Legal

Privacy Policy

How we collect, use, and protect your information.

Last updated: May 8, 2025

The Real Curaçao (“we”, “our”, or “us”) operates https://www.therealcuracao.com(the “Platform”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Platform, use our AI trip-planning tools, subscribe to our newsletter, create an account, or interact with any of our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Platform.

1. Data Controller

The data controller responsible for your personal data is The Real Curaçao. For all privacy-related inquiries, please contact us at hello@therealcuracao.com.

Mango Records SRL

Curaçao, Caribbean

2. Information We Collect

2.1 Information You Provide Directly

Account registration data: name, email address, and password.
Newsletter subscription: email address and optional preferences.
Contact form submissions: name, email, and message content.
AI itinerary planner inputs: travel dates, destination preferences, group size, and trip requirements.
Any other information you voluntarily submit through the Platform.

2.2 Information Collected Automatically

Log data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps.
Device data: device type, screen resolution, and unique device identifiers.
Usage data: interactions with Platform features, search queries, clicked links, and time spent on pages.
Location data: approximate geographic location inferred from IP address.
Cookies and similar tracking technologies (see our Cookies Policy for full details).

2.3 Information from Third Parties

Analytics providers (e.g., Google Analytics, Vercel Analytics) that aggregate usage statistics.
Social media platforms if you interact with our social content or share links.
Affiliate and booking partners when you click referral links or make enquiries through our Platform.

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide, operate, and maintain the Platform and its features.
To personalise your experience and deliver relevant travel content, guides, and recommendations.
To power the AI itinerary planner and generate customised trip plans.
To send transactional emails (account confirmation, password reset).
To send our newsletter and marketing communications, where you have opted in.
To respond to your enquiries and provide customer support.
To analyse usage patterns and improve the Platform's performance and content.
To detect, prevent, and address technical issues, fraud, or misuse.
To comply with legal obligations.
To process future bookings or payments (where applicable).

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases:

Processing Activity	Legal Basis
Account creation & management	Contract performance
Newsletter & marketing emails	Consent
Analytics & Platform improvement	Legitimate interests
AI trip planner	Contract performance / Consent
Legal compliance	Legal obligation
Fraud prevention	Legitimate interests

5. Cookies & Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to enhance your experience on the Platform. These tools help us understand how you interact with our content, remember your preferences, and deliver relevant advertising.

For full details of the cookies we use, including how to manage or opt out, please read our Cookies Policy.

6. Sharing Your Information

We do not sell your personal data. We may share your information in the following circumstances:

6.1 Service Providers

We share data with trusted third-party service providers who assist in operating the Platform, including:

Supabase — database and authentication infrastructure (data stored in EU/US regions).
Vercel — hosting, edge network, and analytics.
OpenAI or equivalent AI providers — to process trip-planning inputs and generate itineraries.
Email service providers — for transactional and newsletter communications.
Analytics providers — to measure Platform performance.

All service providers are contractually bound to handle your data securely and only as instructed by us.

6.2 Affiliate Partners

Our Platform contains affiliate links to hotels, tours, restaurants, car rental companies, and travel services. When you click an affiliate link, the third-party partner may receive data such as a referral code or click identifier. We are not responsible for the privacy practices of affiliate partners. Please review each partner's privacy policy before making a booking.

6.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or in response to valid requests from public authorities.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.

7. International Data Transfers

We operate primarily from Curaçao and our infrastructure providers may process data in the United States and the European Union. If you are located in the EEA or UK, your data may be transferred to countries that do not have an equivalent level of data protection. In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as approved by the European Commission.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

Account data: retained for the duration of your account plus 12 months after deletion request.
Newsletter subscriptions: until you unsubscribe.
Analytics data: retained in aggregated or anonymised form for up to 26 months.
Log files: retained for up to 90 days.
Legal obligations: data may be retained longer where required by applicable law.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right of access — to request a copy of the personal data we hold about you.
Right of rectification — to request correction of inaccurate or incomplete data.
Right of erasure — to request deletion of your personal data ("right to be forgotten").
Right of restriction — to request that we limit how we process your data.
Right to data portability — to receive your data in a structured, machine-readable format.
Right to object — to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
Right to lodge a complaint — with your local data protection authority.

To exercise any of these rights, please contact us at hello@therealcuracao.com. We will respond within 30 days.

10. Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS/TLS), access controls, secure credential storage, and regular security assessments.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account.

11. Children's Privacy

The Platform is not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at hello@therealcuracao.com and we will delete such information promptly.

12. Third-Party Links & Embedded Content

The Platform may contain links to third-party websites, embedded videos, maps (e.g., Google Maps), booking widgets, and social media content. These third parties operate under their own privacy policies, which we do not control. We encourage you to review the privacy policy of any third-party site you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or a prominent notice on the Platform. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

The Real Curaçao

Mango Records SRL, Romania

hello@therealcuracao.com