Privacy notice

ComplianceWatch, operated by CRM Jamaica Group, Savanna-la-Mar, Westmoreland, Jamaica · Version 1.0, effective 8 July 2026

The short version

We collect what we need to run your account and nothing more. The compliance records you create belong to your business — we store them, we do not use them. We never sell data. Marketing is opt-in only.

What we collect, why, and on what basis

Account details — your name, email, password (stored encrypted), business name, sector, and parish.
Why: to create and secure your account and provide the service. Basis: performance of our contract with you.
The records you create — checklist progress, data inventory rows, assessment answers and reports, key dates.
Why: solely to provide the tool — saving your progress, generating your reports, running your reminders. Basis: contract.
Your DSAR and breach log entries — these may contain other people’s personal data, such as a requester’s name or an incident description.
For that content, your business is the data controller and CRM Jamaica Group acts as your data processor: we store it on your instructions, use it for no purpose of our own, keep it confidential, and delete it with your account.
Login cookie and server logs — a session cookie to keep you signed in, and standard technical logs.
Why: security and keeping the service running. Basis: our legitimate interest in operating the service safely. We use no advertising or tracking cookies.
Aggregate statistics — for example, average readiness scores by sector or parish.
Why: to improve the product and understand where help is needed. These are anonymised and aggregated; they never identify your business. Basis: legitimate interests.
Marketing — news about CRM Jamaica Group tools and training.
Only if you ticked the box at sign-up. Basis: consent, withdrawable anytime by emailing us or using the opt-out in any message.

What we never do

We do not sell your data or share it with third parties for their own purposes. We do not read individual businesses’ compliance records except to provide support you ask for. We do not use your records against you, and we do not assume marketing consent from account creation.

Where your data is stored

ComplianceWatch runs on Amazon Web Services cloud infrastructure hosted in the United States. That means your data is transferred outside Jamaica, safeguarded by our agreement with the provider, encrypted connections, and access limited to those who operate the service. We tell you this because it is exactly what we advise every business to disclose.

How long we keep it

Your account data and records are kept while your account is active. If you close your account, we delete your data within 90 days, with copies in routine backups expiring on their normal cycle after that. Anonymous aggregate statistics may be retained, as they identify no one.

Your rights

You can ask for a copy of your personal data, have inaccuracies corrected, object to processing, withdraw marketing consent, or close your account and have your data deleted. Email westcomjamaica@gmail.com and we will respond within the statutory period. If you are unhappy with our answer, you have the right to complain to the Office of the Information Commissioner.

Changes

If this notice changes, we will update the version and date at the top and, for significant changes, tell you when you next log in. Earlier versions are available on request.

Back to home page