Privacy Policy.

This policy covers personal data collected through BookCuraçao.com and Latitude12 services. The primary display brand on this Curaçao-focused storefront is BookCuraçao.com. You can reach us at any time at hello@bookcuracao.com.

BookCuraçao.com and Latitude12 are trade names registered with the Chamber of Commerce Curaçao under number 163245. Both names are protected brand names.

The registered legal identity of the operator, the registered address, and the formal identification of the data controller for these services are being completed and will be published here before this document is issued as final. Until that is confirmed, we do not state how responsibility is legally allocated between BookCuraçao.com and Latitude12: the controller, joint-controller or processor allocation is under legal review and is not presented here as a settled fact.

• Travel searches. Your dates and number of guests are carried in the page address so results can be shown and shared. Searching alone does not require your name or contact details.
• Enquiries and concierge requests. Your email address, your message, and the travel context you choose to give us (who is travelling, what matters to you, preferred area or type of day).
• Live accommodation quotes. Your dates, your country of residence, your email address and the exact age of each traveller. Exact ages and residence are requested because accommodation suppliers can return different availability and prices depending on them.
• Booking details. The lead guest's name and email address, an optional phone number, the number of travellers, and the identifier of the quote you chose.
• Latitude12 account data. Where a Latitude12 service offers authenticated accounts, it can process the account identifier, email address, session information, and role or access information needed to operate that account.
• Owner and partner enquiries. Your name, email address, a description of your property, its area, and your message.
• Operational communications. Latitude12 services can hold transactional emails, message threads, delivery-status information, and delivery-suppression records where those are implemented for bookings, enquiries, support and operations.
• Durable Latitude12 records. Enquiries, quotes, bookings, guest or relationship records, and the operational events connected with them can be kept in Latitude12 as the system of record where they are relevant to the service you use.
• Booking reference held in your browser. After checkout, a short booking summary is kept in your browser's session storage so the status page can show your reference. See Cookies & Browser Storage.
• Technical request data. When an enquiry is submitted, the Latitude12 enquiry endpoint that receives it also records technical request information such as IP address and browser user-agent, together with the request context, for security, abuse prevention, rate limiting and operational purposes.
• Payment information. Card details are entered on Stripe's own hosted checkout page. The BookCuraçao website does not collect, see or store card numbers.

• To answer your enquiry and correspond with you.
• To request live availability and pricing, and to take the steps that precede a booking.
• To create and manage your booking, including the supplier steps behind it.
• To take payment through Stripe and to reflect the resulting booking status back to you.
• To support you before, during and after your stay.
• To protect the service against fraud and abuse, including rate limiting.
• To meet legal, accounting and record-keeping duties where these apply.

We handle your data to perform a contract with you, or to take steps you have requested before a contract — for example checking a live rate, or creating a booking you asked for. Where a legal obligation applies, for instance in accounting or fraud prevention, that obligation is the basis. Some processing rests on legitimate interests, such as keeping the service secure, where applicable. We ask for consent only where consent is genuinely the right basis; there is no blanket privacy consent on this site.

When you request a live accommodation quote, the exact age of each traveller may be needed to price and book the stay, and that can include children travelling with you. BookCuraçao does not create child profiles or accounts, and the BookCuraçao website stores no separate child identity record. Ages are supplied with the quote and booking request.

• Latitude12 — the booking infrastructure and system of record for enquiries, quotes, bookings, guest records and relationship records handled under either trade name.
• Stripe — payment processing through its hosted checkout. Stripe's own privacy statement applies to what it does with payment data.
• Hotel supply systems — Juniper or Roibos where a hotel quote or booking requires it.
• Villa and PMS systems — Hostaway where a mapped villa or property-management reservation requires it.
• Accommodation providers — as needed to fulfil the stay you ask to book.
• Hosted database, authentication and storage providers — needed to run Latitude12 accounts, records and booking infrastructure.
• Transactional email infrastructure — needed to send operational messages and record delivery or suppression status.
• Operational CRM and mailbox integrations — where used to manage enquiries, relationships and support conversations.
• Technical hosting and delivery providers — needed to serve the services.
• Analytics providers for Latitude12 services — PostHog and Google Analytics 4 can receive analytics data only where the Latitude12 consent system allows analytics to load.

The exact controller and processor allocation between the parties involved, and the complete list of sub-processors, are under final legal review and will be stated here before this document is final.

The services described above may process data outside Curaçao. Under Curaçao data protection law, a transfer of personal data to a country without an adequate level of protection requires an applicable statutory ground or appropriate safeguards; transfers are limited to what is necessary for the purposes set out above. We do not claim here that any specific transfer instrument is in place. A complete inventory of transfer destinations and the mechanism relied on for each is being compiled and must be completed before this document is final.

After checkout, your browser keeps a short booking summary in session storage: the booking reference, the property and dates, the number of travellers, the quoted total and currency, and the lead guest's name and email. It exists so the status page can show your booking, and it is discarded when you close the browser tab.

This notice covers both trade names, but different services can use different technology. BookCuraçao.com currently has no advertising or analytics SDKs or cookies implemented. It does load Google Fonts remotely from Google's font services, which means your browser makes a request to Google and that request can transmit network information including your IP address and user-agent. Details are in our Cookies & Browser Storage notice.

Latitude12 services can use consent-gated analytics, including PostHog and Google Analytics 4. Those analytics must not load unless analytics consent allows them, and Do Not Track is respected in the current Latitude12 implementation. Where a user is authenticated to Latitude12, Latitude12 can identify that user to analytics by user id and email only when analytics consent allows it. That does not mean BookCuraçao.com uses analytics today.

We do not state fixed retention periods that we cannot yet stand behind. Data is kept for as long as it is needed for the purpose it was collected for — answering your enquiry, managing your booking and supporting you — and after that for as long as legal, accounting, dispute-handling or security requirements make it necessary. The final operational retention schedule, including the durable records held in the Latitude12 booking system, must be completed and published here before this document receives legal sign-off.

We take reasonable technical and organisational measures appropriate to the data involved, and payment card details are handled on Stripe's hosted checkout rather than by this website. No online service can guarantee absolute security, and we do not make that claim.

Under the Curaçao Landsverordening bescherming persoonsgegevens you can ask to be informed about the processing of your data and to access it, ask for correction or removal where that applies, and object to processing in the cases the law allows. A request for access is answered within four weeks. Where the EU General Data Protection Regulation applies to you, the rights it grants — including access, rectification, erasure, restriction, portability and objection — apply as well.

To exercise any of these, write to hello@bookcuracao.com. We may need to confirm your identity before acting on a request.

Our stay matcher turns the preferences you select into travel suggestions. It is recommendation logic: it does not make an automated decision that has legal effect for you, and it does not profile you for advertising.

Contact us first at hello@bookcuracao.com — most questions are resolved quickly. You can also contact the Curaçao data protection authority, Commissie Toezicht Bescherming Persoonsgegevens, at cbp.cw. A formal complaints and dispute contact will be published with the completed operator identity details.

When this policy changes, the version stamp below changes with it. The current version is 2026-09-21-draft.