SMART DEMANDS 24/7 LIMITED · Your Demands, 24/7

SMART (operated by SMART DEMANDS 24/7 LIMITED, the "Company") is a registered data controller under Jamaica's Data Protection Act, 2020 (JDPA). This policy explains what personal data we collect, why, how we protect it, and the rights you have over it.

1. What we collect

Account data — name, email, phone, role.
Booking data — service address, scheduled date/time, instructions you write to your provider.
Payment data — handled by our PCI-DSS-compliant processor (Stripe). SMART never stores your full card number.
Verification data (providers only) — TRN, government ID, police record, proof of address. Stored encrypted; only viewable by SMART admins for vetting.
Location data (optional) — your live coordinates only when you explicitly tap "use my location" for distance pricing or safety pings.
Device & usage — IP, device type, browser, pages viewed (to keep the service running and prevent fraud).

2. Why we use it

To match you with the right provider and bill the correct distance fee.
To verify identity (KYC) for provider onboarding and vehicle owner listings.
To send transactional notifications (booking confirmations, safety pings, password resets).
To investigate complaints, fraud, or safety incidents.
To improve the platform — anonymised analytics only.

3. Who we share it with

Only with providers you book (limited to first name, masked phone, address you booked at) and our processors (Stripe for payments, Resend for email, Twilio for SMS). We do not sell your data to third parties for marketing.

4. How long we keep it

Account data: as long as your account is active. Booking and financial records: 7 years (Jamaican tax retention requirement). Provider verification documents: deleted within 90 days of provider account closure.

5. Your rights under JDPA 2020

You have the right to:

Access the personal data we hold about you.
Correct any inaccurate data.
Erase your data ("right to be forgotten") — except where we must retain it by law (e.g. tax records).
Object to specific processing (e.g. marketing emails).
Port your data to another service provider.
Withdraw consent at any time; if you do we'll close your account on request.

Send any request to customercare@smartdemands247.com. We respond within 30 days as required by JDPA s.6.

6. Security

Passwords are hashed with bcrypt. Sensitive uploads (ID, police record, TRN) are encrypted at rest in our object storage. Connections are TLS 1.2+. Access to personal data is limited to authorised SMART staff under an internal access policy.

7. Cookies

We use a single session cookie to keep you logged in. No third-party advertising trackers run on smartdemands247.com.

8. Complaints

If you believe we've mishandled your data, contact us first. If you remain unsatisfied, you can lodge a complaint with the Office of the Information Commissioner of Jamaica (oic.gov.jm).

Privacy Policy