Privacy Policy
Privacy Policy
Last updated: 23 May 2026
This privacy policy explains how your personal data is collected and processed through the website stmartinstbarth.com (St Martin St Barth Collection). It applies to anyone using the "Stay request" form or browsing the site.
1. Data controller
The controller responsible for processing your personal data is:
- Sophie Jouini (sole proprietor)
- Business registration (SIRET): 507 708 766 00054
- 80 rue de l'Étang de Chevrise, 97150 Saint-Martin (French West Indies)
- E-mail:
This email address is being protected from spambots. You need JavaScript enabled to view it.
2. Data we collect
When you complete the "Stay request" form, we collect:
- your name;
- your e-mail address;
- your preferred stay dates;
- the number of travellers;
- the accommodation you are interested in;
- the content of your message;
- your consent, together with its date and time.
While you browse, technical data is also processed: IP address, server connection logs, and the cookies described in section 9.
3. Purposes of processing
Your data is used solely to:
- handle and respond to your stay request;
- contact you to arrange your booking, which is managed directly;
- protect the form against automated submissions and spam.
We do not carry out unsolicited marketing and we do not perform any advertising profiling.
4. Legal basis
- Pre-contractual measures (Art. 6.1.b GDPR): handling the stay request you initiate.
- Consent (Art. 6.1.a GDPR): collected via the form's checkbox, which you may withdraw at any time.
- Legitimate interest (Art. 6.1.f GDPR): site security and abuse prevention.
5. Recipients and processors
Your data is accessible to Sophie Jouini and to the skipper Kharim, who handle the requests. We rely on the following service providers (processors):
- Likuid — website hosting and e-mail delivery (SMTP), servers located in France.
- Baserow B.V. — request archiving, a company established in the Netherlands (European Union).
- Self-hosted n8n (on a Hostinger VPS located in the United States) — automation of request handling.
- Intuition Machines, Inc. (hCaptcha) — anti-spam protection for the form, a company established in the United States.
We do not sell or rent your personal data to third parties. No data is shared for advertising purposes.
6. Transfers outside the European Union
The website and e-mail delivery are hosted in France. Archiving of requests is handled by a provider established in the European Union (the Netherlands).
However, the automated handling of your request is carried out by our n8n instance hosted on a server located in the United States. The data you submit through the form (name, e-mail, dates, number of travellers, preferred accommodation, message and consent) is therefore processed on that server before being archived within the European Union.
The hCaptcha anti-spam service is also provided by a company based in the United States.
These transfers to the United States are governed by the Standard Contractual Clauses adopted by the European Commission, which ensure an adequate level of protection for your data.
7. Retention period
- Request without a confirmed booking: your data is kept for 3 years from our last contact, then deleted.
- Server connection logs: kept for the period applied by our host, typically 12 months.
If a booking is confirmed, the data needed for that relationship is kept for its duration and, where applicable, in accordance with the legal obligations that apply.
8. Your rights
Under the GDPR, you have the following rights regarding your data:
- right of access;
- right to rectification;
- right to erasure;
- right to restrict processing;
- right to object;
- right to data portability;
- right to withdraw your consent at any time.
To exercise these rights, contact us at
9. Cookies
The site uses a limited number of cookies:
- Session cookie (Joomla): strictly necessary for the site to function.
- hCaptcha cookie: necessary to protect the form against automated submissions.
Fonts are hosted directly on our server: the site does not use Google Fonts via an external CDN. The site sets no advertising cookies and uses no third-party tracking for marketing purposes.
10. Security
The site is served over an encrypted connection (HTTPS). Access to data is limited to the people authorised to handle your request.
11. Notice to North American residents (United States & Canada)
We are based in Saint-Martin (French West Indies) and operate primarily under the European Union's GDPR, which we apply to all visitors regardless of where they live.
We do not sell or share your personal information, and we do not use it for cross-context behavioural advertising or targeted advertising.
United States (including California). If you are a U.S. resident, you may request to know what personal information we hold about you and request its deletion; you will not be treated differently for exercising these rights.
Canada (including Québec). If you are a Canadian resident, you may ask to access the personal information we hold about you, request its correction, and withdraw your consent to its use. Where required, we will explain the purposes for which your information is collected and used.
To exercise any of these rights, contact
We honour these rights as a matter of practice. This notice does not constitute a representation that we are subject to the California Consumer Privacy Act (CCPA), the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), Québec's Law 25, or any other U.S. or Canadian privacy law.
12. Contact
For any question about this policy or the processing of your data: