Privacy and cookies

The operator of Tahiti Lodge, 13 Servitude Pugibet, 98703 Punaauia, Polynésie française, is responsible for the data collected on this site.

• To book: last name, first name, email, phone or WhatsApp, number of travellers, dates, and if you wish your flight and arrival time.
• To pay: the amount and the payment status. Card numbers are entered with our payment provider and never reach us.
• During the stay: your requests, extras and messages with the team, and the time your room's QR code was opened, with the device type (for example “iPhone · Safari”) and an anonymous identifier of your browser.
• Technical: the essential cookies described below. No audience tracking, no advertising.

• To manage your booking: confirmation, payment, access to the room, invoice. This is necessary to carry out your booking.
• To send you useful information for the stay (guide, verification code, reminders). Never advertising without your consent.
• To meet our accounting and tax obligations (invoices, tourist tax).
• To secure the site (sign-in by code, limited attempts) and the Lodge: knowing who opened a room's QR code, to spot a wrong room or an unexpected presence.

Only the Lodge team has access, and each person sees only what they need: for example, the housekeeping team sees the rooms to prepare but not the guests' identity. Your data is neither sold nor rented.

We use a few providers, who use your data only for the service they provide:

• Online paymentProvider · StripeRole · Handles card payments; we never see your card number.
• EmailsProvider · ResendRole · Sends confirmations, sign-in codes and stay information.
• Hosting and databaseProvider · Hostinger International LtdRole · Stores the site and the booking data.
• Chat assistantProvider · Anthropic (Claude)Role · Answers the questions asked in the chat bubble; do not write sensitive data there. A message written in a language other than French is also sent to it, to be translated for our team.
• WhatsApp and Messenger messagesProvider · Meta (WhatsApp, Facebook)Role · If you write to us on WhatsApp or Messenger, your message, your profile name and your WhatsApp number reach us so we can answer (a first reply may come from our chat assistant). They are kept with the other conversations, 90 days after the last message, then deleted.
• Sign-in with Google (if you choose it)Provider · GoogleRole · Only passes us your name, your email and an account identifier, to open your stays. Never your password.
• Map of the addresses (Around page, guide)Provider · Google MapsRole · Shows the map; your IP address is sent to Google on that occasion.
• FontsProvider · Google FontsRole · Shows the site's fonts; your IP address is sent to Google on that occasion.

Some providers are located in Europe or the United States. They are contractually committed to protecting your data (European Commission standard contractual clauses or equivalent safeguards).

• Contact details (email, phone, requests)Duration · 3 years after your stay, then deletion
• Invoices (with your name) and accounting recordsDuration · 10 years (legal obligation)
• Copies of the emails sentDuration · 1 year
• Openings of the rooms' QR codesDuration · 60 days
• Sign-in code sent by emailDuration · 10 minutes
• Sign-in to “My stay”Duration · 30 days, or until you sign out

You can at any time see your data, have it corrected or deleted, object to a use or ask to receive it in a common format. The data needed for our accounting obligations is kept for the legal period.

The simplest way: sign in to “My stay”, then “My account”. There you correct your information, download all your data in one file, turn off notifications and can delete your account yourself.

Contact us by email or WhatsApp: we answer within a month at most.

If you believe your rights are not respected, you can refer the matter to the CNIL (cnil.fr).

You can ask us at any time to erase your data, including your conversations with us.

You have a “My stay” account: sign in, open “My account”, then “Delete my account”. It takes effect immediately, or as soon as a current stay or an upcoming refund is over.

You wrote to us on WhatsApp or Messenger or in the website’s chat bubble: send “Delete my data” in the same conversation. We confirm your request, then erase the whole conversation (messages, profile name, number), within 30 days at most. A copy remains in your app and with Meta, under their own rules.

Or contact us by email with your name and, if you have one, your booking reference.

Even without a request, a finished conversation is erased automatically 90 days after the last message.

After erasure, only invoices remain (name and amounts, 10 years, a legal obligation) and, without your name, the dates and amounts of your stays.

The site only uses cookies essential to its operation: no advertising cookie, no audience-tracking cookie, no banner to accept. They do not require consent.

Cookie-free audience measurement: to know how many people visit the site, which pages they look at and where they come from, the site counts visits itself, without storing anything in your browser and without sending anything to a third party. To count each person only once a day, it computes a fingerprint from your address, your browser and a secret that changes every day; it is erased two days later and allows neither identifying you nor following you from one day to the next. Only daily figures remain (page views, source, device type, language, clicks on the main buttons), kept for 13 months. This measurement falls under the consent exemption provided for by the CNIL.

• tl_currencyWhat it is for · Remember the chosen display currency (XPF, €, $)Duration · 1 year
• tl_langWhat it is for · Remember the chosen language (French or English)Duration · 1 year
• tl_guestWhat it is for · Stay signed in to “My stay” (email code, Google or Facebook)Duration · 30 days
• tl_staysWhat it is for · Find on this device the stays already openedDuration · 90 days
• tl_devWhat it is for · Anonymous identifier of the device that opens a room's QR code (Lodge security)Duration · 1 year
• tl_oauthWhat it is for · Secure a Google / Facebook sign-in in progressDuration · 10 minutes
• tl_staffWhat it is for · Team sign-in to the administrationDuration · 12 hours
• tl_preview_roleWhat it is for · Team: preview of the administration with another roleDuration · Session

The site is fully encrypted (HTTPS). Access to “My stay” is by your reference or a one-time code, and the administration is protected by individual accounts and role-based rights.