Privacy policy

This policy explains what personal data The Pantry Curaçao collects, why, and what your rights are. The data controller is:

1. What we collect

• Order details: your name, e-mail address, WhatsApp number, villa name or address, booking reference, check-in and check-out dates, number of guests, an optional occasion and any note you leave for our team.
• Payment: handled entirely by Stripe. We receive only a payment reference, the amount and the payment status — never your card number.
• Referral: if you reached us through a partner link, a cookie remembers that partner for 30 days so we can pay them a commission. See our cookie policy.
• Technical: our hosting provider keeps standard server logs (IP address, browser, time of request) for security and troubleshooting.

2. Why we use it

• To prepare, deliver and set up your order and to reach you about it (confirmation, delivery updates, a mid-stay check-in in case you would like anything more).
• To issue invoices and keep the accounts we are legally required to keep.
• To pay referral commissions to partners.
• To prevent fraud and keep the shop secure.

We do not sell your data and we do not use it for advertising. You can stop the mid-stay e-mail for a stay with the link at the bottom of that e-mail.

3. Who sees it

• Our delivery team sees what is needed to deliver: name, villa, dates, delivery moment and your note.
• Referral partners that operate a central delivery point see the name, villa and delivery moment of orders they bring to your villa.
• Service providers that process data for us: Stripe (payments), Resend (e-mail), Neon and Vercel (hosting and database, United States). Each is bound by a data processing agreement.
• Authorities where the law requires it.

4. How long we keep it

Order and invoice data is kept for as long as tax and accounting law requires (typically seven years). The referral cookie expires after 30 days. Basket contents are stored only in your own browser.

5. Your rights

You may ask us to access, correct or delete your personal data, to restrict or object to its use, or to receive a copy of it. Write to concierge@the-pantry.vip and we will respond within 30 days. If you are in the EU/EEA you may also complain to your local data protection authority.

6. International transfers

Our systems are hosted in the United States. Where data protection law requires it, transfers are covered by standard contractual clauses or an equivalent safeguard offered by our providers.

7. Changes

We may update this policy; the date at the top shows the latest version. Material changes will be announced in the shop.