Privacy policy

This policy explains what personal information Letsgo collects when you use this website or book with us, why, who we share it with and the rights you have. We keep it short and specific: it describes what this site actually does.

Last updated 6 October 2026.

Who is responsible for your information

Astria Porta Ltd ("Letsgo", "we") is the controller of your personal data under the Data Protection Act 2017 of Mauritius. For any question about your data, or to use your rights, contact us at info@letsgo.mu.

Astria Porta Ltd, trading as LETSGO
BRN C20176249 · VAT 27852303 · O.T.O 15696
Morcellement Berg, La Caverne 1
Vacoas, Mauritius
+230 5919 2600 · info@letsgo.mu

What we collect

When you book

your name, email address and mobile or WhatsApp number
the trips, dates, number of guests and add-ons you choose
if you give them: where you are staying, the lead guest's name, special requests, dietary needs or allergies, and a company name and BRN for the invoice
whether you confirmed that guests are Mauritian citizens or residents, for trips limited to them
payment information: for card payments, only the result and the bank's reference. Your card number goes straight to our bank's secure payment page; we never see or store it.

If you create an account: your name, email, phone and a password (stored only in scrambled, one-way form).

If you write to us, review a trip, ask about adding your business or ask to hear about villas: what you send us, your email address and the date.

When you visit the site: our server records technical information (IP address, browser, pages requested) for security and to fix errors. See "Cookies" below for what is stored in your browser.

Allergy and dietary details are health information. Give them only if you want the operator to know; we use them for nothing else and delete them with the booking's personal details.

Why we use it, and on what basis

To take and run your booking (performing our contract with you): confirming it, sending your voucher, invoice and trip information, passing the details the operator needs, handling changes, refunds and questions.
To meet our legal duties (legal obligation): invoices, VAT and accounting records, and answering lawful requests from the authorities.
To keep the site secure and working, and to improve our service (our legitimate interests): preventing fraud and abuse, server logs, and asking you, once, to review your trip after it.
With your consent: analytics and advertising cookies, villa launch news, and passing on allergy information. You can withdraw consent at any time; this does not affect what was done before.

We do not sell your personal data, and we do not use it for automated decisions about you.

The operator of your trip (for example the boat company): your name, phone, the trip, date, guests, add-ons, where you are staying and your requests, so they can welcome you. They use it only to run your trip.
Our bank and its card payment service (Mastercard Payment Gateway Services) for card payments and refunds.
Our service providers, who act only on our instructions: website hosting and email delivery.
Google (Google Analytics and Google Ads), only if you accept the matching cookies.
The authorities, such as the Mauritius Revenue Authority, when the law requires it, and our professional advisers (accountant, lawyers) under a duty of confidentiality.

Information sent outside Mauritius

Some providers, such as Google, may process data outside Mauritius. When that happens we rely on the safeguards the Data Protection Act requires, such as the provider's contractual commitments to protect it.

How long we keep it

Bookings, invoices and payment records: as long as Mauritian tax and VAT law requires us to keep accounting records (at least 5 years after the year of the booking). Personal details not needed for those records, such as special requests and allergy information, are deleted sooner.
Accounts: until you ask us to close yours. Bookings made through an account are kept as described above.
Messages, enquiries and reviews: up to 2 years after we last dealt with them; a published review stays online until you ask us to remove it.
Villa news sign-ups: until you unsubscribe, or until we have told you villas are open.
Server logs: a short time, normally no more than 90 days.

How we protect it

The site is served only over an encrypted connection (HTTPS). Access to bookings is limited to the Letsgo team, each with their own account. Booking links sent to you contain a long random code, and voucher check pages show only the lead guest's first name. If a data breach puts your information at risk, we inform the Data Protection Commissioner within 72 hours and tell you without delay where the risk to you is high.

Your rights

Under the Data Protection Act 2017 you can ask us to:

give you a copy of the personal data we hold about you
correct information that is wrong or incomplete
delete your data, where we no longer need it or have no legal duty to keep it
restrict how we use it, or object to our use of it
withdraw a consent you gave

Write to info@letsgo.mu. We may ask you to confirm who you are, and we reply within one month. If you are unhappy with our answer, you can complain to the Data Protection Office of Mauritius (dataprotection.govmu.org), or to the data protection authority of the country where you live.

Children

Bookings must be made by an adult. We do not knowingly collect information from children under 16 except the names or ages of young guests that a parent or guardian gives us for a booking.

Cookies

A cookie is a small file stored by your browser. We use as few as possible.

Essential (always on, no consent needed)

app_sid: keeps you signed in and protects forms against misuse. Deleted when you close the browser.
lg_cart: remembers the trips in your cart. Kept 30 days.
app_consent: remembers your cookie choices. Kept 6 months.

Our own measurement (stays on this site, never shared)

lg_src: when you arrive from a link (a search engine, an advert, a partner site or one of our emails), remembers which one, so we know which of our links lead to bookings. It holds nothing about who you are and is not set if you refuse analytics cookies. Kept 60 days.

Analytics (only if you accept)

_ga, _ga_*: Google Analytics, to count visits and see which pages help visitors book. Kept up to 2 years.

Marketing (only if you accept)

_gcl_*: Google Ads, to measure which adverts led to a booking. Kept up to 90 days.

Analytics and marketing tools are only switched on when we have set them up, and the cookie banner always lists what is in use. You can change your choice at any time with Cookies at the bottom of every page; refusing deletes the analytics and marketing cookies straight away.

Emails we send

We send emails about your booking (confirmation, voucher, changes, reminders) and one invitation to review your trip. We do not send newsletters or offers unless you ask for them, and every such email lets you unsubscribe.

Changes to this policy

When we change this policy, we update the date at the top. If a change matters to how we use your data, we will tell you before it applies.

WhatsApp +230 5919 2600 info@letsgo.mu +230 5919 2600