Data Privacy Policy.

1. Who are we?

Caribee is a digital tourism platform operated by Xamayca Ltd, a company registered in the United Kingdom, focused on enhancing Caribbean travel experiences through curated content, local partnerships, and smart navigation tools.

 

For data protection purposes, we are a Data Controller under both the UK GDPR and the Jamaica DPA.

 

If you have any questions about this policy or your data, please contact:

Data Protection Officer (DPO):
Email: privacy@caribee.app

​​​

2. Scope of This Policy

​We may collect and process the following categories of personal data:

​

3. What Information We Collect

​We may collect and process the following categories of personal data:

​

a. Information you provide directly:

• Full name, email address, phone number

• Booking details and travel preferences

• Account credentials and profile settings

• Feedback, reviews, and correspondence

 

​b. Information collected automatically:

• IP address and browser type

• Device identifiers and operating system

• Location data (with your consent)

• Usage data (e.g., pages viewed, actions taken)

​​

c. Information from third parties:

• Social media profiles (if you sign in with social logins)

• Payment providers or partner integrations

• Marketing and analytics platforms (e.g., Google Analytics)

​​

4. How We Use Your Data

We use your personal data for the following purposes

• To provide, maintain, and improve the Caribee website and app

• To personalise content, recommendations, and offers

• To facilitate bookings, purchases, and transactions

• To respond to your enquiries and support requests

• To send marketing communications (with your consent)

• To prevent fraud, abuse, or legal violations

• To comply with legal obligations or enforce our terms

​

5. Legal Basis for Processing

We only process your personal data where we have a legal basis to do so, including:

• Consent: When you give us clear permission (e.g., for marketing)

• Contract: To perform our agreement with you

• Legal obligation: To comply with applicable law

• Legitimate interests: To improve our services and protect users

 

You may withdraw your consent at any time where consent is the basis.

​​

6. Your Data Protection Rights

You have the following rights under both UK and Jamaican law:

• Right to access – Request a copy of your data

• Right to rectification – Correct incomplete or inaccurate data

• Right to erasure – Ask us to delete your data

• Right to restriction – Ask us to limit use of your data

• Right to object – To certain processing (e.g., marketing)

• Right to data portability – Receive data in a machine-readable format

• Right to withdraw consent – At any time, if processing is based on consent

To exercise any of these rights, contact: privacy@caribee.app. We may ask for proof of identity before fulfilling requests.

 

7. Data Transfers

We may transfer your data outside the UK or Jamaica, including to:

• Our cloud service providers;

• Technical support or marketing partners.

Where we do so, we ensure:

• UK: Adequate safeguards under UK GDPR, such as Standard Contractual Clauses (SCCs).

• Jamaica: Transfers occur only to countries with adequate protection or using appropriate safeguards under the Jamaica DPA.

​​

8. Sharing Your Data

We may share your personal information with:

• Vendors or service providers (e.g. hosting, payments, booking services)

• Local tourism partners, when you book experiences

• Legal or government authorities, if required

• Our professional advisors, auditors, or investors

• Successors, in the case of a merger or sale

All third parties are contractually bound to respect your data and process it securely and lawfully.

​​

9. Data Retention

We will only retain your data as long as:

• Necessary to fulfil our service obligations;

• Required by law or regulatory duty;

• Needed for dispute resolution, auditing, or fraud prevention.

When data is no longer required, we will securely delete or anonymise it.

​

10. Data Security

We implement appropriate technical and organisational measures to secure your data, including:

• Encrypted transmission (HTTPS/SSL)

• Secure storage and access controls

• Staff training and access limitation

• Data breach protocols

 

11. Cookies and Analytics

We use cookies to:

• Improve user experience;

• Track app performance;

• Serve relevant content and ads.

You can manage cookie preferences in your browser or device settings. 

​

12. Marketing

With your consent, we may send you:

• Travel recommendations and curated experiences;

• Special offers or partner deals;

• App updates and newsletters.

You can unsubscribe at any time using the “unsubscribe” link or by emailing us.

​​

13. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal data from minors without verifiable parental consent. If you believe a child has provided us with personal data, please contact us immediately.

​

14. Your Rights Under Jamaica's DPA

If you are located in Jamaica, you also have the right to:

• Lodge a complaint with the Office of the Information Commissioner (OIC)

• Be informed if your data will be processed overseas

• Be notified in case of a data breach affecting your rights

For more information, visit: https://oic.gov.jm

​​

15. Updates to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" and post a notice on our website or app. Where required, we will seek your renewed consent.

​

For any questions or to exercise your rights, please contact Info@Xamaycagroup.com.

​

Thank you for choosing Caribee!