Skip to content

Privacy Policy

Last updated: September 25, 2026

Aruba Playbook (“we”, “us”, “our”) is an independently operated Aruba travel guide, run by a small local team. This policy explains what we collect, who receives it, how long we keep it and the choices you have. We ask for as little as the job needs. No card details are ever entered on this site: when a deposit is due, it is paid on a Revolut payment page, and the balance is settled with the crew on the terms each direct page publishes. If you join our email list, your address sits with our email provider (Kit) and is used only for the travel content you signed up for; every email carries a one-click unsubscribe that removes you from the list.

1. What each form collects

  • A booking request on a direct page: your name, email address, an optional WhatsApp number, where you are staying (it sets the meeting point), your date, time and party size, how you prefer to settle the balance, and the one practical answer that offer asks for. For parasailing that answer is the ages of the flyers and roughly the combined weight per flight, because the crew works to a published weight limit per flight; for the sunrise hike it is the fitness level of the group; for the wellness sessions it is any injury the instructor should know about. We do not ask for a date of birth, a passport number or a card number.
  • A concierge or planning request: your name, email address, an optional phone number, your travel dates and where you are staying or which ship you are on, party size and who is travelling, the occasion, any allergies or access needs you choose to tell us, and your pace and budget preference. Allergy and access notes are used only to brief the places you will actually visit.
  • The contact form and the inquiry form on our services page: your name, email address, optional travel dates and your message. Both are delivered to info@arubaplaybook.com through our form-delivery provider (Formspree for the contact form), used to answer you, and added to no list.
  • The free planner and the trip emailer: your email address and the answers you picked. The plan is rebuilt on our server from those answers and sent once. Nothing is stored by us and you are not added to any list.
  • Email you send us yourself: we receive it through your own mail client and we simply reply.
  • Newsletter signup: if you choose our email newsletter, we collect the email address you enter and store it with Kit (kit.com), our email service provider, to send Aruba travel advice, island news, activity ideas and offers, as described when you sign up. The legal basis is your consent. The signup form explains these emails and asks you to choose them using an unchecked box. Kit handles the email confirmation and subscription status. Submitting the form and confirming your email are separate steps. You can withdraw consent using the unsubscribe link in any marketing email, without logging in or paying anything. This stops future marketing; it does not undo earlier processing. You can browse our guides without subscribing. The form records the signup source, page category, consent wording, consent-copy version and submission time with Kit. Your email address is never included in our signup analytics events.
  • Automatically collected data: standard log information (IP address, browser, device, referring URL, pages visited) collected via Google Analytics 4 and Microsoft Clarity for traffic analysis and site improvements. Clarity may record anonymized session replays of how you move through the site. What you type into our forms is masked before a recording is stored, so your name, email, phone number, hotel and message are not readable in a replay.
  • Your trip details stay in your browser: the dates, party, children's ages, rooms and saved places you enter for My Trip are stored in your own browser's local storage. They are not part of any account and they are not included in a trip link you share, which carries only the places you saved. The only time any of it reaches us is when you ask us to email the list to you: the places you saved and the address you type are sent once to build that email, and neither is stored by us afterwards. We ask for an age only where a supplier needs one, such as a hotel pricing a child or a trip with a published minimum age. Clear them any time with "Clear trip details" on My Trip, or by clearing your browser storage.
  • Cookies: we use first-party cookies to remember your preferences and third-party cookies from our analytics and affiliate partners. You can switch them on or off at any time in Your cookie choices further down this page, or in your browser settings.
  • Consent by region: if you visit from the EEA, the UK, or Switzerland, analytics and affiliate tracking stay off until you accept our cookie banner, and stay off if you decline. In other regions these run by default so we can see which guides help; you can turn them off at any time in Your cookie choices below, in your browser settings, or by emailing us.

2. How we use your information

  • To arrange the booking you asked for with the crew who runs it, and to reply to you about it.
  • To send your confirmation, your deposit link, your voucher and any change to the plan.
  • To build and send the plan, itinerary or answer you asked for.
  • To keep our own record of a booking for accounting and for a later refund or dispute.
  • To measure traffic, improve the site, and detect abuse.
  • To comply with legal obligations.

We do not sell your personal data. Our newsletter is strictly opt-in: we only email addresses that were submitted through a signup form on this site, and never buy, rent, or share lists.

3. Third-party services

We share limited data with the following providers strictly to operate the site and the bookings:

  • Supabase (the database that holds booking and concierge records)
  • Resend (delivery of confirmations, deposit links, vouchers and our own ops notifications)
  • Revolut (the payment page where a deposit is paid; card details are entered there, never here)
  • Formspree (delivery of the contact form to info@arubaplaybook.com)
  • Kit (email newsletter delivery, only if you subscribe)
  • Welcome Pickups (airport transfers, and only the details you type into that widget on our booking desk)
  • Google Analytics 4 (traffic analytics)
  • Microsoft Clarity (heatmaps and session analytics, with form fields masked)
  • Vercel (hosting)

Analytics never receives your name, email address, phone number or the answers you typed into a form. Our session recordings mask the contents of form fields, and we put no personal detail into an address on this site or into a trip link you share. There is one exception, and only if you fill those fields in: the airport-transfer widget on our booking desk carries the name and email you type there into the Welcome Pickups booking page so you do not have to retype them, which means they travel in that outbound address. Leave both fields empty and only the route, date, time and party size are carried over.

When you click a partner link (Viator, Agoda, Travelpayouts, DiscoverCars, Welcome Pickups), you leave our site and become subject to that provider’s privacy policy. Those bookings are completed on their site, not ours, and we never see what you type there. For Welcome Pickups the details described above travel with you so their booking page opens ready to finish.

4. Direct bookings: who sees your details, and when

When you reserve one of the offers we arrange ourselves, your request is stored in our booking record and handled in two stages, so the crew only ever has what it needs at that moment.

  • Before the deposit is paid: the crew hears the activity, the date, the time and the party size. No name, no email, no phone number.
  • Once the deposit is paid: the crew is told the booking is confirmed, plus your first name and the practical detail the activity needs, such as ages or fitness level.
  • Once the booking locks, 48 hours before the activity: the crew receives your full name, email address, WhatsApp number if you gave one, and where you are staying, so they can reach you on the day and settle the balance with you.

The deposit is paid on a Revolut payment page. We see that the payment arrived and for which booking; we never see or store your card details. The balance is paid to the crew on the day, or by Zelle the day before for the Eagle Beach wellness sessions and the sunrise hike. Zelle needs a bank account in the United States on both sides; if you do not have one, say so in the form and you pay the crew on arrival instead.

If you would rather your details did not reach a crew at all, do not send the form: email info@arubaplaybook.com and we will talk the options through first.

5. Your rights

If you are in the EU, UK, or another jurisdiction with data protection laws (GDPR, UK GDPR, CCPA), you have the right to access, correct, export, or delete your personal data, and to object to processing. To exercise any of these rights, email info@arubaplaybook.com and we will respond within 30 days.

6. How long we keep things

  • Booking and concierge records: kept for seven years after the trip, because a deposit was paid and our accounts have to show it. Ask us and we will remove everything that is not needed for that record.
  • Requests that never became a booking: removed within twelve months.
  • Emails you send us: kept as long as needed to answer, then archived.
  • Newsletter address: used for marketing until you unsubscribe. Kit may retain an unsubscribe or suppression record so that you are not added back accidentally. Contact us to request access, correction or deletion of your subscriber information.
  • Email invitation preferences: your browser remembers that an invitation appeared, that you dismissed it (30 days), or that you submitted the signup (30 days). A non-personal marker on a newsletter link can suppress invitations for up to a year. These preferences contain no email address. Older permanent dismissals are still respected.
  • Analytics: Google Analytics defaults, currently 14 months.

7. Children

This site is not directed to children under 13 and we do not knowingly collect data from them. An adult books for the family: where an activity has a minimum age or a weight limit, the form asks the adult booking for the ages, never the child, and that answer is used only to check eligibility and to brief the crew. If you believe a child has provided us data, contact us and we will delete it.

8. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page with a new “last updated” date.

9. Contact

Questions about your data, or want a copy or a deletion? Email info@arubaplaybook.com.

See also our Terms of Service and Affiliate Disclosure.