Privacy policy

01Personal data we collect

• —Contact details you give us: name, email address, phone number and company.
• —Project information: island, project type, timeline, budget range, products of interest, drawings and messages.
• —Account details if you register: name, email, a securely hashed password and your sign-in history.
• —Technical data: IP address, browser and device type, pages visited and cookies needed to run the site and keep you signed in.

We do not ask for sensitive personal data. Please do not include it in messages or attachments.

02How and why we use it

• —To respond to enquiries, prepare quotes, supply products and provide after-sales support (necessary to take steps at your request before entering into, or to perform, a contract).
• —To run your client account and show the status of your requests (contract).
• —To keep the site secure, prevent abuse and fix problems (our legitimate interests).
• —To keep business and tax records we are legally required to keep (legal obligation).
• —To send occasional product news, only if you have asked us to. You can opt out at any time (consent).

We do not sell personal data and do not use it for automated decisions that have legal or similarly significant effects on you.

03Who we share it with

We share personal data only where needed for the purposes above, with:

• —PRIMA, the manufacturer, and logistics partners, when ordering and shipping your products.
• —Service providers who host this website, run our email and form-processing automation, and store our records. They act on our instructions and must keep the data secure.
• —Professional advisers, insurers and authorities where the law requires it.

04Transfers outside the Cayman Islands

Some of our service providers and PRIMA are located outside the Cayman Islands. Where personal data is transferred abroad, we take steps so that it receives an adequate level of protection as required by the DPA, for example through contractual safeguards with the recipient.

05How long we keep it

We keep enquiry and project data for as long as needed to respond and to support products we supplied, and business records for as long as Cayman Islands law requires. Account data is kept while your account is open. We then delete or anonymise it.

06Security

We use encrypted connections (HTTPS), hashed passwords, access controls by role and activity logs. No system is completely secure. If a personal data breach occurs, we will notify the Ombudsman and affected individuals as the DPA requires, without undue delay and no later than five days after we become aware of it.

07Your rights

Under the DPA you have the right to:

• —be told how we process your personal data and get a copy of it (we will respond within 30 days);
• —have inaccurate data corrected, and ask us to delete data where there is no good reason to keep it;
• —ask us to stop or not begin processing your data, including for direct marketing;
• —withdraw consent at any time, where we rely on consent;
• —complain to the Office of the Ombudsman, the Cayman Islands data protection supervisory authority (ombudsman.ky).

To use these rights, contact us using the details below. We may need to confirm your identity first.

08Cookies

We use a strictly necessary cookie to keep you signed in to your account and the dashboard. We do not use advertising cookies. If we add analytics in future, we will update this policy and ask for consent where required.

09Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.