At Barefoot Cay Resort, we value your trust and are committed to safeguarding your personal information. This Privacy Policy complies with the Honduran Ley de Protección de Datos Personales and explains how we collect, use, store, and protect the data you provide when using our website or services. 

By accessing our site or submitting your information, you agree to the practices described below.

1. Personal Data We Collect 

We collect only the information necessary for the purposes described, including: 

• Identifying information: name, email, phone number, address, and nationality. 
• Reservation information: stay dates, preferences, and guest profile notes. 
• Payment information: credit card details entered through our secure booking engine. 
• Website data: IP address, browser type, device information, and cookies. 
• Communications: emails, online forms, and messages you send to us. 

2. Payment & Credit Card Information 

We collect credit card information through our secure booking engine. 
All payment details are encrypted and securely stored within our Property Management System, Opera Cloud, which follows industry-standard security practices and complies with global data-protection and payment-security requirements. 

Barefoot Cay Resort does not store or access full credit card numbers locally, and payment data is accessed only as required to process reservations. 

3. Purpose of Data Processing 

In accordance with Honduran law, personal data is used exclusively for specific and legitimate purposes, including: 

• Processing reservations, payments, and guest services 
• Responding to inquiries and providing support 
• Personalizing and improving guest experiences 
• Sending booking confirmations, updates, or promotional information (only with prior consent) 
• Complying with applicable legal or financial obligations 
• Internal administrative and operational purposes 

Your data will never be used for purposes not previously disclosed without your authorization. 

4. Legal Basis & Consent 

By voluntarily providing your information, you grant express consent for the processing of your data as described. 
You may withdraw consent at any time by contacting us at [insert email], without affecting the legality of previous processing. 

5. Protection of Your Information 

We apply the security measures required by Honduran regulations to protect your data from unauthorized access, loss, or misuse. These include: 

• Encrypted communication through HTTPS 
• Secure, encrypted credit-card handling via Opera Cloud 
• Restricted internal access to personal data 
• Secure third-party booking and payment systems 
• Routine system monitoring and security audits 

6. Data Sharing & Transfers 

We do not sell or commercialize personal information. 

We may share your data only with: 

• Trusted service providers (e.g., payment processors, booking engines, PMS providers) who support our operations 
• Legal or regulatory authorities when required by law 

All third-party partners are required to maintain confidentiality and follow data-protection standards consistent with Honduran law. 

International transfers may occur only when necessary (e.g., for guests residing abroad) and are handled with appropriate protections. 

7. Cookies & Tracking Technologies 

We use cookies to improve website performance, remember preferences, and analyze browsing behavior. 

You may modify your browser settings to manage or disable cookies at any time. 

8. Your Data Rights (ARCO Rights) 

Under Honduran law, you have the right to: 

• Access the personal data we hold 
• Rectify incorrect or incomplete information 
• Cancel your data when no longer necessary 
• Oppose certain types of processing 

To exercise any of these rights, contact us at: 

[Your Email Address] 
Include your name, contact details, and the nature of your request. 
We will respond within the legally established timeframe. 

9. Data Retention 

We retain personal information only for as long as needed to fulfill the purposes described, comply with legal obligations, or support future reservations. 

10. Third-Party Links 

Our website may include links to external websites. We are not responsible for their content or privacy practices. 
We encourage reviewing their policies before providing personal information. 

11. Children’s Privacy 

Our services are not directed to children under 16 years old. 
We do not knowingly collect personal data from minors without parental consent. 
If such data is identified, it will be deleted promptly. 

12. Updates to This Policy 

We may update this Privacy Policy periodically to reflect legal or operational changes. Any updates will be posted on this page with the revised effective date.