Privacy Policy

Your data is protected. We never sell your personal information.

1. Who We Are

Pelicano Island is a tourist accommodation located in the Guna Yala (San Blas) archipelago, Panamá, operated by a local Guna family. We can be reached at:

We are the data controller for all personal data collected through this website.

2. What Data We Collect

We collect the following personal data when you submit a booking inquiry:

Identity: First and last name
Contact: Email address, phone/WhatsApp number (optional)
Booking preferences: Cabin type, check-in/check-out dates, number of guests
Message content: Any special requests or questions you submit
Technical/Analytics: IP address, browser type, device, pages visited (via Google Analytics 4)

We do not collect sensitive data (health, political opinions, etc.).

3. Why We Use Your Data

Your personal data is used exclusively to:

Process and respond to your booking inquiry for a stay at Pelicano Island, San Blas
Communicate with you about your reservation, dates, and logistics
Improve our website and user experience (analytics only)
Comply with any applicable legal obligations

We will never use your data for marketing purposes without your explicit consent.

4. Legal Basis for Processing

Contract performance (Art. 6(1)(b) GDPR): processing your booking inquiry
Legitimate interest (Art. 6(1)(f) GDPR): website analytics to improve the service
Consent (Art. 6(1)(a) GDPR): when you check the privacy policy checkbox in our contact form

We do not sell your personal data. We may share it with:

Netlify (form hosting & CDN) — Privacy Policy
Google Analytics 4 (anonymised analytics) — Privacy Policy

These processors are bound by data processing agreements. Data may be transferred outside the EU/EEA under appropriate safeguards (Standard Contractual Clauses).

6. Data Retention

We retain your booking inquiry data for a maximum of 12 months from the date of submission, unless a longer period is required by law or for ongoing contract performance.

7. Your Rights

Under GDPR, CCPA, and applicable law, you have the right to:

Access — request a copy of the data we hold about you
Rectification — correct inaccurate data
Erasure ("right to be forgotten") — request deletion of your data
Restriction — limit how we process your data
Portability — receive your data in a machine-readable format
Objection — object to processing based on legitimate interests
Withdraw consent — at any time, without affecting lawfulness of prior processing

To exercise any right, contact us at [email protected]. We will respond within 30 days.

8. Cookies & Tracking

We use Google Analytics 4 with IP anonymisation enabled. This places analytics cookies on your device to help us understand how visitors use the site. You can opt out at any time using the Google Analytics Opt-out Add-on or by adjusting your browser settings.

9. Contact & Complaints

For any privacy-related questions or to exercise your rights, contact us at:

Email: [email protected]

If you are in the EU/EEA and believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority.