Legal

Privacy Policy

How we collect, use, and protect your information.

Last updated: July 11, 2026

The Real Curaçao (“we”, “our”, or “us”) operates https://www.therealcuracao.com and our The Real Curaçao mobile application available on the Apple App Store and Google Play Store (collectively, the “Platform”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Platform, subscribe to our newsletter, or interact with any of our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Platform.

1. Data Controller

The data controller responsible for your personal data is The Real Curaçao. For all privacy-related inquiries, please contact us at hello@therealcuracao.com.

The Real Curaçao

2. Information We Collect

2.1 Information You Provide Directly

Newsletter subscription: email address and optional preferences.
Contact form submissions: name, email, and message content.
Images uploaded to Scan Curaçao or other image-recognition features: the image file and any associated metadata (such as approximate location, if you choose to share it).
User-generated content such as reviews, comments, photos, event submissions, or itineraries (where applicable).
Any other information you voluntarily submit through the Platform.

2.2 Information Collected Automatically

Log data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps.
Device data: device type and screen resolution. Our mobile apps do not access advertising identifiers (IDFA/GAID) or any device identifier for tracking purposes.
Usage data: interactions with Platform features, search queries, clicked links, and time spent on pages.
Location data: approximate geographic location inferred from IP address only. Our mobile apps do not request GPS or precise location access.
Cookies and similar tracking technologies on the website (see our Cookies Policy). Our native mobile apps do not use third-party tracking cookies.

2.3 Information from Third Parties

Analytics providers (e.g., Google Analytics, Vercel Analytics) that aggregate usage statistics.
Social media platforms if you interact with our social content or share links.
Affiliate and booking partners when you click referral links or make enquiries through our Platform.

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide, operate, and maintain the Platform and its features.
To personalise your experience and deliver relevant travel content, guides, and recommendations.
To send service-related communications and newsletter updates where you have opted in.
To respond to your enquiries and provide customer support.
To analyse usage patterns and improve the Platform's performance and content.
To detect, prevent, and address technical issues, fraud, or misuse.
To comply with legal obligations.
To process future bookings or payments (where applicable).

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases:

Processing Activity	Legal Basis
Newsletter & marketing emails	Consent
Analytics & Platform improvement	Legitimate interests
Legal compliance	Legal obligation
Fraud prevention	Legitimate interests

5. Cookies & Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to enhance your experience on the website. These tools help us understand how you interact with our content, remember your preferences, and deliver relevant advertising.

For full details of the cookies we use, including how to manage or opt out, please read our Cookies Policy.

Mobile Apps (iOS & Android): The native applications do not display cookie consent banners and do not place third-party tracking cookies. Both apps use a WebView to load Platform content over HTTPS connections. Session data necessary for basic functionality is stored locally on your device and is not shared with advertising networks.

6. Sharing Your Information

We do not sell your personal data. We may share your information in the following circumstances:

6.1 Service Providers

We share data with trusted third-party service providers who assist in operating the Platform, including:

Supabase — database and authentication infrastructure (data stored in EU/US regions).
Vercel — hosting, edge network, and analytics.
Email service providers — for transactional and newsletter communications.
Analytics providers — to measure Platform performance.
OpenAI — natural-language processing and content generation for Ask the Iguana, the Trip Planner, and other AI-powered features (see AI and Image Recognition below).
Google Cloud Vision — image analysis for Scan Curaçao (see AI and Image Recognition below).

Google Analytics may use Google Signals and Google Advertising Features for aggregated demographics, interests, cross-device reporting, and advertising measurement when you have granted the relevant consent. You can manage or delete this data through your Google Account settings.

All service providers are contractually bound to handle your data securely and only as instructed by us.

6.2 Affiliate Partners

Our Platform contains affiliate links to hotels, tours, restaurants, car rental companies, and travel services. When you click an affiliate link, the third-party partner may receive data such as a referral code or click identifier. We are not responsible for the privacy practices of affiliate partners. Please review each partner's privacy policy before making a booking.

6.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or in response to valid requests from public authorities.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.

6.5 AI and Image Recognition

When you use Scan Curaçao or similar features, the image you provide may be transmitted to third-party AI and image-recognition providers to generate a description or identify the subject.

Providers: OpenAI and Google Cloud Vision.
Data sent: the image file and, if you choose to share it, approximate location metadata.
Purpose: visual recognition, description generation, and matching against our own database of places and events.
Legal basis: performance of the service you requested and, where applicable, our legitimate interest in improving the Platform and your experience.
Retention: we do not retain these images on our servers unless you explicitly choose to save them (for example, as a profile photo or uploaded review).
International transfers: OpenAI and Google may process data in the United States and other jurisdictions. We rely on Standard Contractual Clauses and other appropriate safeguards for transfers from the EEA or UK.
Use for model training: by default, your images are not used to train AI models. Please refer to each provider’s privacy policy for details of its data practices.

OpenAI and Google Cloud Vision process data under their own terms and privacy policies. For details, please see OpenAI’s Privacy Policy and Google Cloud Privacy Policy.

7. International Data Transfers

We operate primarily from Curaçao and our infrastructure providers may process data in the United States and the European Union. If you are located in the EEA or UK, your data may be transferred to countries that do not have an equivalent level of data protection. In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as approved by the European Commission.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

Newsletter subscriptions: until you unsubscribe.
Images uploaded for AI recognition: processed in real time and not retained on our servers unless you explicitly choose to save them (e.g., as a profile photo or uploaded review).
Analytics data: retained in aggregated or anonymised form for up to 26 months.
Log files: retained for up to 90 days.
Legal obligations: data may be retained longer where required by applicable law.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right of access — to request a copy of the personal data we hold about you.
Right of rectification — to request correction of inaccurate or incomplete data.
Right of erasure — to request deletion of your personal data ("right to be forgotten").
Right of restriction — to request that we limit how we process your data.
Right to data portability — to receive your data in a structured, machine-readable format.
Right to object — to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
Right to lodge a complaint — with your local data protection authority.

To exercise any of these rights, please contact us at hello@therealcuracao.com. We will respond within 30 days.

10. Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS/TLS), access controls, and regular security assessments.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

The Platform is not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at hello@therealcuracao.com and we will delete such information promptly.

12. Third-Party Links & Embedded Content

The Platform may contain links to third-party websites, embedded videos, maps (e.g., Google Maps), booking widgets, and social media content. These third parties operate under their own privacy policies, which we do not control. We encourage you to review the privacy policy of any third-party site you visit.

13. Mobile Application (iOS & Android)

The Real Curaçao mobile app is available on the Apple App Store (iOS) and Google Play Store (Android). Both apps are WebView-based applications that load content from https://www.therealcuracao.com. The native app layer does not independently collect personal data beyond what the website collects through your interaction with the Platform.

The Platform may use analytics services to measure performance and improve user experience. Neither app uses advertising identifiers (IDFA/GAID) for cross-app tracking.
Location access is not requested by the app.
Camera access may be requested for features such as Scan Curaçao. Microphone and contacts are not accessed.
Push notifications are not currently used.
We do not sell personal data to third parties or data brokers.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or a prominent notice on the Platform. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

The Real Curaçao

hello@therealcuracao.com