Privacy Policy

Last updated

This Privacy Policy was last updated on October 7, 2026.

Our commitment

MAPL Tours respects your privacy. This Policy explains what information we collect, why we collect it, who we share it with, and the choices you have. If you have any questions after reading it, email contact@mapltours.com.

Information we collect

• Account information, your name, email address, phone number, and country when you create an account or complete a booking.
• Booking information, the experiences or transfers you purchase, travel dates, traveler counts, pickup and drop-off details, and any special requests you send us.
• Payment information, handled directly by Stripe. We never see or store your full card number; we only receive a token plus the last four digits and card brand for receipt display.
• Usage data, pages you view, experiences you save, and basic device information (browser, OS, screen size) collected through analytics cookies.
• How you found us, the website, ad or email link that first and most recently brought you here, and the general kind of browser you booked with (for example, Chrome on Linux, never its version or your device), which we save with your booking.
• Requests from AI assistants, the trip details an assistant sends through our connector (mapltours.com/mcp) when you ask it to price or book a ride or tour: the hotel or tour, dates, flight numbers and party size. We use them only to answer that request and prepare your booking link. When you ask your assistant to pay for a ride for you, it also sends your name, email and phone and a one-time payment token from your wallet, and we keep them with that booking like any other; Stripe processes the payment, and your card number never reaches us. Our logs record which tool was used, never what you asked, and nothing is kept unless you book.
• Communication, anything you send us through the contact form or email.
• Photographs and video, images and recordings captured during experiences and transfers, which may include you. See the photography section of our Terms of Service for how these are used.

How we use your information

• Process and confirm your bookings, including sharing the relevant details with the driver or operator delivering your trip.
• Send transactional emails (booking confirmations, transfer details, contact form replies).
• Send trip tips by email, about twice a month, only if you tick the trip tips box when you ask for your code (it starts unticked for everyone) or you tap the link asking for them. We record that choice in HubSpot, send the tips through Resend, and every tips email has a one-tap unsubscribe.
• Record in HubSpot that you are a customer when you book: the booking type (tour or transfer), when you booked and your total. If you get trip tips, we also let Resend know you booked, and the tips change: instead of the general ones, we send a few about your own trip, using your first name and your booking’s dates, flights, hotel or pickup place, party size and tours, until the trip ends.
• Provide customer support and respond to your questions.
• Improve the platform, understand which experiences travelers love, fix bugs, and tune the user experience.
• Detect, prevent, and address fraud or abuse on the platform.
• Promote MAPL Tours Jamaica, including using photographs, video and reviews from experiences in our marketing.
• Comply with applicable law, including tax and accounting obligations.

Who we share data with

We share the minimum information necessary with trusted third parties that help us operate:

• Our partner drivers and operators, receive your name, traveler count, date, contact phone, and any special requests so they can host you.
• Stripe, payment processing.
• Resend, transactional email delivery.
• Supabase, secure database hosting (Frankfurt region).
• Google, a private Google Calendar our operations team uses to schedule your trip. When a booking is paid, we add it there with your name, phone number, hotel or pickup place, party size, trip date and times, and, for airport transfers, your flight numbers.
• Google Analytics & Hotjar, anonymised usage analytics. We honour your browser’s Do Not Track and Global Privacy Control signals: with either enabled, none of these analytics tools load at all.

We do not sell your personal information to anyone.

Advertising with Meta (Facebook and Instagram)

We advertise on Facebook and Instagram, and we use Meta’s tools to see which of those ads bring people to us:

• The Meta pixel on our site records the pages and tours you view, what you add to your trip, and when you start a checkout or complete a booking.
• Meta’s Conversions API. When you book with us or ask for a discount code, our server tells Meta about it directly, with your email address in hashed form (scrambled so it cannot be read) and Meta’s own cookies from your browser. For a booking we add the amount paid; for a discount code request, your browser details and IP address.
• Customer lists. We may share the email address, phone number, name and country of people who have booked with us, in hashed form, so Meta can match them to accounts. We use these lists to offer our tours to past guests, to stop showing ads to people who have already booked, and to find new people with similar interests. Meta uses the hashed details only to match and discards what does not match.

If your browser sends Do Not Track or Global Privacy Control, the Meta pixel does not load and we do not send your details to Meta. To be left out of customer lists, email contact@mapltours.com and we will remove you. You can also control the ads you see in your Facebook and Instagram ad preferences.

Cookies

We use cookies and similar technologies to keep you logged in, remember your itinerary cart, and measure how the site is performing. You can disable cookies in your browser settings, but some parts of the site (checkout, saved trips) may not work properly without them.

Data retention

We keep booking records for seven years to satisfy tax and accounting obligations. Account information is retained for as long as your account is active. You can request deletion of your account and personal data at any time by emailing contact@mapltours.com, we will process the request within 48 hours.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to certain uses of it. To exercise any of these rights, email contact@mapltours.com with the words “Privacy request” in the subject line.

Security

We use HTTPS site-wide, encrypt sensitive data at rest, and limit who on our team can access your information. No system is perfectly secure, if you believe your account has been compromised, contact us immediately and we will help you secure it.

Children

MAPL Tours is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with their information, contact us and we will delete it.

Changes

When we make material changes to this Policy, we will post the new version here with an updated “Last updated” date. For substantial changes, we may also notify you by email.