Privacy Policy

Coral Gardens on Grace Bay ("we", "us") manages vacation rentals at Coral Gardens, 5 Penns Road, The Bight, Providenciales, Turks and Caicos Islands. This policy explains what information we collect through coralgardensongracebay.com and when you contact or stay with us, how we use it, and the choices you have.

• Contact and inquiries: your name, email address, phone number and message when you use our contact form, email us or call us.
• Reservations: when you book, our booking engine (Cloudbeds) collects your name, contact details, travel dates, number of guests, special requests and payment details. Payment card details are handled by Cloudbeds and its payment processors; we do not store full card numbers on our website.
• Concierge chat: the questions you type into our website chat assistant, and any details you choose to share in it.
• Email updates: your email address, if you ask to receive news and offers from us.

• Google Analytics: pages visited, how you arrived at our site, approximate location (city or country), device and browser type. Google Analytics uses cookies.
• Vercel Web Analytics and Speed Insights: anonymous page views, clicks on key buttons (such as Book Now, phone and email links) and page performance. These tools do not use cookies and do not identify you personally.
• Server logs: our hosting provider records IP addresses and request details for security, abuse prevention and troubleshooting.

• To answer your questions and manage your reservation, arrival and stay.
• To send booking confirmations, pre-arrival details and service messages.
• To send news and offers, only if you have asked for them. Every marketing email includes an unsubscribe link.
• To understand how visitors use our website so we can improve it.
• To keep our website and guests safe, prevent fraud and spam, and meet legal, tax and accounting obligations.

We do not sell your personal information. We share it only with service providers that help us run our business, and only as needed for them to do so:

• Cloudbeds, our reservation and property management system, and its payment processors.
• Google (Analytics) and Vercel (website hosting and analytics).
• Resend, which delivers emails sent from our website contact form.
• The AI provider that powers our website chat assistant, which processes chat messages to generate replies.
• Booking sites such as Expedia, Booking.com or Airbnb, if you book through them. Their own privacy policies also apply.
• Authorities or advisers when the law requires it, or to protect our rights, guests or property.

Google Analytics places cookies in your browser to distinguish visitors and sessions. You can block or delete cookies in your browser settings, or install Google's opt-out add-on at tools.google.com/dlpage/gaoptout. Our booking engine may set its own cookies to keep your reservation working while you book.

We keep reservation records for as long as tax and accounting laws require, and inquiry emails for as long as they are useful to serve you. Analytics data is kept according to each provider's retention settings. You can ask us to delete your information at any time, subject to legal record-keeping obligations.

You can ask us to tell you what personal information we hold about you, correct it, delete it, or stop using it for marketing. If you are in the European Union, the United Kingdom, California or another place that grants specific privacy rights, you may also have the right to data portability and to object to or restrict certain processing, and to complain to your local data protection authority. Email us at the address below and we will respond within 30 days.

We are based in the Turks and Caicos Islands, and our service providers may process information in the United States and other countries. By using our website or booking with us, your information may be transferred to and processed in these places, which may have different data protection laws than where you live.

Our website uses encrypted (HTTPS) connections, and we limit access to guest information to the people who need it to serve you. No method of transmission or storage is completely secure, but we work to protect your information and to use trusted providers.

Our website is not directed to children under 16, and we do not knowingly collect their personal information online. Reservations must be made by an adult.

We may update this policy from time to time. The effective date at the top shows when it last changed.