This notice explains how Jungle Bee, Inc. ("Junglebee", "we", "us"), a Delaware corporation with its notice address at 2035 Sunset Lake Road, Suite B-2, Newark, Delaware 19702, USA, handles personal information. Contact: support@junglebee.com.
It is in two parts, because we have two different relationships:
- Part A is for tour operators, travel agencies and their staff who use the Junglebee platform, and for visitors to our website. For this information we are the controller.
- Part B is for guests who book an experience through a booking page, link or email powered by Junglebee. For most of this information the operator you booked with is the controller and we process it on the operator's behalf; for payment, fraud and legal purposes we are an independent controller.
Part C applies to everyone.
Part A — Operators, agencies, their staff, and website visitors
A1. What we collect
- Account and business information: company name, address, registration details, contact names, emails, phone numbers, roles, logins and passwords (hashed), settings, logos and content you upload.
- JB Pay application information: legal entity details, beneficial owners and controlling persons (name, date of birth, address, identification details where requested), bank account details for payouts, licence and insurance confirmations, US tax status forms (W-8 or W-9) and the tax identification numbers on them, your typed signature, and documents you provide for verification.
- Transaction and payout information: bookings, charges, refunds, chargebacks, fees, payout statements and bank transfer references.
- Usage and device information: pages and features used, actions taken (audit logs), IP address, browser and device type, approximate location from IP, cookies and similar technologies.
- Support and communications: emails, chat and support tickets, and notes of calls.
- Website visitor information: pages visited, referrer, analytics identifiers, information you submit in forms.
A2. Why we use it and on what basis
| Purpose | Legal basis (where one is required) |
|---|---|
| Creating and running your account, providing the platform, support | Performance of our contract with you |
| JB Pay approval, identity and ownership verification, sanctions and fraud screening, payout | Contract; legal obligations; our legitimate interest in preventing fraud and meeting processor and card-network requirements |
| Calculating and collecting fees, accounting, tax reporting | Contract; legal obligations |
| Security, monitoring, logging, support access to your account | Legitimate interest in keeping the platform secure and supporting you |
| Product analytics and improvement | Legitimate interest; consent for non-essential cookies where required |
| Sending service messages (changes to terms, payouts, incidents) | Contract; legal obligations |
| Sending product news and marketing to business contacts | Legitimate interest; you can opt out at any time |
| Enforcing our terms, resolving disputes, complying with law and lawful requests | Legal obligations; legitimate interests |
| Business transfers | Legitimate interest |
A3. Who we share it with
- Payment processor (Stripe): to run JB Pay and Stripe Connect, verify your business and pay you out.
- Banks: to make payouts.
- Hosting and infrastructure: Vercel and its managed database and storage providers (current platform); Amazon Web Services (legacy platform).
- Email delivery (Postmark), error monitoring (Sentry), analytics and support tools.
- Agencies you enable: they see the bookings they make for you and your availability.
- Marketplaces you connect (Viator, GetYourGuide): your availability, prices and booking confirmations.
- Guests: your business name, contact details and policies appear on your booking page and in confirmations.
- Professional advisers, insurers, auditors, regulators, courts and law enforcement where required or reasonably necessary.
- A buyer or successor of our business, subject to this notice.
We do not sell personal information and we do not share it with third parties for their own marketing.
A4. Retention
Account information: for the life of the account and 7 years after. Transaction, payout and JB Pay verification records: 7 years from the relevant transaction, as financial and compliance records. Audit logs: 2 years. Support communications: 3 years. Marketing contact data: until you opt out or 2 years of inactivity.
Part B — Guests
B1. What is collected
When you book: your name, email, phone number, where you are staying and room number, the number and names of people in your party, the experience booked, date and time, extras, price and taxes, any notes the operator records about you, your communications with the operator through the platform, and the version of the terms and cancellation policy shown to you.
When you pay by card: card details are entered directly into our payment processor's secure fields. Junglebee and the operator never see or store your full card number. We keep a processor token, the card brand, the last four digits and the expiry date so the operator can charge a balance or change you agree to, and so refunds and disputes can be handled.
Technical information when you use the booking page: IP address, browser and device type, and strictly necessary cookies. Your confirmation email contains a secure, time-limited link to your booking.
B2. Who is responsible
- The operator you booked with decides what information it needs for the experience and how it uses it to deliver the experience, contact you and manage its business. The operator is the controller for that. Junglebee processes the information on the operator's behalf under a data processing agreement, following the operator's instructions.
- Junglebee is an independent controller for: collecting your payment where we act as the operator's payment agent; issuing refunds; preventing and investigating fraud; handling chargebacks and disputes with your card issuer; keeping financial and legal records; securing and running the booking service; and responding to legal requests.
- A marketplace (Viator, GetYourGuide) that sold you the experience is responsible for the information it collected from you under its own notice. It sends the booking to the operator through Junglebee.
B3. Why Junglebee uses your information (as controller)
| Purpose | Legal basis |
|---|---|
| Charging your card as the operator's agent, issuing receipts and refunds | Performance of the contract (payment) you enter at checkout; legitimate interest in performing our agreement with the operator |
| Preventing fraud, meeting processor and card-network rules, defending chargebacks | Legitimate interests; legal obligations |
| Keeping booking and payment records | Legal obligations (financial records) |
| Securing the booking page and guest link | Legitimate interest |
| Responding to your requests and complaints | Legitimate interest; legal obligations |
We do not use guest information for our own marketing and we do not send guests marketing on our own behalf.
B4. Who receives your information
The operator and its staff (according to the access levels the operator sets); the agency that made your booking, if any; the marketplace that sold it, if any; our payment processor (Stripe); our hosting, email and monitoring providers listed in A3; and authorities or courts where required.
B5. Retention
Booking and payment records are kept for 7 years from the trip date as financial records, then deleted or anonymised. If you ask, we or the operator can anonymise your profile sooner while keeping the financial record. The secure link to your booking expires after a short period.
Part C — Everyone
C1. International transfers
Junglebee is based in the United States and our systems are hosted there. If you are in the European Economic Area, the United Kingdom, Switzerland or another country with transfer rules, your information is transferred to the US. For operators, the EU Standard Contractual Clauses and UK Addendum in our Data Processing Addendum apply. For guest data where we are controller, and for operator account data, we rely on the Standard Contractual Clauses with our providers and on the necessity of the transfer to perform the contract you entered. Copies of the relevant clauses are available on request.
C2. Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to have it deleted, to restrict or object to its use, to receive it in a portable format, to withdraw consent where we rely on consent, and to complain to a data-protection authority. Where you have rights under US state privacy laws, you may also have the right to know what we collect and to opt out of sale or targeted advertising (we do neither).
Guests: for your booking details, please contact the operator you booked with first, as it is the controller; we will help the operator respond. For payment, fraud or legal records where we are controller, contact us directly.
Operators and agencies: contact us at support@junglebee.com.
We will respond within the time the law requires (one month in the EU and UK, extendable where permitted) and will not discriminate against you for exercising your rights. We may need to verify your identity. Some information cannot be deleted while we must keep it as a financial or legal record; we will tell you if so.
C3. Cookies
The platform and booking pages use strictly necessary cookies to keep you signed in, hold your booking during checkout, and protect against fraud. Our marketing website may use analytics cookies; where the law requires, we ask for your consent before setting them. You can control cookies in your browser; blocking necessary cookies will stop the platform working.
C4. Security
We use encryption in transit and at rest, role-based access controls enforced at the database level, logged administrative access, separation of card data to our PCI DSS-compliant processor, backups and monitoring. No system is perfectly secure; if we learn of a breach affecting your information we will notify affected operators without undue delay and notify individuals and authorities where the law requires.
C5. Children
The platform and booking pages are for adults. We do not knowingly collect information directly from children under 16; an adult books on behalf of their party.
C6. Changes
We will post changes here with a new effective date. For material changes affecting operators we give 30 days' notice by email. The version of this notice shown at checkout or sign-up applies to the information collected then, and later versions apply going forward.
C7. Contact
Jungle Bee, Inc.
2035 Sunset Lake Road, Suite B-2, Newark, Delaware 19702, USA
support@junglebee.com
If you are in the EU or UK and are not satisfied with our response, you may complain to your local data-protection authority.