Privacy Policy
This policy explains what personal information we collect when you use this website or contact us, how we use it, and the choices and rights you have. We collect only what we need to arrange your stay, and we never sell your information.
Last updated: November 12, 2026
Who we are
This website is run by Ever Ocean Pvt Ltd (registration no. C27722026), trading as Everblue, a travel operator based on Mathiveri, Alif Alif Atoll, Maldives. We are responsible for your personal information as described in this policy.
The policy applies to information we collect through this website and when you contact us by WhatsApp, email or phone. For any privacy question or request, email hello@everbluetravels.com.
What we collect
When you request a booking, we collect your name, email address and phone number; your travel dates; the number of adults, children and infants in your party; the room, package, excursions and transfers you choose; and any notes you add. When you use our contact form, we collect your name, email address, phone number if you give it, and your message. If you message us by WhatsApp or email, we keep that conversation, including details you share later such as flight times or dietary needs.
To protect our forms from spam, we record a scrambled (hashed) version of your IP address and the time you submitted the form, and Cloudflare Turnstile checks that a real person is using the form. Our hosting provider also keeps short-lived technical logs.
We do not ask for passport or card details on this website. If you tell us about a medical condition or limited swimming ability, we use that only to keep you safe on excursions.
How we use your information
We use your information to reply to your enquiry, check availability, confirm and manage your booking, arrange your transfers and excursions, send booking emails, and take payment. We rely on the need to take steps for, and perform, our contract with you.
We also use limited information to protect our forms from spam and abuse, to keep our records accurate, and to deal with complaints or disputes. We do this because we have a legitimate interest in running a safe and reliable service. We keep accounting and booking records where the law requires it.
We do not send marketing emails, we do not make automated decisions about you, and we never sell your information.
International transfers
Our service providers store and process information on servers that may be outside the Maldives and outside your own country, for example in Singapore, the United States or the European Union. We use established providers that protect personal information with appropriate safeguards, such as standard contractual clauses where these are required.
How long we keep it
We keep personal information only for as long as we need it. Spam-protection records are deleted after 48 hours. Contact messages that do not lead to a booking, and records of the emails we send, are kept for up to 2 years. Booking records are kept for as long as needed to provide your booking and then for up to 5 years after your stay, to meet accounting, tax and legal requirements. After that, we delete or anonymise the information.
Your rights
You can ask us for a copy of the personal information we hold about you, ask us to correct it or delete it, object to or ask us to restrict how we use it, or ask for it in a portable format. Some information we must keep by law, such as booking records for accounting, and we will tell you if that applies.
To make a request, email hello@everbluetravels.com. We may need to confirm your identity, and we will reply within 30 days. If you live in the European Economic Area, the United Kingdom or another country with data protection laws, you also have the right to complain to your local data protection authority.
How we protect it
This website uses encrypted connections (HTTPS), access to booking information is limited to our staff through secure sign-in, and IP addresses used for spam protection are stored only in hashed form. No system is completely secure, but if a security problem affects your information, we will tell you and the authorities where the law requires it.
Children
Bookings must be made by an adult aged 18 or over. For children travelling in a party, we ask only for the number of children and infants, which we need for pricing and safety. This website is not directed at children, and we do not knowingly collect information directly from them.
Other websites
This website links to services such as WhatsApp and online maps. When you use them, their own privacy policies apply, and we are not responsible for how they handle your information.
Changes to this policy
We may update this policy when our service or the law changes. The date at the top of this page shows when it was last updated. If we make a significant change that affects how we use information you have already given us, we will tell you.
Questions about your data?
Message us or email hello@everbluetravels.com. We'll help with any request about your information.
Contact us