Privacy Policy

1. Introduction and Data Controller

Lavender Moon Villas ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and make reservations at our property.

We comply with the Jamaican Data Protection Act and are committed to ensuring your data is handled responsibly.

2. What Data We Collect

We collect personal data that you voluntarily provide to us when making a reservation or contacting us. This includes:

Guest Information

• Full name (first and last name)
• Email address
• Phone number
• Home address
• Identification type and number (for check-in verification)

Reservation Information

• Check-in and check-out dates
• Number of guests
• Room preferences
• Special requests or requirements

Payment Information

• Payment card details (processed securely by our payment provider)
• Billing address
• Transaction records

Technical Information

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on our website

3. How We Use Your Data

We use your personal data for the following purposes:

• Reservation Processing: To process and manage your bookings, including confirmation emails and check-in/check-out procedures
• Communication: To send you booking confirmations, updates, and important information about your stay
• Payment Processing: To process payments for your reservations securely
• Customer Service: To respond to your inquiries and provide support
• Legal Compliance: To comply with legal obligations, including tax and financial reporting requirements
• Security: To maintain the security of our property and guests
• Service Improvement: To improve our services and guest experience

4. Legal Basis for Processing

Under the Jamaican Data Protection Act, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contractual obligations when you make a reservation
• Legitimate Interest: Processing necessary for our legitimate business interests, such as improving our services and preventing fraud
• Legal Obligation: Processing required to comply with Jamaican laws and regulations
• Consent: Where you have given explicit consent for specific processing activities

5. Data Sharing and Third Parties

We share your personal data with the following third-party service providers who assist us in operating our business:

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Reservation Records: Retained for 7 years from the date of check-out for legal and financial compliance purposes
• Guest Information: Retained for 7 years from your last stay, after which it may be anonymized or deleted
• Payment Records: Retained for 7 years as required by tax and financial regulations
• Communication Records: Retained for 3 years unless needed for legal purposes

After the retention period, your data will be securely deleted or anonymized so that it can no longer be associated with you.

7. Your Rights

Under the Jamaican Data Protection Act, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Correction: You can request correction of inaccurate or incomplete personal data
• Right to Deletion: You can request deletion of your personal data, subject to legal retention requirements
• Right to Object: You can object to certain types of processing, including direct marketing
• Right to Data Portability: You can request your data in a structured, machine-readable format
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS
• Secure Storage: Personal data is stored in secure, access-controlled database systems
• Password Protection: Staff accounts are protected with strong, hashed passwords
• Access Controls: Only authorized personnel can access personal data on a need-to-know basis
• Regular Updates: We keep our systems and software updated with security patches

While we strive to protect your personal data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will notify you promptly in the event of a data breach.

9. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us provide and improve our services.

Types of Cookies We Use

• Essential Cookies: Required for the website to function properly (e.g., session management, security)
• Functional Cookies: Remember your preferences and settings

You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside Jamaica where our service providers operate (e.g., United States for hosting services). When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your data in accordance with the Jamaican Data Protection Act.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe we have collected information from a child, please contact us immediately at privacy@lavendermoon.net.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

14. Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Office of the Information Commissioner of Jamaica: