1. Who is responsible for this website
IslandTravelAtlas is the operator and data controller for information processed directly through this website. Privacy questions and rights requests may be sent to hello@islandtravelatlas.com or through the contact page.
2. Information we process
- Server and security logs: IP address, requested URL, timestamp, browser or device user agent, response status, and limited referral information. These records help operate, secure, diagnose, and protect the website.
- Consent preferences: a first-party cookie and local-storage record containing your necessary, analytics, and partner-tool choices, the consent version, and the date of your decision.
- Optional analytics data: page and interaction measurements only when analytics consent has been granted and an analytics service is enabled.
- Partner-tool data: embedded flight-search or similar third-party tools load only after marketing/partner consent. Those providers may receive device, network, and interaction information under their own policies.
- Affiliate referrals: when you intentionally click an affiliate link, the destination provider or affiliate network may receive a referral identifier and may set its own cookies after you leave IslandTravelAtlas.
- Messages: information you voluntarily include in an email or privacy request.
IslandTravelAtlas does not collect payment-card information and does not knowingly request sensitive personal information through the public website.
3. Purposes and legal bases
| Purpose | Typical data | GDPR/UK GDPR basis |
|---|---|---|
| Operate, secure, and troubleshoot the site | Server logs and technical requests | Legitimate interests in operating and protecting the service; legal obligations where applicable |
| Remember privacy choices | Consent cookie and local-storage preference | Necessary to provide the privacy control requested by the visitor and demonstrate consent choices |
| Optional audience measurement | Analytics identifiers and events | Consent |
| Optional embedded partner tools | Third-party tool requests and identifiers | Consent |
| Respond to messages and rights requests | Email address and message content | Legitimate interests, steps requested by you, and legal obligations |
You may withdraw optional consent at any time through Privacy Choices.
4. Cookies, local storage, and similar technologies
Strictly necessary preference storage is used to remember your privacy selection. Optional analytics and embedded partner technologies are disabled until the corresponding consent is granted. Details, categories, and retention periods appear in the Cookie Policy.
5. Affiliate and third-party services
IslandTravelAtlas links to travel providers and affiliate networks including Travelpayouts-supported brands. Clicking a partner link takes you to a separate website. The third party—not IslandTravelAtlas—determines what it collects, how long it keeps data, and whether it sets referral cookies. Review the provider's privacy and cookie notices before completing a booking.
The site may link to flight search, eSIM, transportation, activity, rental, insurance, luggage-storage, and connectivity providers. The available partner set changes over time; the Affiliate Disclosure explains the commercial relationship.
6. Data sharing and sale
IslandTravelAtlas does not sell personal information for money. Depending on how California law defines "sharing," allowing optional advertising, embedded partner, or cross-context technologies could constitute sharing. Those technologies are off by default, a "Do Not Sell or Share My Personal Information" control is provided, and supported Global Privacy Control signals are honored by keeping marketing sharing disabled.
Information may also be disclosed to hosting, security, technical, legal, or regulatory service providers when reasonably necessary to operate the site, protect rights, or comply with law.
7. International transfers
Some service providers and travel partners may process information outside your country, including in the United States. Where IslandTravelAtlas directly appoints a processor, appropriate contractual or legal transfer safeguards should be used as required. When you leave the site for a third-party provider, that provider's own transfer practices apply.
8. Retention
- Consent preferences: normally up to 180 days, after which the site asks again, unless you clear them sooner.
- Server security logs: generally up to 30 days unless a longer period is required to investigate abuse, protect the service, or comply with law.
- Privacy and contact requests: retained only as long as reasonably needed to respond, document compliance, and meet legal obligations.
- Third-party affiliate and booking data: controlled by the applicable network or provider under its own policy.
9. European and UK privacy rights
Where the GDPR or UK GDPR applies, you may have rights to access, correct, erase, restrict, or receive certain personal data; object to processing based on legitimate interests; withdraw consent; and complain to the relevant supervisory authority. Rights are subject to legal limits and verification. Send a request to hello@islandtravelatlas.com.
10. California privacy rights
Where the CCPA/CPRA applies, California residents may have rights to know, access, delete, and correct personal information; opt out of sale or sharing; limit certain uses of sensitive personal information; and receive equal service without unlawful discrimination for exercising privacy rights.
Use Privacy Choices, the footer's "Do Not Sell or Share My Personal Information" control, Global Privacy Control, or email hello@islandtravelatlas.com. Authorized-agent requests may require proof of authority and identity verification.
11. Children
This website is intended for general travel planning and is not directed to children under 13. IslandTravelAtlas does not knowingly collect personal information from children. Contact us if you believe a child supplied personal information.
12. Security
The website uses HTTPS, access controls, limited public data collection, and server security measures. No online service can guarantee absolute security.
13. Changes
This policy may be updated when the site, vendors, or legal requirements change. The date at the top identifies the latest version.
Google Analytics 4
IslandTravelAtlas uses Google Analytics 4 only after a visitor
grants analytics consent. The configured measurement identifier is
G-FZLYEEM477. Google Analytics may process page URLs,
page titles, referral information, browser and device details,
approximate geographic information, and interaction events such as
affiliate-link clicks or use of the Bali trip-cost calculator.
IslandTravelAtlas does not intentionally send names, email addresses, payment information, passport details, or other direct identifiers to Google Analytics. Advertising storage, advertising user-data consent, Google Signals, and advertising-personalization signals are disabled in the website configuration.
The Google tag is not downloaded and Analytics data is not sent
before analytics consent. Consent may be withdrawn at any time
through the footer's Privacy settings control. When analytics
consent is withdrawn, the site attempts to remove its first-party
_ga cookies from the current browser.
Google acts under its own terms and data-processing documentation. Information about Google's privacy practices is available from Google. Visitors may also use browser controls or Google's available opt-out tools.