Privacy Policy

Last updated: November 9, 2026

At White Villas Resort, we collect only the information we need to plan and host your stay, keep you informed, and improve our website. We do not sell your personal information for money, and you can contact us to access, correct, or delete it, subject to our legal and accounting obligations.

1. Who We Are

This website and our villa rentals are operated by SMART STAY VR, trading as White Villas Resort (“White Villas”, “we”, “us”), 62 Long Bay Beach Road, Providenciales, Turks and Caicos Islands. White Villas is responsible for (the “controller” of) the personal information described in this policy. For any privacy question or request, contact us at info@whitevillas.net or 1-650-844-8642.

2. Information We Collect

Information you give us

• Bookings and stays: name, email, phone number, address, travel dates, villa selection, the names and number of guests in your party, arrival details, and special requests. Our Villa Rental Agreement explains the booking terms you accept.
• Payments: payment and billing details needed to process deposits, balances, extra services, damages, and the security deposit pre-authorization described in the Villa Rental Agreement. Card payments are handled by our payment providers; bank transfer details are used only to process your payment.
• Forms and requests: information you submit when you request a quote, contact us, subscribe to Last Minute Deals, download one of our guides, use our Travel Planner, or enquire about owning a villa. Some forms may save the details you type (such as your email address) before you press submit, so we can follow up on an unfinished booking or enquiry.
• Calls, text messages, and chat: calls with our team may be recorded for quality and training purposes, and you will be told at the start of a recorded call. We keep a record of text messages, emails, and website chat conversations with you.
• Extra services: details needed to arrange services you request, such as private chef, car rental, boat trips, and activities.
• Rewards and referrals: if you take part in our guest rewards or referral program, we keep your reward history. If you refer a friend, we use their name and contact details only to send them your referral invitation and related information. Please share a friend’s details only if they have agreed to it.

Information collected automatically

When you visit our website, we and our service providers automatically collect information such as your IP address, browser and device type, pages viewed, time spent on the site, and how you arrived. Some tools also record how you interact with pages (clicks, scrolling, mouse movement, and form interactions) to help us improve the site. See Cookies and Tracking below.

Do you have to provide information?

You can browse our website without giving us your contact details. To make a booking, however, we need your contact, guest, and payment information; without it we cannot confirm your reservation.

3. How We Use Your Information

• To confirm and manage your booking, process payments, and apply the terms of the Villa Rental Agreement.
• To communicate with you before, during, and after your stay, and to answer your questions.
• To arrange extra services and activities you request.
• To send you deals, news, and newsletters, where you have subscribed or where permitted by law. You can unsubscribe at any time.
• To run our guest rewards and referral program.
• To measure and improve our website, marketing, and guest experience, including showing relevant ads on other websites.
• To keep our guests, staff, and property safe, prevent fraud, and meet our legal, tax, and accounting obligations.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Legal Basis (Guests in the UK and European Union)

Where data protection laws such as the GDPR or UK GDPR apply, we process your information:

• Contract: to take and manage your booking and provide the services you request.
• Consent: for marketing emails and text messages, and for non-essential cookies where consent is required. You may withdraw consent at any time.
• Legitimate interests: to run, secure, and promote our resort, improve our website, and keep in touch with past guests, where these interests are not outweighed by your rights.
• Legal obligation: to meet tax, accounting, and other legal requirements.

5. Text Messages (SMS)

If you give us your mobile number and agree to receive text messages, we may text you about your enquiry, booking, stay, and occasional offers. Consent to receive text messages is not a condition of booking. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help. You can also contact us at info@whitevillas.net. Full program details are in our SMS Terms & Conditions.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties.

6. Cookies and Tracking

Cookies are small files stored in your browser. Our website sets cookies and similar technologies when you visit. We use them to keep the site working, understand how visitors use it, remember your forms and preferences, and show you relevant ads. The main tools we use are:

Your choices: you can block or delete cookies in your browser settings, and opt out of interest-based advertising through the Network Advertising Initiative or Digital Advertising Alliance. Some parts of the site may not work properly without cookies.

Do Not Track and Global Privacy Control: our website does not currently respond to browser “Do Not Track” or Global Privacy Control signals. You can use the opt-out options above, or contact us, to limit tracking.

7. Who We Share Information With

We do not sell or rent your personal information for money. We share it only with:

• Service providers who help us run our business, such as our CRM and email platform, phone and text messaging provider, booking and payment providers, accounting software, and website hosting. They may use your information only to provide services to us.
• Advertising partners such as Google and Meta, through the cookies described above. Under some US state laws, this may be considered “sharing” or “selling” personal information for targeted advertising. You can opt out using the links in Section 6 or by contacting us.
• Partners delivering services you request, such as Good Life Water Sports (our boating company), car rental, private chefs, and activity providers.
• Authorities or advisers when required by law, to enforce our agreements, or to protect the rights, safety, and property of our guests, staff, or resort.
• A buyer or successor if our business is sold or restructured.

8. International Transfers

Our service providers may store and process your information in the United States and other countries outside your own. Where UK or EU law applies, we rely on appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses (and the UK equivalent) or the EU-U.S. Data Privacy Framework where our providers participate in it.

9. How Long We Keep Information

• Booking, payment, and accounting records: up to 7 years after your stay, to meet tax, accounting, and legal requirements.
• Marketing contacts: until you unsubscribe, or after 3 years with no interaction with us.
• Call recordings, text messages, and chat transcripts: up to 12 months, unless needed longer to resolve a complaint or dispute.
• Website analytics and session recordings: according to each provider’s retention settings, generally no longer than 26 months.

When information is no longer needed, we delete it or make it anonymous.

10. Your Rights and Choices

You can ask us to access, correct, or delete your personal information, or to stop using it for marketing, subject to our legal and accounting obligations. You can unsubscribe from emails using the link in any email and stop text messages by replying STOP.

• UK and EU residents also have the right to restrict or object to processing (including direct marketing at any time), request data portability, withdraw consent, and complain to your local data protection authority.
• California and other US state residents may, where those laws apply, request to know, delete, or correct personal information and opt out of the “sale” or “sharing” of personal information for targeted advertising. We will not discriminate against you for using these rights.

To make a request, email info@whitevillas.net. We may need to verify your identity before responding, and we aim to respond within 30 days.

11. Children

Our website is not directed at children, and we do not knowingly collect personal information online from children under 16. Information about children travelling with a booking is provided by the adult making the reservation.

12. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Links to Other Websites

Our website links to other sites, such as Google Reviews, TripAdvisor, Instagram, Facebook, and YouTube. Their privacy practices are their own, so please review their policies.

14. Changes to This Policy

We may update this policy from time to time. The “Last updated” date above shows when it was last changed, and significant changes will be highlighted on our website. Please also see our Terms of Use.

15. Contact Us

SMART STAY VR (White Villas Resort)
62 Long Bay Beach Road
Providenciales, Turks and Caicos Islands
Phone: 1-650-844-8642
Email: info@whitevillas.net