Privacy Policy

Last Updated: April 2026

1. INTRODUCTION

Experience Turks and Caicos (“we,” “us,” “our”) is the official Destination Management Organisation of the Turks and Caicos Islands, established as a statutory body under the laws of the Turks and Caicos Islands. Our registered office is located at The Regent Village, Unit H205, Grace Bay Road, Providenciales, Turks and Caicos Islands, TKCA 1ZZ.

We are committed to protecting the privacy and personal information of all individuals who interact with us, whether through our website, by telephone, by post, or by any other means. This Privacy Policy explains what personal information we collect, how we use it, with whom we may share it, and the rights you have in relation to it.

This Privacy Policy applies to all websites owned, published, or operated by Experience Turks and Caicos (collectively, the “Website”). It does not govern the privacy practices of third-party websites, platforms, or services linked to or integrated with our Website (including, but not limited to, social media platforms such as Facebook, Instagram, and YouTube, or our sponsors and commercial partners).

By using our Website, you signify your consent to the collection, use, storage, and disclosure of your personal information in accordance with this Policy. If you do not agree with this Policy, please do not use our Website.

2. LEGAL FRAMEWORK

The Turks and Caicos Islands is a British Overseas Territory and a common law jurisdiction. While the TCI does not currently have standalone comprehensive data protection legislation, the following legal instruments are relevant to the collection, use, and protection of personal information by Experience Turks and Caicos:

2.1 Turks and Caicos Islands Law

The Constitution of the Turks and Caicos Islands (2011) – Section 9(1) provides that every person has the right to respect for his or her private and family life, home, and correspondence. No person shall be subjected to search or unauthorised entry without consent. Experience Turks and Caicos interprets this right broadly to include the protection of personal data.
The Confidential Relationships Ordinance (TCI) – Imposes statutory obligations of confidentiality on persons who come into possession of confidential information arising in or brought into the Islands in a professional context. Experience Turks and Caicos treats personal information provided to us as confidential and will not disclose it except as permitted by law or with your consent.
The Electronic Transactions Ordinance (TCI) – Provides a framework for electronic transactions, including provisions relating to personal data processed in connection with electronic transactions. While implementing regulations have not yet been enacted, Experience Turks and Caicos complies with the spirit of this Ordinance.
Common Law – As a common law jurisdiction, TCI follows English court precedent (except where local statutes provide otherwise). The principles established in Coco v A N Clark (Engineers) Ltd 1969 RPC 41 and subsequent authorities provide an actionable right of breach of confidence where: (i) the information is of a confidential nature; (ii) the information was communicated in circumstances importing an obligation of confidence; and (iii) there was an unauthorised use or disclosure of the information.

2.2 International Standards
As a statutory body operating in an international tourism context, and given that many of our users and visitors originate from jurisdictions with comprehensive data protection legislation, Experience Turks and Caicos also draws on the following international frameworks:

The United Kingdom General Data Protection Regulation (UK GDPR) as supplemented by the Data Protection Act 2018 – Applied in respect of data subjects who are residents of the United Kingdom.
Regulation (EU) 2016/679 – the General Data Protection Regulation (GDPR) – Applied in respect of data subjects who are residents of the European Union or the European Economic Area.
The Caribbean Community (CARICOM) Model Data Protection Legislation – Adopted as a benchmark of regional best practice for the Caribbean.

Where the applicable law of a visitor’s home jurisdiction provides stronger protections than those described in this Policy, we will endeavour to apply the higher standard to the extent reasonably practicable.

3. CHILDREN'S PERSONAL INFORMATION

Our Website is not directed to children under the age of 16. We do not knowingly collect personal information from children under the age of 16 without the prior, verifiable consent of a parent or legal guardian. If we become aware that we have inadvertently collected personal information from a child under 16 without appropriate consent, we will take prompt steps to delete such information from our records. If you believe that we may have collected information from a child under 16, please contact us at info@visitturksandcaicos.com.

4. NON-PERSONALLY IDENTIFIABLE INFORMATION WE COLLECT

We automatically collect certain non-personally identifiable information when you visit our Website. This includes the time and date of your visit, the pages you access, the website from which you were referred, the sections of the Website you visit, and the number of times you return. This information is used in aggregate form for internal marketing, website administration, and service improvement purposes and is not used to identify individual users.

5. COOKIES

Our Website uses cookies. Cookies are small text files downloaded to your browser when you visit a website. They help identify your browser, facilitate login, and improve navigation. We use cookies to monitor website performance, track visitor patterns, and remember your preferences.

5.1 Types of Cookies We Use

Session Cookies – Used to operate our Website during your browsing session.
Preference Cookies – Used to remember your preferences and settings.
Security Cookies – Used for security and fraud prevention purposes.
Analytics Cookies – Used to collect statistical information about how visitors use our Website.

You may disable cookies by adjusting your browser settings. For further information on managing cookies, visit www.allaboutcookies.org. Please note that disabling certain cookies may limit your access to some features or pages of our Website. Non-personally identifiable information collected via cookies may be archived for future analytical use.

6. PERSONAL INFORMATION WE COLLECT

During your use of our Website or when communicating with us, you may voluntarily provide personal information, including but not limited to: your name, postal address, telephone number, email address, company name, and job function.

We also automatically collect certain technical information when you visit our Website, including your Internet Protocol (IP) address, browser type and version, operating system, geolocation data (where available), and the pages of our Website that you visit. This information is used to administer our Website, ensure its proper functioning, and review aggregate usage statistics.

We do not collect any personal information about you beyond what you expressly choose to provide, or what is collected automatically as described in this Policy.

7. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

To respond to your enquiries and correspond with you;
To improve and personalise your experience of our Website;
To deliver targeted promotional content and tourism-related information that may be of interest to you;
To enable your participation in interactive features of our Website;
To monitor, analyse, and improve Website performance and functionality;
To detect, prevent, and address technical issues, security incidents, and fraudulent activity;
To analyse usage trends and gather aggregate demographic information about our users;
To fulfil requests for tourism information, guides, publications, or media products;
To comply with our legal and regulatory obligations; and
For any other purpose with your prior consent.

We will only process your personal information where we have a lawful basis to do so. Depending on the circumstances, that basis may be your consent, the performance of a contract with you, compliance with a legal obligation, or our legitimate interests as a statutory destination management organisation (to the extent that those interests are not overridden by your rights and interests).

8. DISCLOSURE OF YOUR PERSONAL INFORMATION

We may disclose your personal information to third parties in the following circumstances:

To service providers, contractors, vendors, or partners who assist us in operating our Website or delivering our services, but only to the extent necessary for those purposes (such as email marketing platforms, web hosting providers, analytics services, and tourism data aggregators);
Where required or permitted by applicable law or legal process, including in response to a valid court order, subpoena, regulatory request, or law enforcement inquiry;
To protect our rights, property, or safety, or the rights, property, or safety of others;
In connection with a merger, acquisition, restructuring, or reorganisation, to the successor organisation;
With your prior consent; or
To sponsors, where you have not opted out of receiving advertising or promotional communications from us. In such cases, we may share limited contact details (name, address, telephone number, company, job function, and email) with a sponsor when you engage with sponsored content.

We do not sell your personal information to third parties for commercial gain.

Where personal information is disclosed to third parties located outside the Turks and Caicos Islands – including in the United Kingdom, European Union member states, the United States, Canada, or other Caribbean or Latin American countries – we will take reasonable steps to ensure that such transfers are made in accordance with applicable legal requirements and that appropriate protections are in place. You acknowledge that the data protection standards in such countries may differ from those applicable in the Turks and Caicos Islands.

9. USER-PROVIDED INFORMATION AND OTHER PARTIES

If you post information on our Website or share it with another party through our Website, you should be aware that such information may become accessible to other users or third parties. We encourage you to exercise caution before posting any personal information in publicly accessible areas of our Website.

10. LINKS TO SOCIAL MEDIA AND THIRD-PARTY WEBSITES

Our Website may include links to social media platforms and other third-party websites. These platforms and websites are not controlled by us and have their own privacy policies and terms of use. We are not responsible for the privacy practices of any third-party site, and the inclusion of a link does not constitute an endorsement of that site or its content. We strongly encourage you to review the privacy policies and terms of any third-party site you visit before providing personal information.

11. STORING AND SECURING YOUR PERSONAL INFORMATION

We take the security of your personal information seriously. We employ technical and organisational measures appropriate to the sensitivity of the information, including encryption in transit and at rest, restricted access controls, and regular security reviews. Access to your personal information is limited to those employees, agents, and representatives who require it in order to carry out their duties.

We will retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or to comply with applicable legal obligations. We will not use your personal information for automated decision-making that produces legal or similarly significant effects on you, except as described in this Policy or with your prior consent.

No method of data transmission or storage can be guaranteed to be entirely secure. Your use of our Website, and any personal information you transmit to us, is at your own risk. We accept no liability for losses arising from unauthorised access to personal information in circumstances beyond our reasonable control.

Please note that your personal information may be subject to access by foreign governments, law enforcement authorities, courts, or regulatory agencies, in accordance with the laws of the relevant jurisdiction.

12. ANALYTICS AND THIRD-PARTY SERVICES

12.1 Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, to track and analyse Website traffic. Google Analytics collects information such as how often users visit our Website, what pages they visit, and what other websites they used prior to visiting our Website. We use the information we get from Google Analytics solely to improve our Website and services.

You may opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on available at https://tools.google.com/dlpage/gaoptout. For further information on Google’s privacy practices, please visit https://policies.google.com/privacy.

12.2 Other Analytics Providers
We may use other third-party analytics or performance monitoring services from time to time. These services may have access to non-personally identifiable information for the purpose of improving our Website. Any such providers will be required to use your information only as directed by us and in a manner consistent with this Policy.

13. BEHAVIOURAL MARKETING AND REMARKETING

We may use remarketing tools to display targeted advertisements on third-party websites to users who have previously visited our Website. We and our third-party advertising partners use cookies to serve advertisements based on your past visits.

13.1 Google Ads
We may use Google Ads remarketing services provided by Google LLC. You may customise or opt out of Google Display Network advertisements by visiting Google’s Ads Settings at https://www.google.com/settings/ads.

13.2 Facebook / Meta
We may use Meta’s advertising and remarketing tools. You may learn about and adjust your interest-based advertising preferences at https://www.facebook.com/help. Meta adheres to the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioural Advertising. For further information on Meta’s data practices, please visit https://www.facebook.com/privacy/explanation.

14. YOUR RIGHTS IN RESPECT OF YOUR PERSONAL INFORMATION

Although the Turks and Caicos Islands does not currently have comprehensive data protection legislation, Experience Turks and Caicos recognises and respects the following rights in relation to personal information, consistent with international best practice and the constitutional right to privacy under Section 9(1) of the TCI Constitution:

The right to access your personal information held by us;
The right to request correction of inaccurate or incomplete personal information;
The right to request deletion or erasure of your personal information (subject to any applicable legal obligations that require us to retain it);
The right to withdraw your consent to our processing of your personal information at any time (where processing is based on consent);
The right to object to certain processing of your personal information; and
The right to request restriction of processing in certain circumstances.

To exercise any of these rights, please contact us in writing at the address or email address set out in Section 17 below. For security purposes, we may require you to verify your identity before acting on your request. We will endeavour to respond to all requests within a reasonable timeframe and, in any event, within 30 days of receipt.

We will not discriminate against you for exercising your rights in relation to your personal information.

15. UPDATING AND CORRECTING YOUR PERSONAL INFORMATION

It is important that the personal information we hold about you is accurate and current. If any of your personal information changes, or if you wish to correct, update, or delete personal information you have provided to us, please contact us at info@visitturksandcaicos.com. We may request verification of your identity before making any changes.

16. VISITORS FROM THE EUROPEAN UNION AND UNITED KINGDOM

16.1 European Union (GDPR)
Where you are a resident of the European Union or the European Economic Area, the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) may apply to our processing of your personal information. In such circumstances, Experience Turks and Caicos acts as the data controller in respect of your personal information.

In addition to the rights described in Section 14 above, EU residents have the following additional rights under the GDPR:

The right to data portability – to receive your personal information in a structured, commonly used, machine-readable format, and to request that we transmit it to another controller where technically feasible;
The right to lodge a complaint with the competent data protection supervisory authority in the EU member state in which you reside; and
The right not to be subject to solely automated decision-making, including profiling, which produces legal or similarly significant effects.

We will retain your personal information for only as long as is necessary to fulfil the purposes described in this Policy or to comply with applicable legal obligations, unless you request earlier deletion. If your personal information is subject to a litigation hold or is required for a legal claim, it will be retained until the matter is resolved.

Where we transfer your personal information to countries outside the EU/EEA that have not received an adequacy decision from the European Commission, we will implement appropriate safeguards (such as standard contractual clauses) to protect your information.

To exercise your GDPR rights, please contact us at info@visitturksandcaicos.com. You may also contact us by post at The Regent Village, Unit H205, Grace Bay Road, Providenciales, Turks and Caicos Islands, TKCA 1ZZ.

16.2 United Kingdom (UK GDPR)
Where you are a resident of the United Kingdom, the UK General Data Protection Regulation (UK GDPR) as supplemented by the Data Protection Act 2018 applies to our processing of your personal information. Your rights under the UK GDPR are substantially the same as those described in Section 16.1 above.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at icocasework@ico.org.uk or at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.

17. CONTACT US

If you have any questions, concerns, or requests relating to this Privacy Policy or our privacy practices, please contact us:

Experience Turks and Caicos
The Regent Village, Unit H205
Grace Bay Road
Providenciales, Turks and Caicos Islands, TKCA 1ZZ
Email: info@visitturksandcaicos.com
Telephone: (+1) 649-946-4970

If you contact us by email, please be aware that email transmissions are not always fully secure. Information sent by email could be viewed in transit by a third party. We accept no liability for disclosure of your information due to errors or unauthorised acts of third parties during transmission.

18. CHANGES TO THIS POLICY

We reserve the right to amend this Privacy Policy at any time. Any changes will be effective immediately upon posting of the revised Policy on our Website. Your continued use of our Website following the posting of changes constitutes your acceptance of those changes. We recommend that you review this Policy periodically to ensure you are familiar with its current version.

Where we make material changes to this Policy, we will take reasonable steps to notify you, which may include posting a prominent notice on our Website or contacting you directly.

19. GOVERNING LAW

This Privacy Policy is governed by and shall be construed in accordance with the laws of the Turks and Caicos Islands. Any disputes arising from or in connection with this Policy shall be subject to the non-exclusive jurisdiction of the courts of the Turks and Caicos Islands, save to the extent that applicable legislation of another jurisdiction applies in respect of residents of that jurisdiction.