Privacy statement
How we handle your personal data when you book a tour with us.
Last updated: 17 October 2026
Jenny Tours Suriname respects your privacy. This statement explains which personal data we process when you visit our website or book a tour, why we do so, how long we keep it and what your rights are.
Who are we?
Jenny Tours Suriname (registered with the Suriname Chamber of Commerce under the name “Tourist Tours”, no. 66507), Waterkant 5c, Paramaribo, Suriname. Questions about privacy can be sent to jennytourssuriname@gmail.com or WhatsApp +597 885 8495.
Which data do we process?
- Booking details: first name, last name, e-mail address, phone number, country, city, accommodation in Suriname, the selected tour(s), departure date, number of people, selected options and any remarks (for example dietary requirements). Please only provide what is needed for the tour.
- Payment details: the amount, payment method, payment status and a transaction reference. Payments are handled by our payment provider Buckaroo. We never receive or store your bank or credit card details.
- Sign in with Google (optional): if you choose this, Google shares your name and e-mail address with us. We never receive a password.
- Technical data: your IP address is used briefly to prevent abuse of the booking system (kept for at most 2 days).
- Contact: messages you send us by e-mail or WhatsApp.
Why do we use your data?
- To carry out your booking: reservation, payment, confirmation, pick-up and the tour itself (performance of the contract).
- To send you e-mails about your booking: receipt, confirmation, payment, changes, cancellation or refund (performance of the contract). We do not send newsletters or advertising without your consent.
- To keep our accounts (legal obligation).
- To protect the website and booking system against abuse and fraud (legitimate interest).
Who do we share data with?
We never sell your data. We work with the following service providers, who may only process your data on our behalf:
- Buckaroo (the Netherlands) — online payment processing.
- Supabase — storage of bookings in a secure database in the European Union (Frankfurt, Germany).
- Resend — sending booking e-mails (sent via servers in the EU, Ireland).
- Netlify — website hosting.
- Google — only if you choose to sign in with Google.
- Guides and local partners — only the details needed to carry out your tour (for example name, number of people and pick-up address).
Some providers are based outside the European Union. In that case appropriate safeguards apply, such as the European Commission's standard contractual clauses.
How long do we keep your data?
- Bookings and payments: as long as required by law for our accounts (at most 7 years after the tour).
- Incomplete or unpaid bookings: at most 12 months.
- Booking e-mails: at most 12 months in our sending system.
- IP addresses for abuse prevention: at most 2 days.
Cookies and storage in your browser
We do not use tracking or advertising cookies. Your browser only stores what is needed for the website to work: your cart, your language choice and (if you sign in) your session. This data stays on your own device.
Security
We take appropriate measures to protect your data, including encrypted connections (HTTPS), strict access rights per staff member, encrypted storage and logging of changes. Only staff who need it for their work can view bookings.
Your rights
You have the right to access, correct or delete your data (unless we are legally required to keep it), to object to its use, to restrict processing and to receive your data in a common format. Send your request to jennytourssuriname@gmail.com; we respond within one month. If you live in the European Union, you can also file a complaint with the data protection authority in your country.
Changes
We may update this privacy statement, for example when we start using new services. The latest version is always on this page.