Privacy Policy

AnchorPoint ("we", "us") operates this Wi-Fi captive portal and the voucher purchase/redemption system behind it. This policy explains what personal data we collect through the portal, why, and your rights over it under Saint Lucia's Data Protection Act, No. 11 of 2011 (as amended by Act No. 2 of 2015).

• Name, and at least one of phone number or email — collected when you redeem a Voucher on this portal. Required for every redemption.
• Voucher and session data — the voucher code, your device's network (MAC) address, redemption/expiry timestamps, and data/speed usage against your plan. Used to grant and enforce your internet access.
• Any additional fields a location has configured on the redemption form (e.g. visit purpose) — always optional unless marked required at the time you fill it in.
• Payment information, if you purchase a Voucher online — handled entirely by Stripe; we never receive or store your card details ourselves.
• Contact form submissions — if you use the Contact page, we collect what you enter (name, contact method, message).
• Cookies and analytics, only if you consent — see Section 6.

We use this data only for:

• Granting and enforcing your Wi-Fi access for the duration you paid for.
• Recovering your Voucher code by SMS or email if you lose it (your phone/email is the only way we can send it back to you).
• Occasional operational SMS/email about your voucher or service (e.g. an expiry warning) — never marketing you haven't opted into.
• Responding to a contact form submission you send us.
• Understanding aggregate usage of the portal (only with your cookie consent) to improve the service.

We do not sell your personal data.

• Stripe — payment processing for online voucher purchases.
• Twilio — SMS delivery (voucher recovery codes, expiry warnings, SMS campaigns you may be targeted by based on data you provided).
• Our email provider — email delivery for the same purposes as SMS above.
• We run our own self-hosted analytics (not a third-party analytics vendor) — see Section 6. No visitor tracking data leaves our own infrastructure.

We do not share your data with any other third party except where required by law.

We retain voucher and redemption records for as long as reasonably necessary for accounting, fraud-prevention, and dispute-resolution purposes. Contact form submissions and operational logs are retained for a limited period and then deleted on a routine schedule.

This portal uses a cookie consent banner. Strictly necessary cookies (e.g. remembering your consent choice, keeping you logged into an active Wi-Fi session) are always active — the service cannot function without them. Analytics and advertising cookies are only set if you explicitly opt in, and you can change your choice at any time via the cookie preferences control at the bottom of the portal. Our analytics are self-hosted (not Google Analytics or any other third-party tracker) — visitor data never leaves our own infrastructure.

Under the Data Protection Act, you have the right to:

• Ask what personal data we hold about you.
• Ask us to correct inaccurate data.
• Object to or ask us to stop a particular use of your data.
• Ask us to delete data we no longer have a lawful reason to keep.

To exercise any of these, use the Contact page. We may need to verify your identity (e.g. the phone/email on file for a voucher) before acting on a request.

Our infrastructure runs on servers we operate; some third-party processors listed in Section 4 (Stripe, Twilio, our email provider) may process data outside Saint Lucia as part of their own service delivery. We only use processors with their own data-protection commitments.

We may update this policy from time to time. The "Last updated" date above reflects the most recent revision.

Questions about this policy or your data? Use the Contact page.