First Grand Property Management
Legal

Privacy Policy

First Grand Property Management Ltd
Last updated: 25th July 2026

This Privacy Policy explains how First Grand Property Management Ltd ("First Grand", "we", "us", "our"), a company incorporated in the Republic of Mauritius, collects, uses, stores and shares personal data when you use firstgrandpropertymanagement.com (the "Site"), stay at a property we manage, or engage us to manage your property.

We process personal data in accordance with the Mauritius Data Protection Act 2017 and, where applicable to individuals in the European Economic Area or United Kingdom, the GDPR and UK GDPR.

1. Who we are

First Grand Property Management Ltd operates short-term rental and property management services in Mauritius, including the guest-facing brand First Grand Stays.

Data Controller: First Grand Property Management Ltd
Contact: info@firstgrandgroup.com
Registered address: Morcellement GIDC, Floreal, Mauritius

2. Personal data we collect

If you visit the Site: device and browser information, IP address, pages visited, and cookie data (see Section 8). If you submit an enquiry form, we collect your name, email address, phone number and the contents of your message.

If you are a guest: name, contact details, nationality, passport or national ID details (as required by Mauritian law and the Tourism Authority), booking details, arrival and departure dates, number and names of accompanying guests, payment status (payments are processed by the booking platform or payment provider, not stored by us), messages you send us via WhatsApp, email or booking platforms, and access records generated by smart locks at the property (PIN issuance and entry events).

If you are a property owner or prospective owner: name, contact details, property details, ownership documentation, bank account details for payouts, tax information, and communications with us.

If you are a supplier or contractor: name, contact details, and payment information.

3. How we use your data

We use personal data to:

  • respond to enquiries and provide quotes or appraisals
  • manage bookings, check-in and check-out, and guest communications, including automated messages via our WhatsApp concierge
  • generate and manage smart lock access codes for your stay
  • comply with legal obligations, including guest registration, tax and Tourism Authority requirements in Mauritius
  • pay property owners and manage owner accounts and reporting
  • operate, secure and improve the Site and our services
  • send service updates and, where you have consented, marketing communications

We do not sell personal data.

4. Legal bases

We rely on: performance of a contract (bookings, management agreements), compliance with legal obligations (guest registration, tax, licensing), legitimate interests (running and improving our business, securing our properties and systems), and consent (marketing, non-essential cookies). You may withdraw consent at any time.

5. Who we share data with

We share personal data only where necessary with:

  • booking platforms through which you booked (for example Airbnb, Booking.com, Agoda, Trip.com)
  • our property management system and channel management providers
  • smart lock and home automation providers, limited to what is needed to manage property access
  • payment processors and banks
  • cleaning, maintenance and other service providers, limited to what is needed to deliver the service
  • professional advisers (accountants, lawyers, insurers)
  • government authorities, including the Mauritius Revenue Authority and Tourism Authority, where required by law

Some providers are located outside Mauritius. Where data is transferred internationally, we take reasonable steps to ensure it is protected to a standard consistent with the Data Protection Act 2017.

6. Automated communications

Some guest messages are handled by an AI-assisted concierge on WhatsApp. These conversations are stored and may be reviewed by our team to resolve issues and improve service quality. You can request a human at any time.

7. Retention

We keep personal data only as long as necessary for the purposes above and to meet legal, tax and regulatory obligations in Mauritius (generally up to 10 years for booking, financial and contractual records). Enquiry data that does not lead to a booking or contract is deleted or anonymised within 6 months.

8. Cookies

The Site uses essential cookies to function and, with your consent, analytics cookies to understand how the Site is used. You can manage cookies through your browser settings or our cookie banner.

9. Security

We use appropriate technical and organisational measures to protect personal data, including access controls, encrypted connections and vetted third-party providers. No system is perfectly secure, and transmission of data over the internet is at your own risk.

10. Your rights

Under the Data Protection Act 2017 you have the right to request access to your personal data, request correction or erasure, object to or restrict processing, and withdraw consent. To exercise these rights, contact us at info@firstgrandgroup.com. You also have the right to lodge a complaint with the Data Protection Office of Mauritius.

11. Children

Our services are directed at adults. We collect data about minors only where provided by a parent or guardian as part of a booking.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the date of the last revision.

13. Contact

Questions about this policy or your data: info@firstgrandgroup.com.