Privacy & Cookie Policy
Owner and Data Controller
- reservations@keycaribe.com
- https://keycaribe.com
Quick Links
Last updated: April 14th, 2026
This Privacy & Cookie Policy includes important information about your personal data. If you have any questions, please email us at reservations@keycaribe.com.
Cookie Policy
What are cookies?
Cookies are small text files that are placed on your device when you visit our website. They help us provide you with a better experience, remember your preferences, and allow certain features to work properly.
Cookie Consent Management
We use CookieYes as our cookie consent management platform to help you control which cookies you accept. You can change your cookie preferences at any time by clicking the cookie settings icon on our website.
Types of Cookies We Use
1. Necessary Cookies (6 cookies)
These cookies are essential for the website to function and cannot be switched off. They do not store any personally identifiable information.
| Cookie Name | Domain | Duration | Purpose |
|---|---|---|---|
| cookieyes-consent | keycaribe.com | 1 year | Stores your cookie consent preferences |
| wpEmojiSettingsSupports | keycaribe.com | Session | WordPress emoji support detection |
| VISITOR_PRIVACY_METADATA | .youtube.com | 6 months | YouTube privacy consent state |
| m | m.stripe.com | 1 year 1 month | Stripe fraud prevention |
| __stripe_mid | .keycaribe.com | 1 year | Stripe session identifier |
| __stripe_sid | .keycaribe.com | 1 hour | Stripe single session identifier |
2. Functional Cookies (2 cookies)
These cookies enable enhanced functionality and personalization.
| Cookie Name | Domain | Duration | Purpose |
|---|---|---|---|
| VISITOR_INFO1_LIVE | .youtube.com | 6 months | YouTube player interface preferences |
| ytidb::LAST_RESULT_ENTRY_KEY | youtube.com | Persistent | YouTube search result optimization |
3. Analytics Cookies (3 cookies)
These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously.
| Cookie Name | Domain | Duration | Purpose |
|---|---|---|---|
| _ga | .keycaribe.com | 1 year 1 month 4 days | Google Analytics visitor identification |
| _ga_* | .keycaribe.com | 1 year 1 month 4 days | Google Analytics page view tracking |
| YSC | .youtube.com | Session | YouTube embedded video view tracking |
4. Marketing/Advertising Cookies (6 cookies)
These cookies are used to deliver personalized advertisements and measure advertising campaign effectiveness.
| Cookie Name | Domain | Duration | Purpose |
|---|---|---|---|
| _gcl_au | .keycaribe.com | 3 months | Google Tag Manager ad optimization |
| __Secure-YNID | .youtube.com | 6 months | YouTube user preferences for advertising |
| __Secure-ROLLOUT_TOKEN | .youtube.com | 6 months | YouTube feature rollout and ad optimization |
| __Secure-YEC | .youtube.com | Session | YouTube engagement tracking for advertising |
| test_cookie | .doubleclick.net | 15 minutes | DoubleClick browser cookie support test |
| _fbp | .keycaribe.com | 3 months | Facebook tracking pixel for ad delivery |
Managing Your Cookie Preferences
You can:
- Accept or reject cookies when you first visit our website
- Change your preferences at any time using the Consent Preferences link at the bottom of the page.
- Clear cookies through your browser settings
- Block cookies entirely through your browser (note: this may affect website functionality)
Types Of Data Collected
Personal Data
We collect and process the following types of personal data:
Booking Information:
- Full name
- Email address
- Phone number
- Payment information (processed securely through Stripe)
- Booking dates and property preferences
- Number of guests
Automatically Collected Data (Usage Data):
- IP address
- Browser type and version
- Device information
- Pages visited and time spent on pages
- Referral source
- Geographic location (country/city level)
Third-Party Services We Use
1. Guesty (Property Management)
Purpose: Property listing data, availability, and reservation management
Data Shared: Booking details, guest information, property preferences
Location: United States
Privacy Policy: https://www.guesty.com/privacy-policy/
2. Stripe (Payment Processing)
Purpose: Secure payment processing for reservations
Data Shared: Payment card information, billing details, transaction amounts
Location: United States (with EU data centers)
Privacy Policy: https://stripe.com/privacy
Security: PCI DSS Level 1 certified
3. Google Analytics
Purpose: Website traffic analysis and user behavior insights
Data Shared: Anonymized usage data, demographics (if available)
Location: United States
Privacy Policy: https://policies.google.com/privacy
Note: We have IP anonymization enabled
4. YouTube (Video Hosting)
Purpose: Embedded property tour videos
Data Shared: Video viewing behavior, engagement metrics
Location: United States
Privacy Policy: https://policies.google.com/privacy
5. Facebook Pixel
Purpose: Advertising campaign measurement and remarketing
Data Shared: Page views, user interactions, conversion events
Location: United States
Privacy Policy: https://www.facebook.com/privacy/policy/
6. CookieYes (Cookie Consent Management)
Purpose: Cookie consent management and compliance
Data Shared: Cookie consent preferences
Location: European Union (Ireland)
Privacy Policy: https://www.cookieyes.com/privacy-policy/
Data Hosting and Storage
Website Hosting: Our website is hosted on servers located in The Netherlands, ensuring compliance with European data protection standards.
Database Storage: User and booking data is securely stored on servers in The Netherlands with encrypted connections and regular security updates.
Backup Storage: Encrypted backups are maintained in secure cloud storage with access limited to authorized personnel only.
Mode And Place Of Processing The Data
Methods of Processing
KeyCaribe takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of data, including:
- SSL/TLS encryption for all data transmission
- Secure database with encrypted passwords
- Regular security updates and monitoring
- Access controls and authentication requirements
- PCI DSS compliance through Stripe for payment processing
The data processing is carried out using secure servers and IT-enabled tools, following organizational procedures strictly related to the stated purposes.
Legal Basis of Processing
KeyCaribe processes Personal Data under the following legal bases:
- Consent: You have given explicit consent for processing your personal data for booking reservations
- Contract Performance: Processing is necessary to fulfill the reservation contract
- Legal Obligation: Compliance with tax, accounting, and legal requirements
- Legitimate Interests: Website analytics, fraud prevention, and service improvement
International Data Transfers
Some of our service providers (Guesty, Stripe, Google Analytics, YouTube, Facebook) are located in the United States. When transferring data outside the European Economic Area, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions by the European Commission
- Explicit user consent for non-essential services
Retention Time
Personal Data is retained as follows:
- Booking Information: 7 years (for tax and legal compliance)
- Payment Records: 7 years (as required by financial regulations)
- Analytics Data: 26 months (Google Analytics default)
- Marketing Cookies: Up to 6 months (as specified in cookie policy)
- Email Communications: Until you unsubscribe or request deletion
- Account Data: Until account deletion is requested
The Rights Of Users
Under GDPR and applicable data protection laws, you have the following rights:
Your Rights Include:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure (“Right to be Forgotten”): Request deletion of your data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time (without affecting prior processing)
- Right to Lodge a Complaint: File a complaint with your data protection authority
Right to Object to Marketing
You can object to direct marketing at any time by:
- Clicking “unsubscribe” in marketing emails
- Adjusting cookie preferences to reject marketing cookies
- Contacting us directly
How to Exercise Your Rights
To exercise any of these rights, contact us at: reservations@keycaribe.com
We will respond to your request within one month (extendable by two months for complex requests). All requests are handled free of charge.
Data Security Measures
We implement industry-standard security measures:
- Encryption: SSL/TLS for data transmission, encrypted database storage
- Authentication: Secure login systems with password hashing
- Access Control: Limited access to personal data on a need-to-know basis
- Regular Audits: Security assessments and vulnerability testing
- Payment Security: PCI DSS Level 1 compliance through Stripe
- Backup & Recovery: Encrypted backups with disaster recovery procedures
- Staff Training: Regular data protection training for all personnel
Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
Changes To This Privacy Policy
KeyCaribe reserves the right to update this privacy policy at any time. Changes will be posted on this page with the “Last Updated” date modified and will require new consent for changes affecting consent-based processing.
Last Updated: April 14th, 2026.
Supervisory Authority
If you are located in the European Economic Area, you have the right to lodge a complaint with your local data protection authority:
Netherlands: Autoriteit Persoonsgegevens (https://autoriteitpersoonsgegevens.nl)
EU-wide list: https://edpb.europa.eu/about-edpb/board/members_en
Definitions And Legal References
Personal Data (or Data): Any information relating to an identified or identifiable natural person.
Usage Data: Information collected automatically through the website, including IP addresses, browser types, page views, and interaction data.
User: The individual using this website who, unless otherwise specified, coincides with the Data Subject.
Data Subject: The natural person to whom the Personal Data refers.
Data Processor: Third-party services that process Personal Data on behalf of KeyCaribe (e.g., Stripe, Guesty, Google Analytics).
Data Controller: KeyCaribe, which determines the purposes and means of processing Personal Data.
Cookies: Small text files stored on a user’s device to enable website functionality and track usage.
Legal Basis
- GDPR: Regulation (EU) 2016/679 (General Data Protection Regulation)
- ePrivacy Directive: Directive 2002/58/EC (as amended)
- Dutch Implementation Act: Uitvoeringswet Algemene verordening gegevensbescherming
- Cookie Law: EU Cookie Directive compliance