TradeOps

Privacy Policy

Last updated: August 8, 2026

This Privacy Policy explains how TradeOps ("we", "our", or "us") collects, uses, discloses, and safeguards your personal data in accordance with the Jamaica Data Protection Act, 2020 (the "DPA"). By using the TradeOps platform, you acknowledge that you have read and understood this policy.

Who We Are

TradeOps is the data controller responsible for your personal data. We are registered in Jamaica and operate an operations management platform for distribution companies, FMCG brands, and trade operations teams.

Information We Collect

We collect the following categories of personal data:

  • Account information: name, email address, password (encrypted), phone number
  • GPS and location data: real-time geographic coordinates collected from field team members during audit activities. Location data is captured only while you are actively using the platform for audit submissions.
  • Photos and media: images captured during audits, including photographs of equipment, store shelves, product displays, and other trade-related assets
  • Audit submission data: form responses, scores, timestamps, and notes submitted during field audits
  • Device information: browser type and version, operating system, IP address
  • Offline-synced data: data captured on your device while offline that is uploaded to our servers when internet connectivity is restored
  • Team and organization data: roles, permissions, assigned territories, and organizational hierarchy
  • Customer and store profiles: business names, physical addresses, and contact information for trade locations

How We Use Your Information

We process your personal data for the following purposes:

  • Providing and maintaining the TradeOps platform and its features
  • Managing your account and authenticating your access
  • Processing and storing audit submissions, including GPS-tagged field data
  • Syncing offline data when connectivity is available
  • Generating reports, analytics, and performance metrics for your organization
  • Sending service notifications, updates, and support communications
  • Ensuring the security and integrity of the platform
  • Complying with legal and regulatory obligations in Jamaica

Legal Basis for Processing

Under the Jamaica Data Protection Act, 2020, we process your personal data on the following legal bases:

  • Performance of a contract: Processing is necessary to provide you with the TradeOps platform as agreed in our Terms of Service. This includes account management, audit data processing, and service delivery.
  • Legitimate interests: We process data for platform security, fraud prevention, analytics to improve our services, and internal administrative purposes. We ensure these interests do not override your fundamental rights and freedoms.
  • Consent: Where required, such as for GPS location tracking and certain cookies, we obtain your explicit consent before processing. You may withdraw consent at any time (see "Your Rights" below).
  • Legal obligation: We process data where necessary to comply with Jamaican law, including tax, employment, and regulatory requirements.

Providing your account information is a contractual requirement necessary to use the platform. If you do not provide this data, we cannot create your account or deliver our services. GPS and photo data collection is tied to audit functionality and is required for the performance of field operations within the platform.

Data Sharing and Recipients

We do not sell your personal data. We may share your information with the following categories of recipients:

  • Your organization: Administrators and managers within your team can access audit data, reports, and team member activity as permitted by their role
  • Cloud infrastructure providers: We use Laravel Cloud for hosting and data storage services
  • Service providers: Third-party vendors that assist us with email delivery, analytics, and platform operations, bound by data processing agreements
  • Legal authorities: Where required by Jamaican law, court order, or valid legal process

International Data Transfers

TradeOps is hosted on Laravel Cloud, and your data may be stored and processed on servers located outside Jamaica. When your personal data is transferred outside Jamaica, we ensure appropriate safeguards are in place as required by the DPA, including:

  • Contractual clauses with our infrastructure providers that require equivalent data protection standards
  • Ensuring recipient countries or organizations provide an adequate level of protection for personal data
  • Implementing technical security measures (encryption in transit and at rest) regardless of data location

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Account data: Retained for the duration of your active account, plus 90 days after deletion to allow for recovery
  • Audit submissions, photos, and GPS data: Retained for as long as your organization's account is active, or as required by your organization's retention policy
  • Device and usage logs: Retained for up to 12 months for security and debugging purposes
  • Billing records: Retained for 7 years to comply with Jamaican tax and financial regulations

When data is no longer required, it is securely deleted or anonymized.

Your Rights Under the Jamaica Data Protection Act

Under the DPA, you have the following rights regarding your personal data:

  • Right of access: You may request a copy of the personal data we hold about you
  • Right to rectification: You may request that we correct inaccurate or incomplete personal data
  • Right to erasure: You may request deletion of your personal data where there is no compelling reason for its continued processing
  • Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances
  • Right to object: You may object to processing based on legitimate interests or for direct marketing purposes
  • Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format
  • Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

  • Essential cookies: Required for platform functionality, authentication, and session management
  • Analytics cookies: Help us understand how you use the platform so we can improve it

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain platform features.

Data Security and Breach Notification

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit (TLS) and at rest
  • Access controls and role-based permissions
  • Regular security assessments and monitoring
  • Secure authentication practices including password hashing

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Office of the Information Commissioner within 72 hours of becoming aware of the breach, as required by the DPA. Where the breach is likely to result in a high risk to you, we will also notify you directly without undue delay.

Automated Decision-Making

TradeOps does not use automated decision-making or profiling that produces legal effects or similarly significant effects on you. Audit scores and reports are generated based on data you submit and are reviewed by your organization's team members.

Children's Privacy

TradeOps is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Where changes are significant, we will provide additional notice via email or in-app notification.

Contact Us and Complaints

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Information Commissioner (OIC):