Privacy Policy

Last updated: 28 November 2025

Foil Turks & Caicos (“we”, “us”, “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website (www.foilturksandcaicos.com) or interact with our services.

1. Information We Collect

We collect the following types of information:

1.1 Information you provide to us

• Contact details (name, email, phone number)
  
• Booking information (date, time, preferences)
  
• Payment data (processed securely by our booking/payment partners)
  
• Messages sent via forms, WhatsApp or email
  

1.2 Information collected automatically

• IP address and device information
  
• Browser type and version
  
• Pages visited and interaction data
  
• Cookies and similar technologies
  (see our Cookie Policy)
  

1.3 Information from third-party providers

• Booking platforms (e.g., PeakPro / FareHarbor)
  
• Payment processors (e.g., Stripe)
  
• Analytics tools (e.g., Google Analytics)
  

We do not knowingly collect information from children under 16.

2. How We Use Your Information

We use your data to:

• Process and manage bookings
  
• Communicate with you about lessons or enquiries
  
• Improve our website and services
  
• Run analytics and understand visitor behaviour
  
• Deliver marketing communications (only with your consent)
  
• Maintain safety and prevent fraud
  

3. Legal Basis for Processing (EU/UK Visitors)

For visitors from the EU/UK, we rely on the following lawful bases:

• Contract – to process bookings and enquiries
  
• Consent – analytics, marketing, cookies
  
• Legitimate interests – site security, basic functionality
  
• Legal obligation – where required by law
  

4. How Long We Keep Your Data

We retain data only as long as needed:

• Booking data: up to 7 years (legal/financial)
  
• Email enquiries: up to 12 months
  
• Analytics data: 26 months or per your settings
  

5. Sharing Your Information

We may share your data with:

• Booking systems (e.g., PeakPro, FareHarbor)
  
• Payment processors (e.g., Stripe)
  
• Email platforms (e.g., Mailchimp)
  
• Website hosting providers
  
• Analytics + tracking services
  
• Government or legal authorities when required
  

We never sell personal data.

6. International Data Transfers

As a business operating in Turks & Caicos, we may process data outside your home country.
Where required (EU/UK visitors), we rely on:

• Standard Contractual Clauses (SCCs)
  
• GDPR-compliant third-party providers
  

All partners are vetted for compliance.

7. Your Rights (EU/UK)

You have the right to:

• Access your data
  
• Correct inaccurate information
  
• Request deletion
  
• Restrict processing
  
• Withdraw consent at any time
  
• Object to marketing
  
• Request data portability
  

To exercise these rights, please use our contact form here.

8. Security

We use secure servers, encryption, SSL, and access controls to protect your information.

9. Third-Party Links

Our site may include links to third-party websites or booking platforms. We are not responsible for their privacy practices.

10. Changes to This Policy

We may update this policy from time to time. The latest version will always be posted on this page.