Last updated: 29/12/2025
Controller: Exploring Global Ltd (trading as Exploring Antigua)
ICO Registration: ZB992371
Privacy contact: privacy@exploringantigua.com
Registered office: 21 Chimes Avenue, London, England, N13 5HT
1. Scope
This Notice explains how we collect, use, share and protect personal data when you browse our site, create an account, purchase an Experience Pass, redeem perks with Partners, receive emails or interact with our marketing.
2. The data we collect
- Account & identity: name, email, password (hashed), country/region.
- Transactions & claims: Pass purchased, timestamps, unique claim codes, selected Partner, redemption/validation data.
- Payment data: processed by Stripe; we do not store full card details.
- Device & usage: IP address, device/browser type, pages viewed, referral source, session events, approximate location.
- Cookies & pixels: analytics (e.g., Google Analytics 4), marketing (e.g., Meta Pixel), performance/security (e.g., Webflow/Cloudflare), authentication (Memberstack).
- Communications: emails, support messages, preferences (opt-ins/opt-outs).
- UGC (future): if you post reviews/comments, the content and any media you submit.
3. Sources
You (forms, checkout, claims), your devices (via cookies/pixels), our processors (payment, hosting, email), and Partners (limited claim validation data).
4. How and why we use your data (lawful bases)
- Provide the service & fulfil Passes (contract): account creation, showing Passes, generating claim codes, validating eligibility.
- Payments & fraud prevention (contract/legitimate interests/legal obligation).
- Partner fulfilment (contract): we may share minimal details (e.g., first name, Pass/claim info, eligibility) so Partners can honour a claim.
- Support & service messages (legitimate interests/contract).
- Analytics & improvement (consent for analytics cookies; otherwise legitimate interests where permitted): understand use of the site to improve performance and content.
- Marketing (consent/legitimate interests): newsletters and offers you opt into; ads measurement/retargeting where allowed.
- Legal & compliance (legal obligation): record-keeping, responding to lawful requests, tax.
5. Cookies and similar technologies
We use:
- Strictly necessary cookies (always on): security, authentication, basic site functionality.
- Analytics cookies (consent): e.g., GA4 to measure site performance.
- Marketing cookies/pixels (consent): e.g., Meta Pixel for ads personalisation and measurement.
You can manage preferences via our cookie banner and change them any time. You can also opt out of marketing emails at any time via the unsubscribe link.
6. Sharing your data
- Processors acting on our instructions:
Hosting/CMS (e.g., Webflow), CDN/security (e.g., Cloudflare), authentication/membership (Memberstack), payments (Stripe), database/ops (Airtable), automation (Zapier), email (Loop), analytics (Google), advertising (Meta) and similar providers as our stack evolves. - Partners: minimal data necessary to validate a claim or booking (e.g., claim code validity, Pass type, first name). Partners are independent controllers for the services they provide to you.
- Legal: where required to comply with law, protect users, or defend legal claims. We do not sell personal information for money.
7. International transfers
Some providers are outside the UK/EEA. Where we transfer data internationally we use appropriate safeguards (e.g., UK IDTA / EU SCCs) and require comparable protections.
8. Retention
- Transactions & invoices: 6 years (statutory).
- Account & Pass history: while active + 2 years.
- Claims/codes metadata: 2 years.
- Support messages: 2 years.
- Marketing contacts: until you unsubscribe or 24 months of inactivity.
- Cookies: per consent and tool defaults (e.g., analytics up to 13 months).
We may keep limited data longer if needed to resolve disputes, prevent fraud or meet legal obligations.
9. Your rights (UK/EEA)
You have the right to access, rectify, erase, restrict, object (including to direct marketing), and port your data, and to withdraw consent where relied upon. Contact privacy@exploringantigua.com. You can complain to the ICO (ico.org.uk).
10. Children
Our site is not directed to children under 13, and we do not knowingly collect children’s data. If you believe a child has provided data, contact us to remove it.
11. Security
We use technical and organisational measures appropriate to the risk (HTTPS, access controls, encryption in transit, least-privilege access). No system is 100% secure.
12. Links to other sites
Links to Partner or third-party sites are provided for convenience. Their privacy practices and terms apply to their services.
13. Changes to this Notice
We may update this Notice from time to time. We’ll post the new version here and update the “Last updated” date. For material changes, we may also notify you by banner or email.
14. Contact
Controller: Exploring Global Ltd (trading as Exploring Antigua)
Privacy: privacy@exploringantigua.com • Support: support@exploringantigua.com
Registered office: 21 Chimes Avenue, London, England, N13 5HT
US State Privacy Addendum (summary)
For residents of US states with consumer privacy laws (e.g., California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon), you may have rights to know/access, correct, delete, and opt out of “sale/share” or targeted advertising. We do not sell personal information for money. The use of advertising cookies (e.g., Meta Pixel) may be considered “sale/share” or “targeted advertising” under some laws. You can opt out via our cookie preferences and email unsubscribe links. To exercise rights, email privacy@exploringantigua.com. We may need to verify your request. We will not discriminate against you for exercising your rights.
