Privacy Policy
Last updated: June 2025
1. Who We Are
Post Aruba N.V. operates the P.O. Box rental service at postaruba.app. We are the data controller for personal data collected through this website.
2. What Data We Collect
When you apply for a P.O. Box rental we collect: full name, postal address, email address, telephone number, a copy of your government-issued ID, Chamber of Commerce certificate (business applicants), and rental/payment details.
3. Legal Basis for Processing
We process your data on the basis of contract performance (to manage your P.O. Box rental) and compliance with our legal obligations under Aruban law.
4. How We Use Your Data
- To process and administer your P.O. Box rental application
- To send you confirmation and service notifications by email
- To verify your identity as required by Aruban regulations
- To maintain internal audit records
5. Data Retention
We retain your personal data for 7 years from the end of your rental agreement. Uploaded ID documents are retained for the duration of the rental and then securely deleted.
6. Data Sharing
We do not sell your data. We use Resend (transactional email only). Data may be disclosed to government authorities if required by law.
7. Cookies
This site uses only essential cookies: a secure session cookie
(pa_session) and your consent preference (gdpr_consent).
No tracking or advertising cookies are used.
8. Your Rights
You have the right to access, correct, erase, restrict, or port your personal data. To exercise these rights, email us at privacy@postaruba.com.
9. Security
We protect your data with HTTPS/TLS encryption, bcrypt password hashing, and role-based access controls limiting staff access to authorised personnel only.
10. Contact
Post Aruba N.V., Oranjestad, Aruba
Email: privacy@postaruba.com