Privacy Policy (Last Updated: May 2025)

M’Bala ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit or make a booking through our website: https://mbalaja.com.

1. Information We Collect

We may collect the following personal data from you:

• Full name

• Contact information (email address, phone number)

• Booking details (dates, number of guests)

• Payment information (processed securely via third-party providers)

• IP address and browser data for analytics purposes

• Any information you voluntarily submit through contact forms

2. How We Use Your Information

We use your information to:

• Manage and confirm your bookings

• Communicate with you about your stay

• Improve our website and services

• Meet legal and regulatory obligations

3. Legal Basis for Processing

Under the UK GDPR, we process your personal data on the basis of:

• Your consent (for marketing communications)

• The performance of a contract (your booking)

• Legal obligations (e.g. tax reporting)

• Legitimate interests (e.g. website improvement)

4. Sharing Your Information

We only share your data with:

• Payment processors (e.g., Stripe, PayPal)

• Service providers (e.g., property management or cleaning staff in Jamaica)

• Legal authorities if required by law

We do not sell or rent your personal data.

5. International Transfers

As we operate in Jamaica but are based in the UK, your data may be transferred internationally. We ensure appropriate safeguards (such as data processing agreements) are in place.

6. Cookies

We use cookies for functionality and analytics. You can control cookies through your browser settings.

7. Your Rights

You have the right to:

• Access your data

• Correct or delete your data

• Object to or restrict processing

• Withdraw consent (where applicable)

• Lodge a complaint with the UK ICO

To exercise your rights, please contact us at: contact@mbalaja.com