Privacy Policy
1. Scope and Data Controller
Nevics Partners Limited is the data controller for the personal data used to operate the Platform, administer accounts, assess and manage services, verify Service Partners, receive payments, assure quality, provide support and protect Platform integrity.
This Policy applies to website visitors, Customers, site contacts, prospective and active Service Partners, commercial account representatives and other persons who interact with Nevics.
Nevics intends to process personal data in accordance with Jamaica's Data Protection Act, 2020 and the eight data-protection standards. Nevics will maintain registration with the Office of the Information Commissioner as required, appoint a Data Protection Officer where legally required, and complete required data-protection governance and impact-assessment obligations.
2. Data Collected
Nevics may collect:
- identity and account data, including name, signature, account credentials, photograph and verification ID;
- contact and location data, including email, telephone, service/billing address, site contact and access instructions;
- service data, including problem description, asset/property information, urgency, measurements, budget, drawings, photographs, video, documents and service history;
- transaction data, including quotation, invoice, deposits, milestones, payment status, refunds and payout records;
- Service Partner data, including qualifications, licences, certifications, insurance, company information, TRN, banking information, references, portfolio, availability and performance;
- operational and quality data, including assignment, acceptance, arrival, progress, variations, safety records, inspections, defects, rework, complaints, warranty, ratings and scorecards;
- communications, including Platform messages, email, support, telephone or WhatsApp records where integrated; and
- device and usage data, including IP address, browser/device data, authentication events, cookies, audit logs, pages used and referral source.
Nevics does not intend to store full payment-card credentials. Card or bank payment information should be processed by the relevant bank or approved payment processor.
3. Collection Sources
Data may come directly from the person, a Customer or authorised representative, a Service Partner, a referee, a credential issuer, public/professional register, bank or payment provider, device/browser, security/analytics provider or another lawful source.
A person who gives Nevics another individual's details must have authority to do so and should tell that person how Nevics will use the information.
4. Purposes and Processing Conditions
Nevics uses personal data to:
- create and secure accounts;
- respond to requests and provide quotations and contracted services;
- verify identity, credentials, ownership, references and payment;
- match and assign Service Partners;
- process, reconcile and document payments;
- coordinate scope, schedule, communication, variations and completion;
- protect health, safety, property and Platform integrity;
- conduct quality assurance, complaint, warranty and incident processes;
- keep legal, tax, accounting, insurance and professional records;
- prevent fraud and enforce agreements;
- maintain, secure, analyse and improve the Platform;
- provide aftercare and relevant service reminders; and
- send marketing where the person has consented or where otherwise lawfully permitted.
Depending on the activity, processing may be necessary to take requested steps or perform a contract, comply with law, protect vital interests, pursue Nevics' legitimate interests without overriding individual rights, establish or defend legal claims, or act on consent. Nevics will not treat consent as the only basis where another lawful condition applies.
5. Matching and Partner Scoring
Nevics may shortlist and assign Service Partners using verified skill, required licence, location, availability, capacity, quality, reliability and relevant customer or asset experience. Safety and competence requirements are mandatory. High-risk or unclear work may receive human technical review.
Internal scores may support coaching, prioritisation, restriction or suspension. A Service Partner may request reasonable review of a decision that materially affects Platform work access by writing to info@nevicspartners.com.
Nevics does not sell favourable ratings or allow paid status to override safety, quality or integrity controls.
6. Disclosure
Nevics may disclose necessary data to:
- assigned or prospective Service Partners and authorised Customer/site representatives;
- hosting, storage, software, email, messaging, analytics, identity, security, payment, accounting and support providers acting under appropriate arrangements;
- banks, insurers, auditors, attorneys, engineers, architects or other professional advisers;
- regulators, licensing bodies, law-enforcement authorities or courts where required or reasonably necessary;
- a genuine investor, purchaser or successor under confidentiality and applicable legal safeguards; and
- any entity, government or otherwise as required by law.
Nevics currently anticipates use of service categories including cloud storage (which may include Cloudinary), transactional email (which may include Resend), opted-in marketing email (which may include Mailchimp), banks and approved payment processors. Nevics may change providers after appropriate review and will update this Policy where the change materially affects individuals.
7. International Transfers
Technology providers may store or process data outside Jamaica. Nevics will assess providers and transfer locations and use contractual, technical or organisational safeguards required by Jamaican law. Information about material safeguards may be requested from info@nevicspartners.com.
8. Retention Schedule
Nevics applies the following operational schedule, subject to a longer or shorter period required by law, insurance, professional duty, litigation hold or a documented necessity:
| Record | Standard retention |
|---|---|
| Unconverted request or abandoned quotation | 12 months after last activity |
| Closed account profile | 24 months after closure |
| Service Orders, quotations, variations, invoices, payment and tax records | 7 years after completion or final transaction |
| Completion, warranty, complaint, incident and safety records | 7 years after closure, or longer while a claim, warranty or investigation remains possible |
| Service Partner identity and credential records | Active relationship plus 24 months; longer only for legal, safety, fraud or dispute reasons |
| Marketing records | Until opt-out; minimal suppression data retained to honour the opt-out |
| Security and access logs | Ordinarily 12 months, extended where required for an incident or investigation |
| Routine backups | Deleted through a secure rotation ordinarily not exceeding 90 days, subject to technical and legal holds |
At the end of the period, data will be deleted, anonymised or securely restricted unless continued retention is justified.
9. Security
Nevics uses risk-appropriate technical and organisational measures, including role-based access, strong authentication, encryption where appropriate, audit logging, secure configuration, backup and recovery, vendor review, confidentiality obligations, staff/partner training and incident procedures.
No system is completely secure. Users must protect passwords, devices and verification codes and promptly report suspected compromise.
10. Personal-Data Incidents
Nevics will investigate, contain, assess and document suspected personal-data incidents. Where required under Jamaica's Data Protection Act, Nevics will report a breach or contravention to the Office of the Information Commissioner within 72 hours after becoming aware and will notify affected individuals in the required form and time.
11. Rights
Subject to Jamaican law, a person may request information about whether Nevics processes their data, the data and purpose, intended recipients and other required matters; request access or correction; object to or request cessation of certain processing; seek deletion or blocking where applicable; withdraw consent for future processing; and complain to Nevics or the Office of the Information Commissioner.
Nevics may retain or withhold information where required to protect another person's rights, comply with law, preserve legal privilege or claims, prevent fraud or meet another lawful exception.
Requests should be sent to info@nevicspartners.com. Nevics may request proportionate identity verification before disclosing or changing information.
12. Marketing
Optional marketing consent is separate from acceptance of service terms. Every marketing email will include an unsubscribe method. Opting out of marketing does not prevent necessary account, payment, safety, job or support communications.
13. Children and Vulnerable Persons
The Platform is intended for account holders aged 18 or older. Nevics does not knowingly permit minors to create Customer or Service Partner accounts. Information about a child or vulnerable person should be supplied only where necessary for safe service delivery and by an authorised person.
14. Changes and Complaints
Material changes to this Policy will be posted with a revised effective date and brought to registered users' attention where reasonably practicable. Nevics will obtain a new consent where the law requires it.
Privacy questions or complaints:
Nevics Partners Limited — Privacy Lead
52 West Trade Way, Portmore Central Plaza, Shop #11, St. Catherine, Jamaica
Individuals may also contact the Office of the Information Commissioner, Jamaica, through its official website and published contact channels.
