • Enquiries and correspondence: up to 12 months after our last exchange, unless a booking follows.
  • Newsletter: until you unsubscribe; afterwards your data is deleted or anonymised within 30 days, except for a minimal record of your unsubscribe request.
  • Payment tokens, transaction references and authorisation records: for as long as needed to manage deposits, refunds and disputes, in accordance with our payment providers’ rules. We do not retain full card numbers or card security codes.
  • Video-surveillance recordings: only for as long as necessary for the security purpose and any incident investigation, after which they are erased or overwritten, subject to applicable law.
  • Server logs: up to 12 months.
  • Cookies: see section 10 and our Cookie Policy.

5. Who we share data with

We share personal data only where necessary, with:

  • Hosting and infrastructure — Hostinger, which hosts our website and provides server logs, cloud storage and email infrastructure.
  • Booking system — VikBooking, our booking system, which runs on our website and processes reservation data on our behalf.
  • Payment providers — Stripe (and PayPal where used) for card/PayPal payments, security deposits and refunds. Payment providers act as independent controllers for payment data and apply their own privacy policies.
  • Requested service providers — with your agreement, necessary contact or pickup information may be shared with a taxi driver for a transfer, or with a restaurant, Villa Royal, or shopping provider for a service you request.
  • Google — Google Maps embedded on some pages and Google Fonts used for typography; Google may receive your IP address when these resources load.
  • Cloudflare (cdnjs) — the Font Awesome icon library is served from cdnjs and may receive your IP address.
  • Video-surveillance system providers — where maintenance or technical support requires access, under confidentiality and security obligations.
  • Professional advisers and authorities — accountants, auditors, tax and social security authorities, courts and law enforcement where required by law.
  • Social platforms you use to contact us — if you contact us through Facebook, Instagram or WhatsApp, those platforms process your data under their own privacy policies.

Some of these providers may process personal data outside the European Economic Area (for example Stripe, PayPal, Google and Meta in the United States). Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses or the EU-US Data Privacy Framework where applicable.

6. Security

We take appropriate technical and organisational measures to protect personal data, including HTTPS encryption, restricted administrative access, strong passwords, secure card processing through our payment providers, regular software updates and backups, and limiting access to people who need it. Video-surveillance recordings are accessible only to authorised persons. No method of transmission or storage is completely secure. If a data breach is likely to affect your rights, we will notify you and the competent authority as required by law.

7. Your rights

If you are in the European Union or European Economic Area, data protection law gives you the following rights. We extend these rights to all visitors and guests:

  • the right to access your personal data and obtain a copy;
  • the right to rectification of inaccurate or incomplete data;
  • the right to erasure of data we no longer need;
  • the right to restriction of, or to object to, certain processing, including processing based on legitimate interests and video surveillance;
  • the right to data portability;
  • the right to withdraw consent at any time (without affecting processing already carried out);
  • the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, email thedovesnestsxm@gmail.com or write to us at the address above. We may ask for information to verify your identity and will normally respond within one month (this can be extended by up to two months for complex requests).

You may also contact the French data protection authority: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr — or the supervisory authority in your country.

8. Payment-card data

Card payments and security deposits are handled through our secure payment providers. We do not retain full card numbers or card security codes in our computer systems or cloud storage. Where the payment provider permits, limited payment tokens, transaction references or authorisation records may remain available for deposit management, refunds and dispute handling, with access controlled and retention governed by the provider’s rules and applicable law.

9. Newsletter

If you subscribe to our newsletter, we use your email address to send seasonal rates, island news and offers. You can unsubscribe at any time using the link in every email or by contacting us; we will then stop sending newsletters and delete or anonymise your subscription data within 30 days. We keep a minimal record of the unsubscribe request so that we can honour it.

10. Cookies and website technologies

Our website uses a small number of cookies and browser storage. These include a session cookie, a language-preference cookie and a cookie-consent record, as well as third-party content such as Google Maps (which may set cookies and receives your IP address when loaded) and Stripe (which may set cookies at the payment step). Google Fonts and the Font Awesome library are also loaded from external providers and may receive your IP address.

We do not currently use advertising or analytics cookies (such as Google Analytics or a Meta Pixel). If we introduce optional analytics or marketing tools in future, we will update this policy and the Cookie Policy and ask for your consent where required.

You can change or withdraw your cookie choices at any time using the Cookie settings link in the footer, and you can manage cookies in your browser. See our Cookie Policy for the full list and durations.

11. Video surveillance

The parking area is monitored by video surveillance for the security of guests, visitors, staff, vehicles and property, and to investigate incidents. Signs inform visitors that the area is monitored. Recordings are accessible only to authorised persons, are not used for other purposes, and are retained only for as long as necessary for the security purpose and any incident investigation, after which they are erased or overwritten, subject to applicable law. You may exercise your data-protection rights in relation to recordings as described in section 7.

12. Children

Our website is not directed at children under 16 and we do not knowingly collect their personal data. Bookings must be made by adults. Parents or guardians may provide the names of children travelling with them as part of a family booking and are responsible for that information.

13. Links to other websites

Our website contains links to Facebook, Instagram, WhatsApp, Google Maps and other third-party websites. We are not responsible for their privacy practices; we encourage you to read their policies.

14. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with the “last updated” date above. If we make material changes, we will highlight them on the website. This policy should be updated whenever our processing practices change.

15. Contact us

The Dove’s Nest
31 route de la Petite Plage, Grand-Case 97150, Saint-Martin
Email: thedovesnestsxm@gmail.com
Phone: +590 690 66 04 00