Introduction

CaribExpress (“we,” “us,” or “our”) is committed to protecting your personal data and respecting your privacy in accordance with the Barbados Data Protection Act, 2019 (“the Act”).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our services, including our website, mobile applications, and delivery platform.

Scope

This Policy applies to:

• Customers using CaribExpress services
• Recipients of deliveries
• Website and mobile application users
• Merchants, partners, and service providers

Legal Basis for Processing

Under the Barbados Data Protection Act, 2019, we process personal data where:

• You have given clear consent
• Processing is necessary to perform a contract with you
• We have a legitimate interest, balanced against your rights
• We are required to comply with legal obligations

Personal Data We Collect

1. Information You Provide
   • Full name
   • Email address
   • Telephone number
   • Delivery and billing addresses
   • Account login details
   • Customer support communications
2. Full name
   • Email address
   • Telephone number
   • Delivery and billing addresses
   • Account login details
   • Customer support communications
3. Transaction Data
   • Order details and history
   • Payment information (processed securely by third-party providers)
4. Location Data
   • Real-time location (where enabled for delivery tracking)
   • Approximate location via IP address
5. Technical Data
   • Device type and identifiers
   • Browser and operating system
   • Usage data and interactions
6. Cookies and Tracking Technologies
   • We use cookies to enhance functionality, analyze usage, and improve user experience.

How We Use Your Personal Data

We use your personal data to:

• Provide and manage delivery services
• Process payments and transactions
• Communicate order updates and respond to inquiries
• Improve and personalize our services
• Prevent fraud and maintain platform security
• Comply with legal obligations

Disclosure of Personal Data

We may share your personal data with:

1. Service Providers
   • Including payment processors, cloud providers, and IT support services, under strict confidentiality obligations.
2. Delivery Personnel
   • Drivers or couriers receive only the information necessary to complete deliveries.
3. Merchants
   • Businesses fulfilling your orders.
4.  Legal Authorities
   • Where required by law or to protect rights, safety, and security.
5. Business Transfers
   • In the event of a merger, acquisition, or asset sale.

International Data Transfers

Where your personal data is transferred outside Barbados, we ensure appropriate safeguards are in place in accordance with the Barbados Data Protection Act, 2019, including contractual protections.

Data Retention

We retain personal data only for as long as necessary to:

• Fulfill the purposes outlined in this Policy
• Meet legal and regulatory requirements
• Resolve disputes and enforce agreements

Your Rights Under Barbados Law

Under the Barbados Data Protection Act, 2019, you have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request erasure of your data (where applicable)
• Object to or restrict processing
• Withdraw consent at any time
• Request information about how your data is processed
• To exercise your rights, contact:

International Data Transfers

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.

Cookies and Tracking

You may manage cookie preferences through your browser settings. Disabling cookies may affect certain features of our services.

Children’s Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children without appropriate consent.

Complaints Process

If you have concerns about how your personal data is handled, we encourage you to contact us first so we can resolve the issue promptly.

Step 1: Contact CaribExpress
Email: [Insert Email]
We will investigate and respond within a reasonable timeframe.

Step 2: Escalate to the Regulator
If you are not satisfied with our response, you have the right to lodge a complaint with the Barbados Data Protection Commissioner, which oversees compliance with the Act.

Regulatory Authority

The relevant supervisory authority in Barbados is:

Barbados Data Protection Commissioner –

https://www.gov.bb/General/data-protection-commissioner 

This authority is responsible for ensuring that organizations comply with the Barbados Data Protection Act, 2019 and for handling complaints from individuals.

Updates to This Policy

We may update this Privacy Policy from time to time. Updates will be posted with a revised effective date.

Contact Us

CaribExpress
Email: support [@] caribex.app