Privacy & Data Protection Policy

This Privacy & Data Protection Policy ("Policy") sets out how CaymanCart ("CaymanCart," "we," "us" or "our") collects, uses, shares and protects your personal data. CaymanCart is operated by:

Cayman Cart Ltd.
10 Market St, #1180
Grand Cayman KY1-9006, Cayman Islands
Email: info@caymancart.com

"Personal data" means any information relating to an identified or identifiable individual. In some jurisdictions this is called personally identifiable information (PII).

This Policy applies to everyone who visits our website or apps, searches the directory, creates an account, claims or lists a business, writes a review, contacts us, or otherwise interacts with CaymanCart. It also covers data we receive from third parties and service providers in the course of operating our platform.

Please do not use CaymanCart if you do not agree with the ways in which we process personal data as described here. This Policy should be read together with our Terms of Service.

For the personal data of visitors, registered users and the businesses we work with, CaymanCart is the data controller — we decide why and how that data is processed.

Where we process data on behalf of a listed business (for example, enquiries, bookings or order details a customer submits to a vendor through our platform), that business is the controller and CaymanCart acts as a data processor, handling the data in line with their instructions and our contract with them. For questions about how a vendor uses your data, please contact that vendor directly.

• Consent — where you have given clear permission, for example for marketing emails or optional cookies.
• Contractual necessity — to perform a contract with you, such as account registration, listing memberships and payment processing.
• Legal obligation — to comply with Cayman Islands law, including tax, accounting and anti-money-laundering requirements.
• Legitimate interests — to run, secure and improve our platform, prevent fraud and abuse, and communicate with our users, where those interests are not overridden by your rights.

a. Visitors and potential users

• Name, email address and phone number
• Date of birth and postal address, where relevant
• IP address, browser, device and operating-system details
• Referral source, search terms and usage data
• Social media profile information, if you use a social login

b. Vendors, sellers and registered buyers

• Legal name or registered business entity name
• Proof of identity and proof of address
• Business verification documents such as a trade & business licence or certificate of incorporation, where you choose to provide them
• Payment and banking details, collected and stored by secure third-party processors
• Login credentials, support tickets and communication logs
• Listing content you publish, including photos, descriptions, hours and pricing

c. Reviewers

• Display name, review text, ratings and any photos you upload
• Signals we use to confirm a review is genuine

• Directly from you — when you register, claim or list a business, submit a review, complete a form, make a payment, or contact us. Calls to and from us may be recorded for training, monitoring and quality purposes.
• Automatically — through cookies, analytics tools, server logs and session records generated as you use the site.
• From third parties — identity and business verification providers, payment processors, public registries, and publicly available business information used to build or improve a directory listing.

• To create and administer your account and verify your identity
• To verify that a person claiming a business listing genuinely owns or represents it
• To publish, display and maintain directory listings, deals and reviews
• To process transactions, memberships and payments securely
• To provide customer support and respond to your enquiries
• To personalise your experience and show more relevant local results
• To detect, investigate and prevent fraud, spam, scraping, abuse and violations of our policies
• To conduct research and analytics that improve our products and services
• To send service messages, and marketing only where you have opted in
• To comply with legal, regulatory and record-keeping obligations

We do not sell your personal data. We may share it with:

• Service providers — hosting, storage, analytics, email delivery, customer support and identity verification tools
• Payment processors such as Stripe or PayPal, where card data is encrypted and tokenised and never stored on our servers
• Listed businesses — when you send an enquiry, booking or order to a vendor through CaymanCart, we pass on the details needed to fulfil it
• Professional advisers — lawyers, accountants and auditors, where needed for advice
• Authorities and regulators — where required by law, or where we suspect criminal activity or that we have been given false or misleading information
• Prospective investors or acquirers — in the context of a corporate reorganisation or sale of all or part of our business, subject to confidentiality

We require every third-party processor to:

• process personal data only on our documented instructions;
• apply appropriate technical and organisational security measures;
• bind themselves and their staff to confidentiality;
• assist us in meeting our obligations to you; and
• report any data breach to us without undue delay.

Your data may be transferred to, and processed in, countries outside the Cayman Islands — for example the United States, the United Kingdom or the European Economic Area — where our service providers operate. Where we do so, transfers are made only on the basis of an adequacy decision or approved safeguards such as Standard Contractual Clauses, in line with the Data Protection Act and Articles 45 and 46 of the GDPR.

We keep personal data only for as long as is necessary to:

• fulfil the purposes for which it was collected;
• comply with legal and regulatory obligations, including accounting and anti-money-laundering record keeping; and
• establish, exercise or defend legal claims and resolve disputes.

As a general rule, we retain account data for the duration of your relationship with us and for up to four (4) years afterwards. Published listings and reviews may remain visible after an account closes, unless removal is requested and there is no lawful reason to keep them.

Under the Data Protection Act (2021 Revision) and the GDPR you have the right to:

• Be informed — know whether we hold your personal data, what it is and why we use it
• Access — receive a copy of the personal data we hold about you
• Rectification — have inaccurate or incomplete data corrected
• Erasure — ask us to delete data where there is no good reason for us to keep processing it
• Object — object to processing based on legitimate interests, and to direct marketing at any time
• Restriction — ask us to suspend processing, for example while accuracy is checked
• Data portability — receive your data in a structured, machine-readable format, or have it sent to another provider
• Withdraw consent — at any time, where processing is based on consent
• Stop the sale of your data — we do not sell personal data, and we will not begin doing so without your consent

To exercise any of these rights, email info@caymancart.com. We respond within 30 days. You also have the right to complain to the Cayman Islands Ombudsman — ombudsman.ky/data-protection.

We send promotional emails, newsletters and deal alerts only where you have opted in. Every marketing message includes an unsubscribe link, and you can change your preferences in your account settings at any time. We will still send essential service messages — for example receipts, security alerts, verification codes and important changes to your listing or account.

We use cookies and similar technologies to:

• keep you signed in and remember your preferences;
• understand how visitors find and use the directory;
• measure and improve site performance; and
• deliver relevant content and advertising.

We use analytics providers such as Google Analytics. You can control or block cookies through your browser settings, though some parts of CaymanCart may not work properly without them.

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. We do use automated tools to rank search results, recommend listings and flag suspicious activity for human review.

• Encryption of data in transit and at rest
• Role-based access controls and support for two-factor authentication
• Firewalled application and database infrastructure with reputable cloud hosts
• Tokenised payment handling — we never store full card numbers
• Continuous monitoring, logging and regular security review

No system is completely secure, and any transmission over the internet is at your own risk. You are responsible for keeping your login credentials confidential and for activity that takes place under your account.

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Cayman Islands Ombudsman and affected individuals without undue delay, as required by the Data Protection Act.

CaymanCart is not intended for children under 18, and we do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

Business listings, deals, photos and reviews published on CaymanCart are public by design: they can be seen by any visitor and may appear in search engines. Please do not include personal information in a listing or review that you would not want to be public. Business contact details you publish are provided so that customers can reach you — harvesting, scraping or bulk-copying them for marketing or any other purpose is strictly prohibited under our Terms of Service.

CaymanCart links to, and may redirect you to, third-party websites, vendor sites, social platforms and payment providers. Your use of those services is governed by their own privacy and cookie policies. We are not responsible for their practices and encourage you to review them.

We may update this Policy from time to time. The current version is always available on this page with a revised "Last updated" date. Where changes are significant, we will notify you by email or with a notice on the site. Continuing to use CaymanCart after changes take effect means you accept the updated Policy.

To ask a question, exercise your data rights or report a concern, contact our Data Protection Officer:

Data Protection Officer
Cayman Cart Ltd.
10 Market St, #1180
Grand Cayman KY1-9006, Cayman Islands
Email: info@caymancart.com

You can also reach us through our contact form.