Privacy Policy — iConnectJA

📋 Contents

Who We Are
Data We Collect
How We Use Your Data
Who We Share Data With
How Long We Keep Data
Your Rights (DPA 2020)
Security
Cookies
Minors
Changes to This Policy
Contact Us

    Plain English Summary: We collect your phone number to verify you are real. We collect your job details to match you with tradesmen. We never sell your data. We hide your contact info until a payment is made. You can delete your account at any time.
  

1. Who We Are

iConnectJA is a trading name of Frontier Logistics Limited, a company registered in Jamaica under the Companies Office of Jamaica (COJ).

We operate the platform at iconnectja.net — Jamaica's first verified trades marketplace — connecting homeowners and residents with HEART/NSTA certified tradesmen island-wide.

For the purposes of the Data Protection Act 2020 (Jamaica), Frontier Logistics Limited is the Data Controller responsible for your personal data.

Registered Address: Jamaica, W.I.
Contact: hello@iconnectja.net
WhatsApp: +1 (876) 501-5017

2. Data We Collect

2.1 Data You Give Us Directly

Data Type	Who Provides It	Why We Need It
Name	All users	Identity and platform communications
Phone number (+1 876)	All users	Verification via OTP; job notifications via WhatsApp
Parish and address	Residents posting jobs	Match you with tradesmen in your area
Job descriptions and photos	Residents posting jobs	Display your job to relevant tradesmen
Trade, HEART/NSTA certificate	Tradesmen registering	Verify credentials before approving profile
Profile photo	Tradesmen (optional)	Display on public tradesman profile
Payment information	Residents paying for jobs	Process secure deposits via WiPay Jamaica
Reviews and ratings	Residents after jobs	Build trust and accountability on the platform

2.2 Data Collected Automatically

IP address (for security monitoring and fraud prevention)
Device type and browser (for platform compatibility)
Pages visited and time spent (for improving user experience)
Error logs (for fixing bugs — sent to Sentry, our error tracking service)

2.3 Data We Do NOT Collect

We do not store raw credit card or bank account numbers
We do not collect TRN (Tax Registration Numbers)
We do not collect NIN (National Identification Numbers)
We do not use facial recognition or biometric data

3. How We Use Your Data

To operate the platform — matching residents with tradesmen, managing job postings and bids
To verify identity — Firebase OTP phone verification confirms you are real before you can post or bid
To verify tradesman credentials — we manually review HEART/NSTA certificate uploads before approving profiles
To process payments — WiPay Jamaica handles all payment processing; we store transaction records only
To send notifications — job alerts, bid updates, and payment confirmations via WhatsApp (Twilio)
To protect against fraud — we monitor for fake accounts, fraudulent certificates, and suspicious activity
To comply with law — we retain records as required by Jamaican law, including for tax purposes
To improve the platform — analysing usage patterns to build better features

      Legal Basis (DPA 2020): We process your data under the following lawful bases: (a) Contract — to provide the service you signed up for; (b) Legitimate Interests — fraud prevention and platform security; (c) Legal Obligation — tax and regulatory compliance; (d) Consent — for marketing communications (you can withdraw this at any time).
    

4. Who We Share Data With

We do not sell your personal data. We share it only in the following limited circumstances:

Recipient	What We Share	Why
Matched tradesmen	Job description, parish, budget range	So they can submit a bid. Your full address and phone are hidden until you approve a bid AND a deposit is paid.
Residents (after payment)	Tradesman's verified phone number	So both parties can coordinate the job. Only released after deposit is confirmed.
WiPay Jamaica	Payment amount, transaction reference	Payment processing. WiPay is PCI-DSS compliant.
Firebase (Google)	Phone number for OTP verification	Authentication only. Firebase does not have access to your job data.
Twilio	Phone number for WhatsApp/SMS	Sending you notifications. Message content only — no financial data.
Cloudflare R2	Uploaded images and certificates	Secure file storage. Files are private by default.
Sentry	Error logs (anonymised)	Bug tracking. No personal data is sent in error logs.
Jamaican authorities	As legally required	Compliance with valid legal orders, court orders, or regulatory requirements.

5. How Long We Keep Your Data

Data Type	Retention Period	Reason
Account data (name, phone, parish)	Until account deletion + 30 days	Account operation
Job posting records	3 years after job completion	Dispute resolution
Payment transaction records	7 years	Jamaican tax law requirement
HEART/NSTA certificate images	Duration of active profile + 6 months	Verification audit trail
Reviews and ratings	Permanently (anonymised after account deletion)	Platform integrity
Security and access logs	90 days	Fraud investigation

6. Your Rights Under the Data Protection Act 2020

As a Jamaican resident, you have the following rights under the Data Protection Act 2020:

Right to Access — Request a copy of the personal data we hold about you
Right to Correction — Request correction of inaccurate or incomplete data
Right to Erasure — Request deletion of your account and associated data (subject to legal retention obligations)
Right to Restrict Processing — Ask us to limit how we use your data in certain circumstances
Right to Object — Object to processing based on our legitimate interests
Right to Withdraw Consent — Withdraw consent for marketing at any time
Right to Lodge a Complaint — Complain to the Office of the Information Commissioner (OIC) of Jamaica

To exercise any of these rights, contact us at hello@iconnectja.net or via WhatsApp at +1 (876) 501-5017. We will respond within 30 days.

7. Security

We take data security seriously and have implemented the following protections:

HTTPS / TLS 1.3 — All data in transit is encrypted (Vercel auto-SSL)
Phone OTP verification — No passwords that can be stolen; all logins verified by your phone
Contact info hidden by default — Your phone number and address are never shown to tradesmen until a deposit is confirmed
Row-Level Security — Our database (Supabase PostgreSQL) enforces strict access rules: you can only access your own data
Private file storage — HEART/NSTA certificates are stored in a private bucket; they cannot be accessed via a public URL
Rate limiting — OTP requests and all API calls are rate-limited to prevent abuse
Audit logging — All admin actions are logged with timestamp and IP address

In the event of a data breach, we will notify affected users and the Office of the Information Commissioner within 72 hours as required by DPA 2020.

8. Cookies

We use the following types of cookies and local storage:

Essential cookies — Required for the platform to function (session management, security tokens). You cannot opt out of these.
Analytics cookies — We use privacy-respecting analytics to understand how people use the platform. You may opt out via your browser settings.

We do not use advertising cookies or share cookie data with third-party advertisers.

9. Minors

iConnectJA is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, please contact us immediately at hello@iconnectja.net and we will delete the account.

10. Changes to This Policy

We may update this Privacy Policy from time to time as the platform evolves. When we make significant changes, we will notify you by:

Sending a WhatsApp notification to your registered number
Displaying a prominent banner on iconnectja.net
Updating the "Last Updated" date at the top of this page

Your continued use of iConnectJA after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

For any privacy-related questions, data requests, or complaints:

Get in Touch — We Respond Same Day

Privacy questions? Data requests? We're here. WhatsApp is the fastest.

💬 WhatsApp Us

📧 hello@iconnectja.net

You also have the right to lodge a complaint with the Office of the Information Commissioner (OIC) of Jamaica if you are not satisfied with our response.