Privacy policy

1. Who we are

This website is operated by Bellavere Ltd, trading as Bellavere Property Care (“Bellavere”, “we”, “us”). Bellavere Ltd is the data controller for the personal data described in this policy.

• Company number 238321, incorporated in Mauritius on 19 August 2026 as a private company limited by shares.
• Contact for privacy matters: BellavereLtd@gmail.com

2. The laws that apply

We process personal data in accordance with the Mauritius Data Protection Act 2017, which is overseen by the Data Protection Office of Mauritius. Where the EU General Data Protection Regulation (GDPR) applies to our processing of your data, we also comply with it.

3. What we collect

Contact form

• Your name, email address, optional phone number, property type, number of properties and your message.
• A consent record: that you ticked “I agree to be contacted about my enquiry”, the date and time, and a shortened, one-way hash of your IP address (not the address itself).

Owner portal

• Account details: your name, email address, phone number and login credentials.
• Property and financial information needed to manage your property: bookings, maintenance records, documents, statements and payout details.

Technical data

• Server logs kept by our hosting provider (such as IP address, browser type and pages requested), used for security and to keep the site running.

4. Why we use it, and our legal basis

• Answering your enquiry — based on your consent and on steps taken at your request before entering into a contract.
• Running the owner portal and managing your property — necessary to perform our management agreement with you.
• Keeping accounting and tax records — to comply with our legal obligations in Mauritius.
• Protecting the site against abuse (for example rate limiting and spam filtering) — our legitimate interest in keeping the service secure.

5. How long we keep it

• Contact enquiries that do not lead to an agreement: up to 12 months after our last exchange.
• Owner-account and property records: for the duration of the management agreement, then for as long as Mauritian accounting and tax law requires (typically 7 years).
• Consent records: for as long as the related data is kept.

6. Who we share it with

We never sell your personal data. We share it only with service providers (“processors”) that help us run the business, under contracts that require them to protect it — for example our website hosting provider and our email provider — and with professional advisers or authorities where the law requires it.

Some of these providers may store data outside Mauritius or the EU. Where that happens we rely on appropriate safeguards, such as adequacy decisions or standard contractual clauses.

7. Your rights

Under the Data Protection Act 2017 and, where it applies, the GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased where we no longer need it;
• restrict or object to certain processing;
• receive your data in a portable format (data portability);
• withdraw your consent at any time, without affecting processing carried out before you withdrew it.

To exercise any of these rights, email BellavereLtd@gmail.com. We may ask you to confirm your identity, and we will reply within one month. You also have the right to complain to the Data Protection Office of Mauritius or, if you live in the EU, to the data protection authority in your country.

8. Cookies

This website sets at most three cookies:

• bv_session — strictly necessary. Keeps you signed in to the owner portal. It is httpOnly (not readable by scripts) and is only set when you log in.
• bv_currency — preference. Remembers whether you chose to view prices in MUR or EUR. It is set only when you make that choice and lasts 1 year.
• bv_view_as — strictly necessary, Bellavere staff only. Remembers which owner’s portal an administrator is viewing. It is httpOnly and ends with the browser session.

We do not use analytics, advertising or tracking cookies, and no third-party cookies are set. Because every cookie is either strictly necessary or set at your request, we do not show a cookie-consent banner. You can delete cookies at any time in your browser settings; deleting bv_session signs you out.

9. Security

We use encrypted connections (HTTPS) and restrict access to personal data to the people who need it to do their job. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. See also our terms of use.

This page is a template and should be reviewed by a qualified legal adviser before launch.