Privacy Policy
The Island Spa at Palm Cay
Last updated: 31 March 2026
1. Introduction
Welcome to The Island Spa at Palm Cay (“we”, “our”, “us”). We are committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website:
If you do not agree with the terms of this policy, please do not use our website.
2. Data Controller
The data controller responsible for your personal data is:
The Island Spa at Palm Cay
Yamacraw Hill Road
Nassau, Bahamas
Email: chris@palmcay.com
3. Information We Collect
We may collect and process the following types of personal data:
a) Information You Provide
Name
Email address
Phone number
Billing and booking details
Any information submitted via forms or bookings
b) Transaction Data
Purchase and booking history
Payment information (processed securely via third-party providers)
c) Technical Data
IP address
Browser type and version
Device type
Time zone and location
Website usage data
d) Marketing Preferences
Your preferences in receiving marketing communications
4. How We Use Your Information
We use your data to:
Process bookings and purchases
Provide spa services and customer support
Send confirmations and service-related communications
Improve our website and services
Comply with legal obligations
Send marketing communications (only where consent has been given)
5. Legal Basis for Processing
We process your personal data under the following legal bases:
Contractual necessity – to fulfil bookings or services
Legitimate interests – to improve services and website performance
Consent – for marketing communications
Legal obligations – for compliance with applicable laws
6. Sharing Your Information
We may share your data with:
Payment processors (e.g. Stripe, PayPal)
Booking and scheduling systems
IT and hosting providers
Professional advisors (legal, accounting)
We do not sell your personal data.
7. International Data Transfers
As we are based in The Bahamas, your data may be processed outside the UK or EU. Where this occurs, we take appropriate measures to ensure your data is handled securely and in accordance with applicable data protection laws.
8. Data Retention
We retain your personal data only for as long as necessary to:
Fulfil the purposes outlined in this policy
Comply with legal and regulatory requirements
9. Your Rights
Depending on your location, you may have the right to:
Access your personal data
Request correction of inaccurate data
Request deletion of your data
Object to processing
Withdraw consent at any time
Request data portability
To exercise any of these rights, please contact:
chris@palmcay.com
10. Cookies
Our website uses cookies to enhance user experience and analyse site traffic.
Cookies may include:
Essential website functionality cookies
Analytics cookies (e.g. Google Analytics)
Marketing and tracking cookies
You can control cookies through your browser settings.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last updated” date.
14. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact:
Email: privacy@palmcay.com
Address: Yamacraw Hill Road, Nassau, Bahamas
15. Booking & Health Information
We may collect limited health or treatment preference information necessary to deliver spa services safely. This information is treated as confidential and only used for service provision.