Privacy Policy

Version 2.0 · Effective July 2026 · Compliant with the Jamaica Data Protection Act 2020

This policy explains how Vibez Party Rentals collects, uses, stores, and protects your personal information, including government-issued identity documents collected as part of our equipment rental process. We are committed to handling your data lawfully and transparently.

1. Who We Are (Data Controller)

Vibez Party Rentals is the data controller responsible for personal information collected through this website and during the booking process.

Contact us with any privacy concerns: via WhatsApp from our homepage, or by email at the address shown in your booking confirmation.

2. What Personal Data We Collect

Category	Examples	Why collected
Identity	Full name, email address, phone number	To process your booking and communicate with you
Account credentials	Email address, password (stored as a one-way hash)	To secure your customer account
Government-issued ID	Jamaican Driver's Licence (front & back) or Passport — including ID number, expiry date, and the photo/image of the document	To verify your identity and establish legal accountability for rented equipment
Digital signature	Drawn signature image captured on your device	To record your agreement to our Rental Agreement
Transaction data	Booking references, items rented, dates, amounts paid, delivery zone	To fulfil your rental order and maintain financial records
Location data	Delivery address	To deliver equipment to your event location
Technical data	Anonymised IP address (hashed, not stored in plaintext)	Rate limiting, fraud prevention, and legal audit trail

3. Legal Basis for Processing

We process your personal data on the following legal bases under the Data Protection Act 2020 (Jamaica):

Performance of contract: Processing your booking, delivery, and payment details is necessary to fulfil our rental agreement with you.
Legitimate interests: Collecting and verifying government-issued ID is necessary to protect our equipment from theft, damage, and fraud. This interest is proportionate and does not override your fundamental privacy rights.
Legal obligation: Retaining financial records is required for tax compliance purposes.
Consent: Where you have provided explicit consent (e.g., for marketing communications, if offered in future).

4. Government ID — Special Category Data

Government-issued identity documents are sensitive personal data. We collect them solely to verify your identity and establish legal accountability for rented equipment, as disclosed in our Rental Agreement. We do not use ID images for any other purpose, and we do not sell or share them with any third party except as required by law or legal proceedings.

ID images are stored in encrypted cloud storage (Cloudflare R2) with strict access controls. Only authorised staff can access ID images, and only through an authenticated admin interface. No ID images are accessible via any public URL.

5. Automated Verification

When you upload your ID, we run an automated cross-check against the Government of Jamaica Traffic Ticket Lookup portal to verify that your driver's licence number exists in the national traffic system. We also use AI-powered optical character recognition (OCR) to compare the details you entered with the text visible on your uploaded ID. The results of these checks are reviewed by our staff and are used solely to identify potentially fraudulent documents.

If our automated checks flag an issue with your ID, you will be notified, and no booking will be confirmed until the issue is resolved.

6. How We Share Your Data

We do not sell your personal data. We may share your data only in the following circumstances:

Service providers: Cloud infrastructure providers (Cloudflare) who process data on our behalf and are contractually bound to protect it.
Legal proceedings: Where we have a legitimate legal basis to pursue a claim for damage, theft, or fraud, your identity information (including your uploaded ID and digital signature) may be disclosed to legal counsel, law enforcement (including the Jamaica Constabulary Force), or the court.
Legal obligation: Where required by a valid court order or other legal obligation under Jamaican law.

7. Retention Periods

Data type	Retention period	Reason
Government ID images (front & back)	2 years after the rental event date	Legal protection period for equipment damage and theft claims
Digital signature images	2 years after the rental event date	Same as above
Booking and transaction records	7 years from date of transaction	Tax Administration Jamaica financial record requirement
Customer account data	Until account deletion request, or 3 years of inactivity	Ongoing service provision
Security and audit logs	12 months	Fraud detection and security incident investigation

8. Your Rights Under the Data Protection Act 2020

You have the following rights regarding your personal data:

Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may request correction of inaccurate data.
Right to erasure: You may request deletion of your data, subject to our legal retention obligations (e.g., we may be unable to delete booking records within the 7-year tax retention period).
Right to object: You may object to processing based on legitimate interests, subject to our overriding legitimate grounds.
Right to restrict processing: In certain circumstances, you may request that we restrict the processing of your data.
Right to data portability: You may request your data in a portable electronic format.

To exercise any of these rights, contact us via WhatsApp from our homepage. We will respond within 30 days.

9. How We Protect Your Data

All data is transmitted over encrypted HTTPS connections.
Government ID images and signatures are stored in a private, access-controlled cloud storage bucket. No public URL exists that can access these files.
Passwords are stored using PBKDF2 with SHA-256 and 100,000 iterations — they are never stored in plaintext.
IP addresses are anonymised (one-way hashed) before storage.
Admin access to ID records requires two-factor authentication.
We do not use third-party analytics cookies or tracking pixels.

10. Cookies and Tracking

This website uses only essential session data (stored in your browser's local storage, not as cookies) to maintain your login session. We do not use tracking cookies, advertising cookies, or third-party analytics scripts that collect your personal data.

11. Changes to This Policy

We may update this policy periodically. Material changes will be communicated to registered customers by email. The date at the top of this page reflects the date of the most recent revision.

12. Complaints

If you believe your data protection rights have been violated, you may lodge a complaint with the supervisory authority in Jamaica:

Office of the Information Commissioner (OIC)
Jamaica · www.oic.gov.jm

We would appreciate the opportunity to address your concerns directly before you contact the OIC — please reach out to us first.

Vibez Party Rentals · Jamaica · Privacy Policy v2.0 · July 2026 · Compliant with the Data Protection Act 2020