Privacy policy

1. Who we are

Island Pass is the data controller for personal data collected through the platform. We process your data in line with the EU General Data Protection Regulation (GDPR), which applies to us because we offer services to, and market toward, EU/EEA residents.

2. What we collect

Account data: name, email, phone, encrypted password, preferences.

Transaction data: Passes purchased, payment method (processed by Sentoo), billing info, currency, refund and transaction history.

Booking data: reservations, redemption status, date, time and location of booked services, interaction history with Partners.

Communication data: support conversations, dispute submissions, in-app messages.

Technical data: IP address, device and browser info, cookies, usage data.

3. Why we process it, and our legal basis

Contractual necessity: creating your account, processing payments, fulfilling bookings.

Legal obligation: tax, accounting, anti-money-laundering compliance.

Legitimate interests: fraud prevention, platform security, and improvement, balanced against your rights.

Consent: marketing communications, which you can withdraw at any time.

4. Cross-border transfers

Island Pass is based in Curaçao, outside the EU/EEA and holding no EU adequacy decision. Data transferred to Curaçao or elsewhere outside the EU/EEA is protected using recognized safeguards, including Standard Contractual Clauses and data processing agreements with our vendors, including Sentoo.

Our EU representative: Island Pass's founders act as the Article 27 GDPR representative themselves, based in the Netherlands. You can contact our EU representative on data protection matters at support@getislandpass.com, in addition to, or instead of, contacting us directly.

5. Who we share your data with

Partners: only what is needed to fulfil your booking; they are independent data controllers for what they do with it afterward.

Sentoo and our banking partners.

Service providers: hosting, analytics, support, and fraud-detection vendors, contractually limited to processing data only on our instructions.

Legal and regulatory bodies: where required by law.

We do not sell your personal data for money. Sharing with advertising partners (see the Cookie Policy) only happens with your consent, but depending on how those partners use the data, this kind of sharing can count as a "sale" or "share" under some laws, for example California's CCPA, even without a cash payment. Where that applies to you, you can opt out anytime through your cookie and marketing preferences.

6. How long we keep it

Account data: while your account is active. Transaction data: up to 7 years (tax and accounting). Dispute records: up to 5 years after resolution. Marketing consent: until withdrawn.

7. Your rights

As an EU, EEA, or UK resident, you have the right to access, correct, delete, restrict, or port your data, to object to how we use it, and to lodge a complaint with your local data protection authority. Exercise these rights at support@getislandpass.com.

8. Cookies

We use cookies to keep you logged in, remember your preferences, understand app usage, and detect fraud. Strictly necessary cookies cannot be turned off; you control analytics and marketing cookies any time in your settings. Full category breakdown: see our Cookie Policy.

9. Marketing communications

As an EU, EEA, or UK resident, we only send you marketing communications if you opt in, and every message includes a clear unsubscribe option.

10. Automated decisions

We use automated systems for fraud detection and risk scoring. If an automated decision affects your access or a transaction, you can request a human review.

11. If there is a data breach

Where a breach is likely to put you at real risk, we will notify you directly, in addition to notifying the relevant supervisory authority within 72 hours as required by GDPR.

12. Age

The platform is not intended for account holders under 18. We do not knowingly collect personal data from minors beyond what is needed when a minor is included as a companion on an adult's booking.

13. Changes to this policy

We may update this Privacy Policy; updates are posted on the platform, and continued use after an update means you accept it.

14. Contact

support@getislandpass.com