Privacy Policy

KATABLANCA Villa is a privately operated, six-bedroom beachfront vacation rental property located on Runaway Bay, Saint Ann Parish, Jamaica. For the purposes of the DPA, KATABLANCA Villa is the data controller responsible for personal data collected through this website and our booking process.

Contact: info@katablanca.com

Depending on how you interact with us, we may collect:

• Identity and contact data: full name, email address, phone number, mailing address, and (where required for check-in or immigration purposes) passport/ID details.
• Booking data: travel dates, number of guests, guest names, special requests, arrival/departure flight details.
• Payment data: billing name and address, and limited payment details necessary to process deposits and balances. Full card numbers are processed by our payment processor and are not stored on our servers (see Section 5).
• Communications: the content of emails, inquiry forms, WhatsApp messages, or other correspondence you send us.
• Technical data: IP address, browser type, device information, and website usage data collected automatically via cookies or similar technologies when you visit our website.
• Special category data: we do not knowingly collect sensitive personal data (e.g., health information) unless you volunteer it for example, to inform us of a dietary requirement, allergy, or accessibility need for your stay. Where you do so, we treat it as sensitive information under the DPA and use it only for the purpose you provided it.

We process personal data for the following purposes, each grounded in a lawful basis under the DPA (consent, performance of a contract, or our legitimate interests in operating the Villa):

• To respond to inquiries and process bookings, deposits, and payments.
• To communicate with you before, during, and after your stay (confirmations, arrival instructions, invoices, guest-services communication).
• To arrange staff, transportation, or vendor services you request on our behalf.
• To meet legal and regulatory obligations, including tax, immigration, and law-enforcement requests where applicable.
• To maintain the security of the Villa and its guests (e.g., gate access lists, staff coordination).
• To improve our website and services, and, where you have consented, to send you promotional offers or newsletters.

We do not use your data for automated decision-making that produces legal or similarly significant effects on you.

Our website may use cookies or similar technologies to remember preferences and understand how visitors use the site (e.g., analytics tools). You can control or disable cookies through your browser settings. Disabling cookies may affect certain website functionality.

We do not sell personal data. We may share personal data with:

• Payment processors and booking platforms (e.g., the platform through which you booked, if applicable) strictly to process payments and confirm reservations.
• Villa staff and trusted vendors (housekeeping, chef, security, airport transfer providers) on a need-to-know basis to deliver services you have requested.
• Professional advisors (accountants, insurers, legal counsel) where necessary for our legitimate business operations.
• Government or regulatory authorities, including the Office of the Information Commissioner, immigration, or tax authorities, where required by Jamaican law.

Any third party who processes personal data on our behalf is required to protect it in a manner consistent with the DPA.

Because guests booking KATABLANCA Villa are frequently located outside Jamaica, and because some of our service providers (e.g., payment processors, email or booking software) may store data outside Jamaica, your personal data may be transferred to and processed in other countries. Where we make such transfers, we take steps consistent with the DPA to ensure the receiving party affords an adequate standard of protection for your data.

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including to satisfy legal, accounting, or reporting requirements (e.g., Jamaican tax records). Booking and guest correspondence are typically retained for a limited period after your stay, after which they are securely deleted or anonymized, unless a longer period is required by law.

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, consistent with the DPA’s data protection standards. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

In the event of a data breach affecting your personal data, we will notify the Office of the Information Commissioner and affected individuals as required under the DPA.

Under the Data Protection Act, 2020, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to our legal retention obligations.
• Withdraw consent at any time, where processing is based on consent (e.g., marketing emails).
• Object to or restrict certain processing of your data.
• Lodge a complaint with Jamaica’s Office of the Information Commissioner if you believe your data has been mishandled.

To exercise any of these rights, contact us at info@katablanca.com. We will respond within a reasonable time and in accordance with the DPA.

Our website and booking services are not directed at children, and we do not knowingly collect personal data from children without parental or guardian consent. Where a child’s information is provided as part of a family booking (e.g., a minor guest’s name), it is provided and consented to by the accompanying parent or guardian.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page indicates when it was last revised. We encourage you to review this Policy periodically.

If you have questions about this Privacy Policy or how we handle your personal data, please contact:

You may also contact Jamaica’s Office of the Information Commissioner (OIC) with any concerns regarding the handling of your personal data.