Transparency & Data Rights
We are a data protection practice. We hold ourselves to the standards we advise others to meet. These notices explain how we handle your personal data — for our website, and for our Free Readiness Assessment service. Questions? Contact our DPO at DPO@myprivicy.com.
Privicy Advisory Services ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit and use this website.
This policy is designed to comply with the data protection laws of the jurisdictions we serve:
Privicy Advisory Services Limited is the data controller responsible for your personal data collected through this website.
Data Protection Officer
Privicy Advisory Services Limited
San Juan, Trinidad & Tobago
DPO@myprivicy.com
When you contact us or use our services, we may collect:
When you access this website, we may automatically collect:
We process your personal data on the following legal grounds:
We use the personal data we collect to:
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
We may share your personal data with the following categories of recipients, only where necessary:
We do not sell, rent, or trade your personal data to third parties for marketing or commercial purposes.
Your personal data may be transferred to and processed in countries outside your country of residence where our service providers operate. When we transfer your data internationally, we implement appropriate safeguards including:
We retain personal data only for as long as necessary for the purpose it was collected, or as required by law:
| Data Type | Retention Period | Basis |
|---|---|---|
| Contact & enquiry data | 3 years | Legitimate interest / contract |
| Assessment data | 12 months | Consent (see Assessment Notice) |
| Communication records | 3 years | Legal obligation / legitimate interest |
| Website log data | 12 months | Legitimate interest / security |
Data subject to a legal hold or required for regulatory compliance may be retained for longer. Upon expiry, data is securely deleted or anonymised.
Under the data protection laws applicable in your jurisdiction, you have the following rights in relation to your personal data:
To exercise any of these rights, contact our DPO at DPO@myprivicy.com. We will respond within 30 days, or within the timeframe required by your applicable jurisdiction's law.
We implement appropriate technical and organisational measures to protect your personal data:
No method of electronic transmission or storage is entirely secure. While we apply rigorous standards, we cannot guarantee absolute security. In the event of a breach affecting your rights and freedoms, we will notify you and the relevant authority as required by applicable law.
Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us at DPO@myprivicy.com and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. Material changes will be communicated by updating this page and revising the "Last Updated" date at the top of the notice. We encourage you to review this page periodically. Continued use of our website following a material change constitutes acceptance of the updated policy.
If you have concerns about how we handle your personal data, please contact our DPO in the first instance. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction:
| Jurisdiction | Supervisory Authority |
|---|---|
| Jamaica | Office of the Information Commissioner |
| Barbados | Data Protection Commissioner |
| Bermuda | Privacy Commissioner for Bermuda |
| Cayman Islands | Ombudsman (Data Protection) |
| Trinidad & Tobago | Information Commissioner |
For any questions about this Privacy Policy or our data practices, please contact us:
Privicy Advisory Services Limited
San Juan, Trinidad & Tobago
General enquiries: info@myprivicy.com
Data protection matters: DPO@myprivicy.com
Telephone: +1 868 461 4572
This notice applies specifically to the Free High-Level Caribbean Data Protection Readiness Assessment offered by Privicy Advisory Services. It is a specialist notice and should be read alongside our Website Privacy Policy above.
The assessment is designed to help organisations benchmark their alignment with Caribbean data protection frameworks — including the laws of Jamaica, Barbados, Trinidad & Tobago, the Cayman Islands, and Bermuda. This notice explains exactly what data we collect during that process and why.
In accordance with the principle of Privacy by Design, we strictly limit our collection to what is necessary to deliver your assessment results. We collect:
What we do not collect: We do not request or collect company financial data, employee records, sensitive personal data belonging to your staff or customers, internal documentation, or any information beyond what is necessary to generate your readiness score and action plan.
Your assessment data is used for one purpose only: to generate your organisation's readiness score and accompanying action plan. We do not:
Identifiable assessment data is accessible only to the authorised advisory team at Privicy Advisory Services who are responsible for producing your report. All team members are subject to confidentiality obligations.
We apply to the Free Assessment the same security standards we advise our clients to implement and maintain. Specifically:
As a data protection and AI governance advisory firm, we regard the security of your data as a direct reflection of the standards we hold our clients to. We do not apply lower standards to our own operations.
Following the 12-month retention period, assessment data is securely and permanently deleted. We do not archive or anonymise it for secondary use without your explicit consent.
In relation to the data collected during your assessment, you have the right to:
All rights requests in relation to assessment data are responded to within 5 working days — ahead of the 30-day statutory timeframe — because we recognise that assessment data is sensitive in context.
For any questions about how we handle your assessment data, or to exercise your rights in relation to it, contact our Data Protection Officer directly:
Data Protection Officer
Privicy Advisory Services Limited
DPO@myprivicy.com
General enquiries: info@myprivicy.com
Telephone: +1 868 461 4572
If you are not satisfied with our response, you have the right to complain to the data protection authority in your jurisdiction. A list of the relevant authorities for each Caribbean jurisdiction is provided in Section 13 of the Website Privacy Policy above.