Privacy Policy

Updated August 6, 2026

We have revised this policy to provide clear and plain language. Key sections are highlighted for ease of understanding. If you have questions, contact our Privacy Officer at [email protected].
 
Welcome to Bermuda Tourism Authority located at https://www.gotobermuda.com/ (the “Website”). This Website is maintained and operated by the Bermuda Tourism Authority (“BTA”, “we”, “our” or “us”).
 
1. Accountability & Privacy Officer

Bermuda Tourism Authority is responsible for the personal information under its control and has implemented policies and procedures designed to comply with the Bermuda Personal Information Protection Act 2016 (PIPA). BTA has designated a Privacy Officer responsible for overseeing compliance with applicable privacy obligations and responding to privacy enquiries. If you have questions, contact our Privacy Officer at [email protected].
 
The Privacy Policy below discloses our practices regarding information collection and usage solely for the Website and the services provided on the Website. This Privacy Policy does not apply to any other website or service provided by us, our partners, or clients, unless it appears on such website or service.
 
By using the Website, you acknowledge that you have read this Privacy Policy. Where required under applicable law, we will obtain your consent before collecting, using, or disclosing your personal information. If you do not agree to this Privacy Policy, you may not access or otherwise use the Website.

FOR THE BERMUDA ARRIVAL CARD POLICY NOTICE, PLEASE VIEW HERE.

2. Personal Information That We Collect

We may collect personal information, including but not limited to:

  • Identification Information: Name, postal address, e-mail address, and phone number;
  • Communication Information: Emails, direct enquiries, and feedback;
  • Account/Registration Information: Profile and account details created on the Website;
  • Website Usage & Technical Information: IP address, device type, browser type, domain name, duration of stay, clickstream data, and pages viewed;
  • Location Information: Geographic location provided by a mobile device or associated with your IP address (where permitted by law);
  • Marketing Preferences: Preferences regarding newsletters and promotional updates;
  • Voluntarily Submitted Information: Information submitted through forms, surveys, contests, or AI tools.

We collect personal information from the Website when you choose to provide it to us or automatically as you navigate the site. For example, you may choose to provide us with personal information when you send us an email, register for the Website, subscribe to our newsletter, or interact with features on the Website.

We generally do not seek to collect sensitive personal information (as defined under PIPA, including information about place of origin, race, sex, sexual orientation, health, religious beliefs, political opinions, or biometric or genetic data) through this Website. If you voluntarily submit sensitive personal information to us (for example, through the "Find Your Bermuda" AI Assistant or a survey or form), we will treat it in accordance with PIPA, which generally requires your explicit consent to use it.

3. Why We Collect Personal Information

We collect your personal information for specific, clear purposes, including:

  • Responding to direct enquiries and customer service requests;
  • Fulfilling tourism information requests and newsletter subscriptions;
  • Customizing, personalizing, and tailoring your website experience;
  • Conducting analytics, measuring traffic patterns, and evaluating Website performance;
  • Administering marketing, promotional campaigns, contests, or surveys;
  • Improving on-island and online visitor experiences;
  • Fraud prevention, security, and administrative oversight;
  • Complying with legal and regulatory obligations.

We will not use your data for unrelated purposes without informing you and obtaining your consent when necessary. We retain your personal information only as long as necessary to fulfill these purposes or comply with legal obligations.

4. Information Usage and Disclosure

We will only use your personal information as described below:

  • To operate the Website and provide you with specific services requested;
  • To respond to direct enquiries;
  • To add you to mailing lists and send communications (where you subscribe to receive marketing communications, we will use your email address for those purposes until you unsubscribe or withdraw consent);
  • To permit third-party vendors and subcontractors (such as website hosting, analytics, communications, payment processing, marketing, CRM, and AI-enabled service providers) to access personal information strictly in connection with performing services for us;
  • To administer contests, promotions, surveys, or site features;
  • To disclose personal information as required by law, legal process, or to investigate suspected fraud, harassment, or other legal violations;
  • To transfer personal information in connection with a corporate reorganization, merger, or sale.

Non-personal or aggregated information may be shared with third parties, provided that such information does not specifically identify you.

5. Third-Party Vendors & Cross-Border Data Transfers

We may share your information with third-party vendors contractually obligated to comply with Bermuda's PIPA standards. We will not share your personal information with third parties for marketing purposes without your explicit consent.

BTA may use service providers located outside Bermuda (including maintaining Website infrastructure in the United States of America). Where personal information is transferred internationally, BTA assesses the level of protection provided by the laws applicable to the recipient country before the transfer and, where that protection is not comparable to PIPA, puts contractual or other safeguards in place to ensure a comparable level of protection. Data stored internationally may be subject to lawful requests by local courts or law enforcement authorities.

6. "Find Your Bermuda" AI Assistant Policy

The "Find Your Bermuda" AI Assistant is powered by our third-party provider, Mindtrip. When interacting with the AI Assistant or related AI-enabled tools on our Website:

  • Data Processing & Storage: Information and prompts submitted through the AI Assistant may be processed, stored, and reviewed by BTA and Mindtrip to fulfill your requests, generate tailored travel recommendations, and improve tool functionality.
  • EU/EEA Data Anonymization Safeguards: When using the AI Assistant service in the EU or EEA, Mindtrip ensures that any data shared with BTA or other partners is strictly anonymized, meaning it cannot and does not identify individual users.
  • User Recommendations: Users should avoid submitting sensitive personal information, payment details, or unnecessary personal identifying details through the AI Assistant.

Provider Policy: For more detailed information on how Mindtrip handles data, please review Mindtrip’s Privacy Policy, https://mindtrip.ai/privacy-policy. 

7. Cookies and Similar Technologies

We store information on your device using cookies, web beacons, clear gifs, and similar technologies to facilitate and enhance interaction with the Website. We utilize:

  • Essential Cookies: Required for basic site operation and security;
  • Analytics Cookies: Used by BTA and third-party contractors (such as Google Analytics) to monitor traffic and usage patterns;
  • Advertising & Marketing Cookies: Used to deliver relevant interest-based advertising content.

Where applicable, users may manage non-essential cookies through our cookie preference tool. You may also stop or restrict cookies by adjusting your browser preferences.

8. Interest-Based Advertising

We or third-party vendors may use non-personal information to deliver targeted advertising based on your online activities. We comply with the Self-Regulatory Principles for Online Behavioral Advertising set forth by the Digital Advertising Alliance (DAA). You can opt out of targeted advertising from participating providers at www.aboutads.info/consumers.

Please note that by opting out, you will continue to see generic advertising that is not tailored to your specific interests and activities. To be clear, cookie-based opt-outs must be performed on each device and browser that you wish to have opted-out. For example, if you have opted out on your device browser, that opt-out will not be effective on your mobile device. You must separately opt out on each device. However, once you have opted out on one device (“Opted-Out Device”), we will not use any new data from the Opted-Out Device to identify you on another device for interest-based advertising purposes and we will not use data from another device for interest-based advertising purposes on the Opted-Out Device.

Do Not Track: Please note that we do not respond to or honor “do not track” (a/k/a/ DNT) signals or similar mechanisms transmitted by web browsers.

9. Security and Data Breach Notification

We implement administrative, physical, and technical safeguards (such as encryption and access controls) designed to protect personal information against loss, unauthorized access, disclosure, or misuse.

In the event of a privacy breach involving personal information, BTA will take appropriate steps to investigate, contain, and address the breach, and will notify the Office of the Privacy Commissioner for Bermuda and any affected individuals without undue delay, as required under PIPA. While we undertake commercially reasonable efforts, due to the open nature of the Internet, we cannot guarantee absolute security.
 

10. Links to Other Websites & Social Networking

As a convenience, we may provide links to third-party websites, apps, or social networking services. We do not control these services and are not responsible for their privacy practices. Personal information voluntarily shared in public forums or social networks may be viewed and used by others.

11. Information Relating to Minors

Our services are intended for individuals aged 14 and older. Where we knowingly collect personal information from, or offer a service targeted at, a child under 14 through the Website, we will obtain verifiable consent from a parent or guardian before collecting or using that child's personal information, will collect only the parent or guardian's contact details for that purpose, and will provide a privacy notice appropriate to the child's age. If we discover we have otherwise collected a child's personal information without the required consent, we will take immediate steps to delete it. Parents or guardians can request deletion by contacting [email protected].

12. Your PIPA Rights & Opt-Out Options

Under PIPA, you have rights regarding your personal information, including the right to access, correct, block, or request erasure of your data, or withdraw consent for processing.

  • To exercise your rights or opt out: Contact our Privacy Officer at [email protected].
  • Marketing Emails: You may opt out at any time using the "Unsubscribe" link in our emails or by contacting us directly.
  • Mobile & Location Data: Adjust your device settings to restrict location sharing or mobile ad identifiers.

Please note these rights are subject to certain legal or operational limitations. We will respond to your request within 45 days of receiving your request, as required under PIPA (this period may be extended in certain circumstances, in which case we will notify you).

13. Office of the Privacy Commissioner for Bermuda

Individuals who have concerns about our handling of personal information may contact the Office of the Privacy Commissioner for Bermuda at https://www.privacy.bm.

14. California Privacy 

California Privacy: Under California Law, California residents have the right to request in writing from businesses with whom they have an established business relationship, (a) a list of the categories of PII, such as name, email address and mailing address and the type of services provided to the customer that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes and (b) the names and addresses of all such third parties. To request the above information, please contact us at [email protected]. If you do not want your PII shared with any third party who may use such information for direct marketing purposes, then you may opt out of such disclosures by sending an email to us at [email protected].

15. Data Storage

United States of America: Our Website is maintained in the United States of America.  By using the Website, you freely and specifically give us your consent to export your PII to the USA and to store and use it in the USA as specified in this Privacy Policy.  You understand that data stored in the USA may be subject to lawful requests by the courts or law enforcement authorities in the USA.

Bermuda: We process your personal information based on lawful grounds, including your consent, the necessity to fulfil a contract, compliance with legal obligations, or other legitimate interests outlined under Bermuda's Personal Information Protection Act (PIPA).Under PIPA, you have the right to access, correct, block, or delete your personal information. To exercise these rights, contact us at mailto:[email protected]. Please note that these rights are not absolute and may be subject to certain legal or operational limitations. For example, we may retain information to comply with legal obligations or resolve disputes. We will respond to your request within a reasonable timeframe and explain if we cannot fulfill your request in full.

16. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If material changes are made, we will post the updated policy here or notify you by email. You are bound by any changes when you continue to use the Website after updates are posted.

17. Contact Us

For questions or concerns relating to this Privacy Policy or your personal information, please contact our Privacy Officer at [email protected].