Privacy Policy

Island Investment Company Limited
#30 Shirvan Road, Mount Pleasant, Tobago
bookings@islreal.com · infoislreal@gmail.com · +1 868 715 1901

Last updated: 5 October 2026

Who we are

Island Investment Company Limited manages and lets private villas and apartments in Tobago. This policy explains what we do with your information when you use this website, including when you book a stay or enquire through it. We are responsible for your information.

If you have any question about this policy, contact us at bookings@islreal.com or infoislreal@gmail.com, or on +1 868 715 1901.

What we collect

When you book or enquire about a stay through this website

  • Your name, email address and telephone number
  • Your country, and address details where you give them
  • The property, your dates, and the number of adults and children staying
  • Any special requests or arrangements you ask us to make
  • A record of your payments: the amount, the date and how you paid
  • The emails we send you about your booking

Card payments. Card details are never stored on this website. Where a card payment is offered online, it is taken on a secure form provided by our payment processor, and your card number does not pass through this website.

When you use this website

  • A small number of cookies that the booking form needs to work (see Cookies below).
  • If you accept, statistics about how visitors use the site, through Google Analytics.
  • Technical records our security system keeps to protect the site, such as the internet address of a device that repeatedly fails to sign in.

Why we use it, and the legal basis

What we use it for Our legal basis
Taking, confirming and managing your booking, and contacting you about it It is needed to carry out our agreement with you
Returning your damage deposit, or deducting from it after your stay It is needed to carry out our agreement with you
Keeping business, accounting and tax records We are required to by law
Keeping the website and your information secure Our legitimate interest in protecting our systems
Understanding how visitors use the website Your consent, which you can withdraw at any time
Occasional offers by email (see Offers below) Our legitimate interest in telling past guests about similar stays, which you can refuse at any time

Offers

We may occasionally email guests who have booked with us about similar stays and offers. You can tell us you do not want these when you book, and every offer email includes a simple way to stop them. We never send offers to anyone who has asked us not to, and we never pass your details to anyone else for their marketing.

Who can see it

Inside Island Investment Company Limited, your information is seen only by the staff whose work requires it, such as taking bookings, welcoming guests and keeping the accounts. Each member of staff has their own login, and access is given by role.

We do not sell your information. We share it outside the company only in these situations:

  • When you ask us to. If you ask us to arrange a cook, a private event or a similar service, we put you in touch with the supplier and you deal with them directly.
  • Service providers who run our systems for us. They act on our instructions and may not use your information for their own purposes:
    • our website and email hosting providers, where the booking system, its records and our bookings mailbox are kept;
    • Vivid Consultancy Group, who built and maintain our website;
    • SMTP2GO, which delivers the emails the website sends;
    • Google, for our reception inboxes, for website backups, and for Google Analytics if you accept it;
    • our payment processor, where a card payment is offered.
  • Airbnb. To stop a property being booked twice, the dates of your stay are shared with Airbnb through a private calendar link. No other details are shared.
  • Where the law requires it, for example to meet a legal or tax obligation.

Information held outside Trinidad and Tobago

Some of our service providers, including Google and SMTP2GO, store information in other countries, including the United States. We use established providers who protect information under their own contractual and security commitments.

How long we keep it

Information How long
Booking and payment records Seven years after your stay, to deal with any query or claim and to meet our accounting and tax obligations
Copies of the emails the website sends 30 days on the website
Website statistics, if you accepted them Up to 14 months, in Google Analytics
Your cookie choice Six months, then we ask again

After that, records are deleted or anything that identifies you is removed. We do not keep your information for marketing once you have asked us to stop.

Cookies

Cookies are small files a website stores on your device. We use two kinds, and as few as we can.

Essential cookies. These make the booking form work, for example by remembering the property and dates you have chosen while you book, and remembering your answer about website statistics. The booking cookie lasts 30 minutes; your answer is remembered for six months. The site cannot work without these, so they are always on.

Website statistics (Google Analytics). These help us count visits and see which pages are useful, so we can improve the site. They are used only if you accept them, and last up to two years.

When you first visit, we ask whether you accept website statistics. You can change your answer at any time using the Cookie settings link at the bottom of every page. If you decline, the statistics cookies are removed.

Your rights

You can ask us at any time to:

  • tell you what information we hold about you and give you a copy;
  • correct anything that is wrong;
  • delete your information, where we are not required to keep it;
  • stop using it, or limit how we use it, for a particular purpose;
  • send it to you, or to another organisation, in a common format;
  • stop sending you offers.

Write to bookings@islreal.com or infoislreal@gmail.com. We will reply within one month.

If you are not satisfied with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the data protection authority in the country where you live.

Keeping it safe

Our website uses an encrypted connection. Staff sign in with their own accounts, access is limited by role, and the accounts with the widest access use two-step sign-in. The website is backed up every day to secure storage away from the website itself.

Children

Bookings must be made by an adult. For children staying with you we record only how many there are.

Changes to this policy

If we change how we handle your information, we will update this page and the date at the top.

Scroll to Top