Skip to content
Back to Home

Privacy Policy

Last updated: December 31, 2025

1. Introduction

Strait Passage ("we," "our," or "us") operates a transportation booking platform connecting travelers with ferry operators, airlines, ground transportation providers, and related travel services throughout the Caribbean region, including St. Maarten, Anguilla, St. Barts, and surrounding destinations.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, mobile applications, and booking services (collectively, the "Services"). By using our Services, you consent to the data practices described in this policy.

We are committed to protecting your privacy and handling your data in an open and transparent manner. We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for European users and the California Consumer Privacy Act (CCPA) for California residents.

2. Information We Collect

2.1 Information You Provide Directly

When you make a booking or create an account, we collect:

  • Contact Information: Full name, email address, phone number, and mailing address
  • Travel Document Information: Passport number, passport expiration date, nationality, date of birth, and gender as required by transportation providers and border authorities
  • Payment Information: Credit/debit card details, billing address, and transaction records (payment card data is processed securely by our PCI-compliant payment processor)
  • Travel Preferences: Seat preferences, accessibility requirements, dietary restrictions, and special assistance needs
  • Traveler Safety Information: Emergency contact details, TSA PreCheck or Global Entry numbers (if provided voluntarily)
  • Communication Records: Messages, inquiries, and correspondence with our customer service team

2.2 Information Collected Automatically

When you access our Services, we automatically collect:

  • Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
  • Usage Data: Pages visited, time spent on pages, links clicked, and search queries
  • Location Data: Approximate geographic location based on IP address
  • Cookies and Tracking Technologies: See our Cookie Policy for details

2.3 Information from Third Parties

We may receive information from:

  • Transportation Providers: Booking confirmations, schedule changes, and service updates from ferry operators, airlines, and ground transport companies
  • Payment Processors: Transaction verification and fraud prevention data
  • Travel Partners: Booking references when you are referred by partner organizations

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Booking Processing: To process your reservations, issue tickets, and facilitate travel arrangements with transportation providers
  • Communication: To send booking confirmations, itinerary updates, schedule changes, and travel reminders
  • Customer Support: To respond to inquiries, resolve disputes, and provide assistance before, during, and after travel
  • Payment Processing: To process payments, prevent fraud, and comply with financial regulations
  • Legal Compliance: To comply with passport and immigration requirements, customs regulations, and manifest reporting obligations
  • Safety and Security: To protect the safety of travelers and comply with transportation security requirements
  • Service Improvement: To analyze usage patterns, improve our Services, and develop new features
  • Marketing: With your consent, to send promotional offers and travel recommendations (you may opt out at any time)

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data based on:

  • Contract Performance: Processing necessary to fulfill your booking and provide requested travel services
  • Legal Obligation: Processing required to comply with applicable laws, including passenger manifest requirements and financial regulations
  • Legitimate Interests: Processing for fraud prevention, security, service improvement, and customer support, balanced against your privacy rights
  • Consent: Where required, we obtain your explicit consent for marketing communications and non-essential cookies

5. Information Sharing and Disclosure

We share your personal information only as necessary to provide our Services and as described below. We do not sell your personal information to third parties.

5.1 Transportation Providers

We share passenger information (name, travel documents, contact details, and special requirements) with ferry operators, airlines, charter companies, and ground transportation providers to fulfill your booking. These providers have their own privacy policies governing how they handle your data.

5.2 Service Providers

We engage trusted third parties to support our operations:

  • Payment Processing: PayPal processes payments in compliance with PCI-DSS standards
  • Email Communications: We use email service providers to send booking confirmations and updates
  • Analytics: We use analytics services to understand how our Services are used
  • Cloud Hosting: Our infrastructure is hosted by secure, industry-leading cloud providers

5.3 Government Authorities

We may disclose passenger information to border control, customs, immigration, and law enforcement authorities as required by law or in response to valid legal requests. Transportation providers are required to submit passenger manifests to relevant authorities for all international travel.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

6. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States and Caribbean nations where our transportation partners operate.

When we transfer data internationally, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure your data receives adequate protection regardless of where it is processed.

7. Data Retention

We retain your personal information for as long as necessary to:

  • Fulfill the purposes for which it was collected
  • Comply with legal obligations (financial records are retained for 7 years)
  • Resolve disputes and enforce our agreements
  • Provide customer support for completed bookings

Booking records are typically retained for 7 years to comply with financial and tax regulations. You may request deletion of your data subject to our legal retention obligations.

8. Data Security

We implement industry-standard security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Secure payment processing through PCI-DSS compliant providers
  • Access controls limiting employee access to personal data
  • Regular security assessments and monitoring
  • Secure cloud infrastructure with multiple redundancies

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents.

9. Your Rights

9.1 Rights Under GDPR (European Users)

If you are in the European Economic Area, you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate or incomplete data
  • Erasure: Request deletion of your data (subject to legal retention requirements)
  • Restriction: Request limitation of processing in certain circumstances
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent for processing based on consent

9.2 Rights Under CCPA (California Residents)

California residents have the right to:

  • Know what personal information we collect and how it is used
  • Request deletion of personal information
  • Opt out of the sale of personal information (we do not sell personal information)
  • Non-discrimination for exercising privacy rights

9.3 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@straitpassage.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

10. Children's Privacy

Our Services are not directed to children under 16. We do not knowingly collect personal information from children under 16 without parental consent. When booking travel for minors, the booking adult is responsible for providing the minor's information and must have appropriate authority to do so.

If you believe we have collected information from a child without parental consent, please contact us immediately at privacy@straitpassage.com.

11. Third-Party Links

Our Services may contain links to third-party websites, including transportation provider sites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our Services after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Strait Passage

Data Protection Inquiries

Email: privacy@straitpassage.com

General Inquiries: hello@straitpassage.com

Phone: (305) 339-4339

For complaints regarding our data handling, you may also contact your local data protection authority.