Privacy Policy

Effective 29 July 2026 · Last updated 19 August 2026

Who we are

Spinnaker Point is a privately owned three-bedroom holiday rental in the Great Abaco Club, Marsh Harbour, Abaco, The Bahamas. This website is operated by the owners of the property, who are responsible for the information described in this policy.

For anything to do with privacy, write to info@spinnakerpointbnb.com. A real person reads it.

What this site collects

Server logs

This website is hosted on shared hosting, and the web server keeps standard access logs. Every website does this; it is how hosting works. A log entry records your IP address, the date and time, the page requested, your browser and operating system, and the page that referred you, if any.

We use these logs only to keep the site working and secure — diagnosing errors, and identifying abuse such as automated scanning. We do not use them to build a profile of you, and we do not try to identify individual visitors from them. Retention is controlled by our hosting provider under its own schedule, typically a matter of weeks.

Cookies

This site sets two cookies, and both belong to Google Analytics. They are first-party cookies, stored under this website's own name:

• _ga — tells one browser apart from another, so that someone coming back a second time is not counted as a second person. It lasts two years.
• _ga_0DGNRYD6ME — holds the state of a single visit for this site's analytics property. It also lasts two years.

Neither one carries your name, your email address, or anything you typed. Apart from these two, the site uses no local storage, no session storage, no device fingerprinting, and no advertising cookies of any kind.

There is no cookie banner on this site, and that is a choice rather than an oversight. We would rather say so plainly than let you assume the question never came up. Analytics loads for everyone who opens a page. If you would rather it did not, the opt-out described below takes effect straight away.

Analytics and advertising

This site uses Google Analytics 4, a measurement service provided by Google. It tells us how many people visit, which pages they actually read, roughly where in the world they are, and which sites they arrived from. We use it for one purpose: to work out what is useful to someone planning a trip to Abaco, so that we can make the site better at it.

What Google receives when a page loads: the address and title of the page, the page that referred you, your browser and device type, your screen size, your language, and your IP address. Google uses the IP address to estimate a location — in practice a country or region, not a street — and states that it does not log or store IP addresses in Analytics. We never see your IP address in Analytics, and we cannot identify you from anything it shows us. We see counts and trends, not people.

Google processes this on our behalf as our measurement provider. You can read how Google uses information from sites that use its services, and Google's own account of what it does with it in the Google Business Data Responsibility terms.

There is still no advertising here. We run no ads, we do not use remarketing or personalised advertising, and there are no advertising pixels on this site. The advertising features of our Analytics property — Google Signals and ads personalisation — are switched off, so nothing measured here is fed into advertising.

How to opt out. Any of these stops the measurement, and none of them needs our cooperation:

• Install Google's own Google Analytics Opt-out Browser Add-on, which blocks it on every site you visit rather than only this one.
• Use a browser or extension that blocks third-party scripts. Safari, Firefox and most content blockers already stop a good deal of this by default.
• Block or clear cookies for this site in your browser settings.

Our previous website used Google Analytics too, but alongside online advertising and third-party advertising cookies. The advertising has not come back. Analytics is all that has.

If you write to us

The contact form on our Connect page collects exactly four things: your first name, your last name, your email address, and whatever you choose to write in the message box. There are no hidden fields collecting anything else. We use all of it for one purpose — to read your message and reply to you.

Pressing send posts the form to Web3Forms, a form-delivery service operated by Web3Creative, a business registered in Kerala, India. Web3Forms forwards the message to our email address and holds a copy on its servers for a limited period — 30 days on the plan we use — so that a message is not lost if the email goes astray. It receives what you typed along with your IP address, as an unavoidable part of delivering it, and it acts as our processor: it handles the message on our instructions and for no purpose of its own. Its handling is governed by the Web3Forms Privacy Policy.

This happens only when you press send. Reading the Connect page sends Web3Forms nothing at all — no request is made, and nothing you have half-typed into the form ever leaves your browser unless you submit it.

If you would rather not use the form, the Connect page also lists our email address directly, along with Airbnb and Instagram. Email reaches us without passing through Web3Forms.

However you reach us — the form, email, Airbnb, or Instagram — we keep that correspondence so that we can answer you and, if you become a guest, arrange your stay. We delete enquiries once they are clearly finished with. We never add anyone to a mailing list — we do not have one — and we do not pass your details to anyone else.

What leaves this site, and when

Reading a page: Google Analytics, and nothing else

Opening any page on this site contacts one third party: Google, for the analytics described above. Every other file your browser needs — the text, the photographs, the stylesheet, and the two typefaces the site is set in — comes from this website's own server.

That count has moved in both directions, and it is worth being straight about rather than quietly restating. Until 31 July 2026 the two typefaces, Playfair Display and Lato, were served by Google Fonts, so every page load disclosed your IP address and browser details to Google. We began hosting those font files ourselves, and for a few weeks this page could honestly say that reading it contacted nobody at all. Adding Google Analytics on 19 August 2026 ended that, and we have rewritten this page to say so rather than leave the older, better-sounding claim standing.

The contact form, only if you use it

Analytics fires when a page loads, for everyone, whatever you go on to do. The contact form is the opposite: it fires only because you chose to send a message. Reading the Connect page and then leaving sends Web3Forms nothing at all, and nothing you type into the form — a half-written message, an email address you thought better of — ever leaves your browser unless you press send.

The distinction is worth holding on to. One request records that a page was read; the other carries something you deliberately wrote to us.

Who else receives information

Four parties, and nobody beyond them. We do not sell personal information, we do not share it for advertising, and we do not disclose it to third parties for their own purposes. We may disclose information if the law genuinely requires it.

Here they are, and what each one gets:

• Our hosting provider processes server logs on our behalf, as part of providing the hosting.
• Google receives the analytics information described above. Unlike the other three, this happens on every page load, without you doing anything.
• Web3Forms processes contact form messages on our behalf, as described above — but only for messages you actually send.
• Booking does not happen here. The "Book your stay" and "View on Airbnb" buttons take you to Airbnb. Everything after that click — your enquiry, your booking, your payment details, your reviews — is handled by Airbnb under the Airbnb Privacy Policy, not by us. This website never takes a payment and never sees your card details.

Links to other websites

We link out to Airbnb and to our Instagram account. These are ordinary links, not embedded widgets — nothing is requested from those services until you actually click. Once you do, you are on their website and their privacy policy applies, not ours.

Where your information is handled

The property is in The Bahamas and our hosting is in the United States. Google, which provides the analytics, is a company registered in the United States and processes data on servers in a number of countries. If you send us a message through the contact form, it is processed by Web3Forms — a business registered in India, storing submissions on servers in the United States.

So if you are visiting from the United Kingdom, the European Economic Area, or elsewhere, the limited information described above is handled outside your own country, under data protection rules that may differ from yours. If that matters to you, there are two things you can do that take effect immediately: the analytics opt-out above stops the measurement altogether, and you can email us directly at info@spinnakerpointbnb.com instead of using the form — your message then goes only to our mailbox.

Your rights

Depending on where you live, you may have the right to:

• ask what personal information we hold about you, and get a copy;
• have inaccurate information corrected;
• have information deleted;
• object to, or ask us to restrict, how we use it;
• ask us to transfer it to you or someone else in a portable form;
• withdraw consent at any time, where we relied on consent.

To exercise any of these, email info@spinnakerpointbnb.com. We will not charge you and we will not treat you differently for asking. In practice we hold very little: unless you have written to us, we are unlikely to hold anything about you beyond server log entries that we cannot connect to a name.

UK and EEA visitors

Where the UK GDPR or EU GDPR applies, our lawful basis is legitimate interests — keeping the site secure and operational, understanding how it is used, and replying to correspondence you begin. Where you are asking about a stay, processing may also be necessary to take steps at your request before entering into a contract.

We should be straightforward with you about the analytics. This site does not ask for your consent before Google Analytics loads. If you are in the UK or the EEA and would rather it did not run, the opt-out described above takes effect immediately and applies whether or not we ever hear from you. You can also write to us and object to this processing, and we will act on it.

You have the right to complain to your data protection authority — in the UK, the Information Commissioner's Office.

California residents

In the past twelve months we have collected these categories of personal information as defined by the CCPA: internet or network activity, in the form of server logs and website analytics; identifiers such as an IP address, a cookie identifier, your name and your email address; approximate geolocation, estimated by Google from your IP address and no more precise than a general area; and the contents of your communications where you have written to us, whether through the contact form or by email. It is collected to keep the site secure and working, to understand how it is used, and to answer you. Two service providers receive any of it: Google, for the analytics, and Web3Forms, for messages sent through the contact form.

We have not sold or shared personal information, and we do not do so. "Sharing" under California law means handing it over for cross-context behavioural advertising — we run no advertising, and the advertising features of our Analytics property are switched off, so nothing measured here is used that way. We do not use or disclose sensitive personal information for purposes requiring a right to limit. You may exercise your rights to know, delete, and correct using the email address above.

Children

This site is aimed at adults booking a holiday rental. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, email us and we will delete it.

Keeping information safe

The site is served over HTTPS, so traffic between your browser and the server is encrypted. Access to our email and hosting accounts is restricted to the owners. We collect so little that there is very little to lose — which is the most effective protection available. That said, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Changes to this policy

If we change how this site handles information — adding or removing a service that receives it, changing who delivers the contact form, embedding a map or a video — we will update this page and change the "last updated" date at the top. Material changes will be described here rather than made quietly.

The most recent material change was on 19 August 2026, when Google Analytics was added. Before that date this site ran no analytics and set no cookies, and this page said so.

Contact

Questions, requests, or concerns about this policy: info@spinnakerpointbnb.com.