« Template document provided for guidance only — to be reviewed
by a legal advisor before going fully live. »

1. Data controller

The controller of your personal data is:

2. Data collected

As part of the use of the sailset-tours.com website and the sending of quote
requests, Sailset Tours may collect the following personal data:

No sensitive data (health, religious or political beliefs, ethnic origin) is
collected or requested.

3. Purposes of processing

Your personal data is collected and processed for the following purposes:

4. Legal basis for processing

Depending on the nature of the processing, the legal basis is as follows:

5. Data recipients

Your personal data is intended exclusively for the Sailset Tours team
(Streetbuster Ltd) as part of processing your requests and managing your
bookings.

Your data is never sold, rented or transferred to third
parties for commercial purposes. It may be shared with local suppliers
(hotels, guides, transport providers) strictly to the extent necessary to
perform the booked service.

Where there is a legal obligation, your data may be disclosed to the competent
Mauritian or European authorities.

6. Retention period

7. Your rights

In accordance with the General Data Protection Regulation (GDPR) applicable to
European Union citizens and with the provisions of the Mauritian
Data Protection Act, you have the following rights:

To exercise one of these rights, send your request by email to
saileshsetahul@gmail.com, stating your identity and the
nature of your request. A response will be sent to you within a maximum of
one month from receipt of your request.

If you believe that your rights are not being respected, you also have the
option of lodging a complaint with the competent data protection authority in
your country of residence (in France: the CNIL, www.cnil.fr).

8. Data transfers outside the European Union

As a company based in Mauritius, Streetbuster Ltd processes your personal data
in a country outside the European Union. Mauritius is not currently the
subject of an adequacy decision by the European Commission.

We inform you that this transfer is necessary for the performance of the
contract you have requested (quote request, booking of a tourism service in
Mauritius). We implement all the organisational and technical measures
necessary to protect your data.

9. Data security

Sailset Tours takes all useful precautions to preserve the security of your
data and prevent it from being altered, damaged, or accessed by unauthorised
third parties. The sailset-tours.com website uses the HTTPS protocol
(encrypted SSL/TLS connection) to secure exchanges.

10. Cookies

The use of cookies on the sailset-tours.com website is detailed in our
Cookie policy.

11. Policy changes

Streetbuster Ltd reserves the right to amend this privacy policy at any time.
The version in force is the one published on sailset-tours.com. We invite you
to consult it regularly. The date of the last update is shown at the bottom of
the page.

Last updated: June 2026