Privacy policy

Privacy Policy

Last updated: 26 October 2026

This policy explains how Stay Caribbean Limited ("StayCaribbean", "we", "us", "our") collects and uses personal data when you use stay-caribbean.com (the "Site"), send us an enquiry, create an account, apply to become a partner or sign up to our newsletter. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

The controller of your personal data is Stay Caribbean Limited, a company registered in England and Wales (company number 11409903), trading as StayCaribbean.

We have not appointed a Data Protection Officer because we are not required to. Please send any question about this policy or your data to the email address above.

2. What StayCaribbean does

StayCaribbean sells holiday accommodation in its own name. When you enquire about a listing with a "Send an enquiry" button, we handle your enquiry ourselves and any booking is with Stay Caribbean Limited. Other listings are referral listings: the "Check prices & book" button takes you to another company's website (for example a hotel or an affiliate partner), and any booking there is with that company under its own terms and privacy policy.

3. The personal data we collect

Information you give us

  • Enquiries: your name, email address, phone number, travel dates, number of guests and the content of your message, plus the listing you enquired about.
  • Accounts: your name, email address, password (stored in hashed form), and any profile details you choose to add.
  • Partner (vendor) sign-up: your name, business name, email address, phone number, business address and the details, descriptions and photos of the listings you submit.
  • Newsletter: your email address and the date you subscribed.
  • Correspondence: anything you send us by email, phone or WhatsApp, including any notes we make of calls.

Information collected automatically

  • Technical data: your IP address, browser type, device information and the pages you request, recorded in our hosting provider's server logs for security and troubleshooting.
  • Cookies: at present only strictly necessary cookies (see section 9 and our Cookie Policy).
  • Analytics data (planned): if we enable Google Analytics and you consent, information about how you use the Site (see section 9).

Please do not send us sensitive information (for example about your health) unless it is needed for your trip, such as an accessibility requirement. If you do, we will use it only to pass your request to the relevant partner.

The Site is not aimed at children under 18. Accounts and enquiries should be made by an adult.

4. How we use your data and our lawful bases

  • To handle your enquiry: check availability and price with the property, send you a quote and follow up on it. Lawful basis: steps taken at your request before entering into a contract (Article 6(1)(b)), and our legitimate interest in running the marketplace (Article 6(1)(f)).
  • To create and manage your account. Lawful basis: contract (Article 6(1)(b)).
  • To assess partner applications, publish partner listings, send partners their enquiries and manage our partner relationship, including tracking bookings confirmed through StayCaribbean for commission purposes. Lawful basis: contract (Article 6(1)(b)) and legitimate interests (Article 6(1)(f)).
  • To send our newsletter. Lawful basis: consent (Article 6(1)(a)). You can unsubscribe at any time using the link in each email or by contacting us.
  • To answer your questions and provide customer support. Lawful basis: legitimate interests (Article 6(1)(f)).
  • To keep the Site secure and prevent spam, fraud and misuse, including server logs and, when enabled, Google reCAPTCHA. Lawful basis: legitimate interests (Article 6(1)(f)).
  • To understand how the Site is used and improve it, using analytics cookies only if you consent. Lawful basis: consent (Article 6(1)(a)).
  • To keep business and accounting records and meet legal obligations. Lawful basis: legal obligation (Article 6(1)(c)).
  • To establish, exercise or defend legal claims. Lawful basis: legitimate interests (Article 6(1)(f)).

Where we rely on legitimate interests, we have considered your interests and rights and concluded they are not overridden. You can ask us for more detail about this assessment. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

5. Who we share your data with

  • Properties: to check availability and price, we share your dates, party size and any special requests with the property you asked about. We don't pass on your name or contact details at the enquiry stage unless you ask us to.
  • Third-party booking sites: when you click "Check prices & book" on a referral listing, you leave our Site. We do not send your enquiry details to that site, but the link may include a reference showing that you came from StayCaribbean, and the third party will collect your data under its own privacy policy. We are not responsible for how third-party sites handle your data.
  • Hosting: our Site and database are hosted by hosting.com on servers in London, United Kingdom, which act as our processor.
  • Email and communication providers we use to send and receive emails and messages, including WhatsApp (operated by Meta) if you choose to contact us that way.
  • Google (when enabled): Google Analytics 4 for site statistics (only with your consent) and Google reCAPTCHA to protect our forms from spam and abuse.
  • Professional advisers such as accountants, lawyers and insurers, where needed.
  • Authorities such as HMRC, the police or a court, where the law requires it.
  • A buyer or successor if our business, or part of it, is sold or restructured.

We do not sell your personal data.

6. International transfers

Our Site is hosted in the United Kingdom. Some transfers outside the UK are a necessary part of what we do:

  • Partners in your destination: most of our partners are based in the Caribbean and Central and South America, in countries that may not have data protection laws equivalent to the UK's. When you enquire about or book a property abroad, we send the property the details it needs because this is necessary for the steps you've asked for or for your booking (Article 49(1)(b) UK GDPR). We share only what the partner needs to respond.
  • Service providers: some of our providers, such as Google and Meta, may process data in the United States or elsewhere. Where they do, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework, where the provider is certified) or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Contact us if you would like more information about the safeguards we use.

7. How long we keep your data

  • Enquiries and correspondence: up to 2 years after our last contact with you, unless they relate to a booking confirmed through StayCaribbean, in which case see business records below.
  • Accounts: while your account is active. If you close it, or it is inactive for 3 years, we delete or anonymise it within 90 days, except data we must keep for other reasons listed here.
  • Partner records: for as long as you are a partner and up to 6 years afterwards for contract, commission and accounting purposes.
  • Business and accounting records (including records of confirmed bookings and commission): 6 years from the end of the financial year they relate to, as required by UK law.
  • Newsletter: until you unsubscribe. We keep a record of the unsubscribe so we do not email you again.
  • Server logs: normally no more than 90 days.
  • Analytics data (if enabled): no more than 14 months.

We may keep data for longer if we need it to deal with a complaint or legal claim.

8. Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you (access);
  • ask us to correct data that is wrong or incomplete (rectification);
  • ask us to delete your data (erasure);
  • ask us to restrict how we use your data (restriction);
  • object to our use of your data where we rely on legitimate interests, and object at any time to direct marketing (objection);
  • receive data you gave us in a portable format, or have it sent to another organisation (portability);
  • withdraw your consent at any time where we rely on consent, for example for the newsletter or analytics cookies. This does not affect anything we did before you withdrew it.

Some rights apply only in certain circumstances. To use any of them, email hello@stay-caribbean.com. We may need to confirm your identity. We will reply within one month, which may be extended by up to two further months for complex requests; we will tell you if so. There is normally no fee.

If a partner or a third-party booking site holds your data as its own controller, you should also contact them directly to exercise your rights over that data.

9. Cookies

Now: the Site currently sets only strictly necessary cookies: a session cookie that keeps the Site working and keeps you signed in, and a security (XSRF) cookie that protects forms against cross-site request forgery. These do not need your consent.

Planned: we plan to add Google Analytics 4 to measure how the Site is used, and Google reCAPTCHA to protect our forms. Before we do, we will add a cookie banner. Analytics cookies will be set only if you accept them, and you will be able to change your choice at any time. reCAPTCHA is used for security and may set cookies or collect device and usage information that Google uses under its Privacy Policy and Terms of Service.

See our Cookie Policy for details.

10. Security

We use appropriate technical and organisational measures to protect your data, including encrypted (HTTPS) connections, hashed passwords and access limited to people who need it. No website is completely secure, so please use a strong, unique password for your account.

11. Links to other websites

The Site links to third-party websites, including booking sites, partner sites and image sources such as Wikimedia Commons. Their privacy practices are their own, and we recommend you read their privacy policies.

12. Complaints

If you have a concern about how we use your data, please contact us first at hello@stay-caribbean.com and we will try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator:

13. Changes to this policy

We may update this policy from time to time, for example when we enable analytics or online booking. We will post the new version on this page with a new "last updated" date and, if the changes are significant, we will tell account holders by email.