Privacy policy.

Data controller

The data controller (responsable du traitement) is BLUESHORE, entrepreneur individuel, operating under the YOUR ST BARTH trading name, SIREN 903 437 317, registered at Route de Pointe Milou, 97133 Saint-Barthélemy, French West Indies. Contact for any data protection question: hello@yourstbarth.com.

Data collected through the inquiry form

When you submit a brief via the form on this website, the following fields are collected and transmitted to YOUR ST BARTH:

• First name and last name
• Email address and / or WhatsApp number (at least one of the two is required)
• Arrival and departure dates of the requested stay
• Number of bedrooms, number of pax, weekly budget range
• Neighborhood preferences (optional)
• The source page of the inquiry (e.g. home, honeymoon-landing) for analytics

No financial information, no passport detail, no health data, no political or religious data is ever requested through the form.

Purposes of processing

• Primary purpose. To prepare a curated villa shortlist that matches your brief, send it to you by email or WhatsApp, and accompany you through the booking and the on-island concierge if you choose to proceed.
• Operational purpose. To follow up if you do not respond within 48 hours, in case the email did not reach you.
• Analytics purpose. Aggregated, anonymised traffic statistics (Plausible and Umami) to understand which sections of the site are useful. These platforms do not identify individuals and do not require cookie consent.

Personal data is never sold, rented, exchanged or shared with any third party other than the rental agency that holds the contract on the villa you ultimately book, and only at the moment of booking.

Legal basis

Under article 6 of the GDPR, the processing of your data is based on:

• Pre-contractual measures (article 6.1.b). Submitting the inquiry form constitutes a request for a pre-contractual offer (the villa shortlist with the all-in price). The data collected is the minimum required to prepare that offer.
• Consent (article 6.1.a). By clicking Submit, you consent to the storage of the form data for the purpose of preparing your shortlist and following up.

Storage and retention

• Inquiries without booking. The form submission is kept for twelve (12) months in the Netlify Forms dashboard, then deleted, unless the conversation continues by email or WhatsApp.
• Inquiries that lead to a booking. The booking record is kept for the duration of the rental agency contract plus the legal accounting retention period of ten (10) years under French law.
• Email correspondence. Conversations conducted by email are stored in the email inbox of the data controller and are kept for as long as the relationship remains active, with a maximum of five (5) years of inactivity before deletion.

Processors

The following third-party processors handle data on behalf of YOUR ST BARTH under standard data processing agreements:

• Netlify, Inc. (San Francisco, USA) — hosts the website and stores form submissions. Standard Contractual Clauses apply for the EU to US transfer.
• Plausible Analytics (Tallinn, Estonia, EU) — aggregated, cookie-less traffic statistics.
• Umami Analytics — privacy-first analytics, no cookies, no personal identifier.

Your rights under GDPR

As a data subject, you have the following rights:

• Access — request a copy of the data we hold on you.
• Rectification — ask us to correct any inaccurate detail.
• Erasure — request the deletion of your data ("right to be forgotten"), subject to legal retention obligations.
• Restriction — limit the processing under certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — at any time, with no effect on the lawfulness of prior processing.

To exercise any of these rights, email hello@yourstbarth.com. A reply is sent within thirty (30) days as required by article 12.3 of the GDPR.

If you consider that your data has been mishandled, you have the right to file a complaint with the French data protection authority: Commission Nationale de l'Informatique et des Libertés (CNIL), cnil.fr.

Security

Form submissions are encrypted in transit via TLS. The Netlify Forms dashboard is access-restricted by password. The email inbox of the data controller is access-restricted by password and two-factor authentication. No personal data is stored on this website itself in plain text.

Cookies

This website does not set tracking cookies. The two analytics platforms used (Plausible and Umami) operate without cookies and without personal identifiers, which is why no consent banner appears. Local storage may be used by Flatpickr (the date picker) for short-lived UI preferences; this data never leaves your browser.

Updates

This policy was last updated on 1 May 2026. Any material change will be reflected here with a new last-updated date. For inquiries pre-dating a material change, the version in force at the time of submission applies.