Privacy Policy

01 · Who we are

About ExploreIsla

ExploreIsla is an online booking platform and marketplace for experiences and services in Curaçao, including wellness services, massages, tours, excursions, water activities, food and lifestyle experiences and other bookable activities.

For personal information for which ExploreIsla determines the purposes and means of processing, ExploreIsla acts as the responsible party or controller as applicable under relevant privacy law. Independent Providers may separately be responsible for personal information they process for their own purposes or in connection with delivering an Experience.

ExploreIsla is the controller for personal information for which it determines the purposes and means of processing. Where a Provider independently determines how and why it processes Guest information to perform an Experience, that Provider acts as a separate controller for that processing.

02 · Applicable privacy framework

Privacy law

ExploreIsla processes personal information in accordance with applicable privacy and data-protection requirements, including the European Union General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (UAVG). The Landsverordening bescherming persoonsgegevens of Curaçao may additionally apply where relevant.

Additional privacy laws may apply depending on the location of the Guest or Provider and the circumstances of the processing.

Nothing in this Privacy Policy limits rights that cannot lawfully be limited under applicable law.

03 · Information we collect

What we may know about you

05 · How we collect information

Where information comes from

• directly from you when you browse, book, create an account or contact us;
• from a person making a booking on your behalf;
• from an ExploreIsla Provider in connection with a booking or service issue;
• from payment, fraud-prevention, analytics, advertising or technology partners;
• automatically through cookies and similar technologies; and
• from publicly available or lawfully accessible sources where appropriate.

06 · Why we use information

Purposes of processing

• create and manage bookings;
• connect Guests with Providers;
• process or facilitate payments, refunds and Provider payouts;
• send confirmations, reminders and operational booking messages;
• provide customer and Provider support;
• manage cancellations, complaints, disputes and chargebacks;
• verify Providers and maintain marketplace quality;
• detect and prevent fraud, abuse and security incidents;
• operate, analyse, troubleshoot and improve the platform;
• send marketing where permitted by law and your preferences;
• comply with legal, tax and accounting requirements; and
• establish, exercise or defend legal claims.

07 · Legal grounds

Why processing is permitted

08 · Providers

Information shared with your booked Provider

To fulfil a booking, ExploreIsla may provide the relevant Provider with information reasonably necessary to deliver the Experience. This may include your name, contact details, booking date and time, party size, selected options, service or meeting location and relevant requests.

Where genuinely necessary for safe performance, limited health or accessibility information that you provide through the relevant intake process may also be made available to the booked Provider. Access should be limited to authorised persons who need it for the relevant booking and safety purpose.

Providers are independent businesses or professionals and may have their own legal privacy obligations. They must not use ExploreIsla Guest information for unrelated purposes merely because they received it through a booking.

09 · Other recipients

When information may be shared

• the Provider responsible for your booked Experience;
• payment processors, banks and payout providers;
• Shopify and technology providers used to operate the platform;
• hosting, security and fraud-prevention providers;
• email, messaging and customer-support providers;
• analytics and advertising partners, subject to applicable consent requirements;
• professional advisers such as accountants, insurers and lawyers;
• government bodies, regulators, law enforcement or courts where legally required; and
• buyers, investors or successors in connection with a genuine corporate transaction.

ExploreIsla does not sell personal information merely for a third party to use as its own unrelated customer list.

10 · Payments

Payment information

Payments may be processed through third-party payment providers. ExploreIsla may receive transaction references, payment status, payment method metadata, refund information and other information necessary to administer the booking.

Full payment card details are generally handled by the applicable payment processor rather than stored directly by ExploreIsla. Guests should not send full card numbers or security codes through ordinary email, chat or booking notes.

11 · Cookies & analytics

Website technology

ExploreIsla may use cookies, pixels, local storage and similar technologies for essential website functionality, security, preferences, analytics and, where permitted, advertising.

Where applicable law requires consent for non-essential technologies, ExploreIsla will seek that consent through the available cookie or privacy controls.

12 · Marketing

Offers & inspiration

Where permitted, ExploreIsla may send Curaçao inspiration, Experience recommendations, offers and other marketing communications.

You can unsubscribe using the link in a marketing email or contact ExploreIsla. Operational booking messages may still be sent where necessary to manage an active booking or account.

13 · International processing

Your information may cross borders.

ExploreIsla is operated from the Netherlands, while booked Providers and Experiences may be located in Curaçao and technology or service providers may operate in other countries. Personal information may therefore be transferred or processed outside the European Economic Area (EEA).

Where the GDPR restricts an international transfer, ExploreIsla will use an applicable transfer mechanism or safeguard where required, such as an adequacy decision, Standard Contractual Clauses or another lawful mechanism, together with supplementary measures where required.

14 · Retention

We do not aim to keep everything forever.

ExploreIsla keeps personal information for as long as reasonably necessary for the purpose for which it was collected and for legitimate legal, accounting, tax, fraud-prevention, dispute-resolution and security needs.

Sensitive health-related information is retained only for as long as necessary for the relevant booking, safety, complaint or legal purpose. ExploreIsla aims to apply a shorter retention period to such information than to ordinary booking and accounting records, unless longer retention is required or permitted by law.

15 · Security

Protecting personal information

ExploreIsla uses reasonable technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

No online system can be guaranteed to be completely secure. Guests and Providers should protect their account credentials and report suspected unauthorised activity promptly.

16 · Your rights

Choices and privacy rights

Where the GDPR applies, you may have rights including access to your personal data, correction of inaccurate data, erasure, restriction of processing, data portability and objection to certain processing.

Where processing is based on consent, you may withdraw that consent at any time. You may also object to direct marketing at any time and, where applicable, request information about international-transfer safeguards.

Privacy rights are not absolute. ExploreIsla may retain or continue processing information where legally required or permitted.

To make a privacy request, contact privacy@exploreisla.com. We may need to verify your identity before completing a request.

17 · Complaints

If you have a privacy concern

We encourage you to contact ExploreIsla first so the concern can be reviewed and addressed.

Because ExploreIsla is operated by a business established in the Netherlands, you may have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Depending on the processing, another competent supervisory authority may also have jurisdiction, including the College Bescherming Persoonsgegevens Curaçao where applicable.

18 · Children

Children's information

ExploreIsla is not designed for children to independently create contractual bookings where they lack legal capacity to do so. A parent, guardian or authorised adult should make bookings for minors where required.

When children participate in an Experience, ExploreIsla aims to collect only information reasonably necessary to administer and safely deliver that Experience.

19 · Third-party websites

External services

ExploreIsla may link to websites, maps, social platforms or other third-party services. Their privacy practices are governed by their own policies.

20 · Changes

Updates to this Privacy Policy

ExploreIsla may update this Privacy Policy to reflect changes in law, technology, Providers, platform functionality or data practices.

The current version will be published on the platform with an updated date. Where legally required, material changes will be communicated or additional consent will be requested.