Privacy Policy

Who we are

Island Casa, LLC ("Island Casa") is a family company that has rented private homes on Cozumel since 1982, run from Colorado and from the island. Our registered address is 1895 Big Thompson Ave, Estes Park, CO 80517, USA. We are the data controller for the information described here. You can reach us at fun@islandcasa.com or 970-577-6818.

What we collect, and when

We only collect what a booking or a conversation needs.

• When you send an inquiry: your name, email address, phone number if you give it, your message, the dates and home you asked about, and the language you wrote in.
• When you book: your name, email address, phone number, the dates, home and number of guests, and any message you add. Your card details go directly from your browser to our payment processor; they never reach our servers. We keep only the last four digits of the card, so we can recognise the payment.
• Automatically: the page the form was sent from, your IP address and browser type (to stop abuse of the forms), and, if a booking is made, the transaction and booking reference numbers.

What we use it for

• To answer you, to make and manage your reservation, and to meet you at the door.
• To take payment and to refund it under the cancellation policy.
• To send you the emails a booking needs: confirmation, check-in details, and replies to your messages.
• To send you news from the island — only if you ask for it. If we start a newsletter it will be opt-in, every issue will have an unsubscribe link, and signing up will never be a condition of booking.
• To keep the forms from being abused (a hidden field bots fill in, and a limit on submissions per address).
• To keep the records the law requires us to keep about rentals and payments.

Where it goes

We use a small number of services to run the site, and each sees only what its job needs:

• OwnerRez (United States) — our reservation system, where every booking lives and the calendar is kept.
• Authorize.net (United States) — the card processor. It receives your card details directly from your browser and tells us whether the charge went through.
• Supabase (United States) — the database that stores inquiries and booking records.
• Resend (United States) — delivers our emails to you.
• Vercel (United States) — hosts the site and runs the code behind the forms.
• We do not sell personal information, and we do not share it with anyone else except when the law requires it.

Cookies and storage

The site sets no cookies and runs no analytics or advertising trackers. Two things are kept in your browser only: the language you chose with the EN / ES toggle, and, while you are checking out, the reference for the booking in progress so a refresh does not charge you twice. Neither leaves your device and neither identifies you. The payment form on the checkout page is loaded from Authorize.net.

How long we keep it

• Inquiries: two years after our last exchange, then deleted.
• Bookings and payment records: three years after your stay, because tax and accounting rules require it.
• Emails: as long as the booking record they belong to.

Your choices

You can ask us at any time what we hold about you, ask us to correct it, or ask us to delete it. Write to fun@islandcasa.com from the address you used with us and we will answer within 30 days. We may have to keep booking records that the law obliges us to keep, and we will tell you if that is the case. If you are in the European Union or the United Kingdom you also have the right to complain to your data protection authority; we would rather you talked to us first.

Children

The site is for adults arranging a stay. We do not knowingly collect information from anyone under 18. Guests under the minimum age for a home travel under the responsibility of the adult who books.

Security

The site is served over HTTPS. Card details are handled by the processor, not by us. Access to booking records is limited to the people who need it to look after your stay.

Changes

If we change this policy we will change the date at the top and, for anything that matters, tell guests with an upcoming stay by email.