Legal
Cookie policy
Four categories, a short list of vendors, and a button to change your mind.
Updated
Draft for legal review. This text has not been read by counsel yet. It says what we intend to do; the wording is not final.
What this covers
A cookie is a small file a site keeps in your browser. This page also covers the two other things that do the same job — local storage, which is where we keep your cookie choice and the booking you are in the middle of, and the invisible pixels an advertising tool loads.
Nothing beyond the Necessary category is loaded, written or sent until you accept it. If you never answer the line at the bottom of the page, nothing else ever runs.
The four categories
1. Necessary — always on
The site cannot work without these, so they carry no consent and cannot be switched off: your cookie choice itself, the dates and room you are part-way through booking, and the security limits that stop somebody abusing our contact form.
2. Preferences — with consent
Remembers a choice so you do not make it twice: the dates and guests you last searched, the two resorts you were comparing. Nothing in this category leaves your browser.
3. Performance — with consent
Tells us which pages are actually read and where a phone reader gets stuck. Google Analytics 4 counts page views, where you arrived from, and a city-level location worked out from your IP address. Microsoft Clarity records the page as a replay with all the text masked, plus heatmaps of where people tap.
4. Targeting — with consent
Advertising. The Meta pixel tells Facebook and Instagram that an ad we ran led to a page view, a search or a booking. The same events also go server-side through Meta's Conversions API, carrying the same event ID so the pair is counted once instead of twice. An email address in that server-side call is hashed before it leaves and is never sent in the clear. No guest name and no booking reference is ever sent.
The vendors
| Vendor | Category | What it does | How long it lasts |
|---|---|---|---|
| The Caribbean Guys | Necessary | Your cookie choice, and the booking in progress | Cookie choice: 12 months. Booking in progress: until you close the tab |
| The Caribbean Guys | Preferences | Last search, compared resorts | 6 months |
| Google Analytics 4 | Performance | Page views, traffic source, city-level location | Up to 24 months |
| Microsoft Clarity | Performance | Masked session replay, heatmaps | Cookie up to 12 months; recordings deleted after 30 days |
| Meta (Facebook, Instagram) | Targeting | Ad measurement: page view, search, checkout, purchase | Up to 90 days |
| Nuitée Travel Limited | Necessary | The payment form, on the payment step only | Session |
| Cloudflare | Necessary | Security and bot protection | Session to 30 days |
Each of those companies publishes its own privacy terms, and once data is with them it is governed by those terms as well as by ours. What we pass, and why, is in our privacy policy.
How we ask
A single line at the bottom of the page, with an OK button. No pop-up covering the article, no checkbox to hunt for, no second screen. We chose a line rather than a wall because a wall makes people click yes to get rid of it, which is not consent.
Your answer is stored in your own browser under tcg_consent. It is not sent to us, and it does not identify you. Until it says yes, the analytics and advertising tags are not in the page at all — they are not loaded and blocked, they are simply not there.
Changing or withdrawing your choice
Three ways, and all of them work:
- The button below. It clears the choice stored in this browser. The next page you open asks again, and nothing loads until you answer.
- Your browser. Every browser can clear site data for one site and block cookies from others. Clearing our site data resets the choice too.
- Global Privacy Control. If your browser sends a GPC signal we read it as a refusal of the Targeting category and never load the advertising tags. You do not have to tell us.
Withdrawing consent stops the collection from that moment. To have data already collected deleted, email hello@thecaribbeanguys.com — the routes are in the privacy policy.
Do Not Track
The older Do Not Track browser header was never agreed on by anybody and most sites ignore it. We treat it the same way we treat Global Privacy Control: as a refusal of the Targeting category.
Change your cookie choice
This clears the answer stored in this browser. Nothing beyond the Necessary category loads again until you answer once more.