Privacy Policy

The data controller responsible for your personal data is The Real Curaçao. For all privacy-related inquiries, please contact us at hello@therealcuracao.com.

The Real Curaçao

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Platform and its features.
• To personalise your experience and deliver relevant travel content, guides, and recommendations.
• To send service-related communications and newsletter updates where you have opted in.
• To respond to your enquiries and provide customer support.
• To analyse usage patterns and improve the Platform's performance and content.
• To detect, prevent, and address technical issues, fraud, or misuse.
• To comply with legal obligations.
• To create and secure your account, and to let you delete it (and its associated data) at any time from the app or by contacting us.
• To process Pass purchases and manage your Pass benefits, redemption history, and validity.
• To deliver push notifications you have opted in to.
• To process future bookings or payments (where applicable).

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases:

We use cookies, web beacons, pixels, and similar tracking technologies to enhance your experience on the website. These tools help us understand how you interact with our content, remember your preferences, and deliver relevant advertising.

For full details of the cookies we use, including how to manage or opt out, please read our Cookies Policy.

Mobile Apps (iOS & Android): The native applications do not display cookie consent banners and do not place third-party tracking cookies. Both apps are hybrid applications that load bundled app content and communicate with our services over HTTPS connections. Session data necessary for basic functionality is stored locally on your device and is not shared with advertising networks.

We do not sell your personal data. We may share your information in the following circumstances:

We operate primarily from Curaçao and our infrastructure providers may process data in the United States and the European Union. If you are located in the EEA or UK, your data may be transferred to countries that do not have an equivalent level of data protection. In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as approved by the European Commission.

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

• Newsletter subscriptions: until you unsubscribe.
• Account data: retained while your account is active; deleted when you delete your account (available directly in the app under Profile → Delete Account).
• Pass purchase and redemption records: retained for the validity of the Pass and thereafter as required for accounting and legal purposes.
• Push notification device tokens: retained until you disable notifications, delete your account, or the token expires.
• Images uploaded for AI recognition: processed in real time and not retained on our servers unless you explicitly choose to save them (e.g., as a profile photo or uploaded review).
• Analytics data: retained in aggregated or anonymised form for up to 26 months.
• Log files: retained for up to 90 days.
• Legal obligations: data may be retained longer where required by applicable law.

Depending on your location, you may have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right of rectification — to request correction of inaccurate or incomplete data.
• Right of erasure — to request deletion of your personal data ("right to be forgotten").
• Right of restriction — to request that we limit how we process your data.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
• Right to lodge a complaint — with your local data protection authority.

You can delete your account and its associated data at any time directly in the mobile app (Profile → Delete Account) or on the website at therealcuracao.com/delete-account. To exercise any other rights, please contact us at hello@therealcuracao.com. We will respond within 30 days.

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS/TLS), access controls, and regular security assessments.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

The Platform is not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at hello@therealcuracao.com and we will delete such information promptly.

The Platform may contain links to third-party websites, embedded videos, maps (e.g., Google Maps), booking widgets, and social media content. These third parties operate under their own privacy policies, which we do not control. We encourage you to review the privacy policy of any third-party site you visit.

The Real Curaçao mobile app is available on the Apple App Store (iOS) and Google Play Store (Android). The apps are hybrid applications that load bundled content and connect to our services over HTTPS. The following applies specifically to the mobile app:

• Account: you can create an account with an email address and password, and delete it at any time in the app (Profile → Delete Account) or on the website (therealcuracao.com/delete-account), which removes your account data from our systems.
• The Platform may use analytics services to measure performance and improve user experience. Neither app uses advertising identifiers (IDFA/GAID) for cross-app tracking.
• Location: the app may request precise GPS location — only with your explicit permission — for maps, directions, and nearby-places features. Location is not accessed in the background.
• Camera: may be requested for features such as Scan Curaçao and to set a profile photo.
• Microphone and contacts are not accessed.
• Push notifications: if you allow them, a device push token is stored to deliver notifications (places, events, offers). You can disable them at any time in the app (Profile) or in your device settings.
• Pass purchases: buying The Real Curaçao Pass collects the holder name and your email; payment is processed securely by Stripe. Passes can be added to Apple Wallet / Google Wallet. Pass use is governed by the Pass Terms & Conditions at therealcuracao.com/pass/terms.
• No public user-generated content: the app does not currently offer public content-sharing features (reviews, comments, social feeds). The only user-submitted images are your optional profile photo and images sent to Scan Curaçao for recognition.
• Offline storage: the app stores downloaded content, offline maps, saved items, and your preferences in a local database on your device. This data stays on your device and is not transmitted to us, except for items you choose to sync with your account (such as saved places).
• We do not sell personal data to third parties or data brokers.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or a prominent notice on the Platform. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: