Legal
Privacy Policy
How we handle your personal data, and the rights you have over it. Last updated 12 July 2026.
This is a plain-language summary followed by the full policy. It is provided as a working template and should be reviewed by qualified counsel and completed with your registered legal entity details before launch.
Who we are Port Royal Saloon Waters x Stellar Coast ("the platform", "we") is a destination experience platform for Port Royal, Jamaica. For data-protection purposes we are the data controller for personal data processed through this site. Contact us at the address on our Contact page for any privacy matter.
What we collect - Account data: your name and email address when you create an account. - Content you submit: reviews, comments, feedback, ratings, and tour or contact enquiries, including the name and email you provide as a guest. - Technical data: IP address and basic device or browser information, processed by our hosting and security providers to deliver and protect the service. - Optional analytics: anonymous, aggregated usage statistics, only if you accept analytics cookies.
We do not collect payment card details - bookings and payments happen on our providers' own secure systems - and we do not process health information.
Why we use it (lawful bases) - Contract: to give you an account and the features you request. - Legitimate interests: to run, secure, and improve the platform, moderate content, and respond to enquiries. - Consent: for optional analytics cookies, which you can withdraw anytime. - Legal obligation: to keep records we are required by law to keep.
Who we share it with We use trusted processors who act on our instructions: Supabase (database and authentication), Vercel (hosting), Rezgo (bookings), AmberPay (listing-fee payments), Open-Meteo (weather data), and, only with your consent, an analytics provider. Reviews you publish are shown publicly with the name you provide; your email is never shown publicly. We do not sell your personal data.
International transfers Some providers process data outside your country. Where personal data leaves the UK/EEA, it is protected by appropriate safeguards such as Standard Contractual Clauses.
How long we keep it We keep account data while your account is active. Published reviews and comments remain until removed. Enquiries and messages are kept only as long as needed to respond and for a reasonable record thereafter.
Your rights Under the GDPR and UK GDPR you may access, correct, export, restrict, or object to our use of your data, and request erasure. You can exercise the main rights yourself: - Download your data as a machine-readable file (right to access and portability). - Delete your account and associated personal data (right to erasure). - Update your details from your account, or contact us for anything else.
You also have the right to complain to your local data-protection authority (in the UK, the ICO; in the EU, your national supervisory authority).