Last updated: 11/07/2026

1. Data controller

IICONIC HOSPITALITY — Mehdi Malki, micro-entrepreneur immatriculé en France. Contact : malkimehdi@live.fr.

2. Data we collect

We only collect what is necessary to handle your concierge requests: name, email, phone, destination, dates, number of travellers, services and preferences. No payment data is processed on our website.

3. Purposes

Reply to your requests and arrange your bookings.
Contact you by email, phone or WhatsApp.
Improve the site (anonymised analytics, subject to your consent).

4. Legal bases

Performance of pre-contractual measures (Art. 6.1.b GDPR), our legitimate interest (Art. 6.1.f) and consent for non-essential cookies (Art. 6.1.a).

5. Retention

Concierge requests: 3 years from last contact. Accounting data: 10 years per French law.

6. Recipients

Your data is accessible only to our team and to our technical processors (hosting, transactional email, WhatsApp Business), all bound by confidentiality clauses.

7. Transfers outside the EU

Some processors may host data in the United States. Transfers are framed by Standard Contractual Clauses or an adequacy decision (Data Privacy Framework).

8. Your rights

You have a right of access, rectification, erasure, restriction, objection and portability. Contact us at malkimehdi@live.fr. You may also lodge a complaint with the French CNIL (www.cnil.fr).

9. Security

The site is served over HTTPS. Database access is protected by Row-Level Security policies and strict permissions.

Privacy Policy