Privacy Policy

Islandcraze Travels ("we", "us", "our") is the data controller responsible for your personal data. We are registered in Jamaica and operate in compliance with the Data Protection Act, 2020.

Contact Information:
Email: privacy@islandcrazetravels.com
Address: Kingston, Jamaica

Under Jamaica's Data Protection Act, we process your personal data based on the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for the performance of a contract with you (e.g., booking services)
• Legal Obligation: Processing is necessary for compliance with a legal obligation
• Legitimate Interests: Processing is necessary for our legitimate interests, provided your rights and freedoms are not overridden

We use your personal data for the following purposes:

• To process and manage your bookings and travel arrangements
• To verify your Campus Elite membership status
• To communicate with you about your bookings and account
• To send you marketing communications (with your consent)
• To improve our services and website functionality
• To comply with legal obligations and prevent fraud
• To analyze website usage and user behavior

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, in compliance with Jamaica's Data Protection Act.

• SSL/TLS encryption for data transmission
• Secure, encrypted storage of personal data
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

• Booking Data: Retained for 7 years after the last transaction (for tax and legal compliance)
• Account Data: Retained while your account is active, plus 2 years after closure
• Marketing Data: Retained until you withdraw consent or opt-out
• Legal Requirements: Some data may be retained longer if required by Jamaican law

We use cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content. You can manage cookie preferences through your browser settings or our cookie consent banner.

Types of cookies we use:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our website
• Marketing Cookies: Used to deliver relevant advertisements (with consent)

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the Information Commissioner of Jamaica within 72 hours, where feasible
• Notify affected individuals without undue delay if the breach poses a high risk
• Provide clear information about the nature of the breach and steps being taken
• Document all breaches in our records

Your personal data may be transferred to and processed in countries outside Jamaica. When we do so, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the Information Commissioner
• Ensuring the receiving country has adequate data protection laws
• Obtaining your explicit consent where required

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children under 18 without parental consent. If we become aware that we have collected data from a child, we will take steps to delete such information promptly.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.