Privacy policy

What we collect

• Enquiries: your name, email, phone or WhatsApp number, service interests, message, budget and property details you choose to provide.
• Accounts and services: account and contact details, property addresses, access instructions, photographs you upload, quotations, bookings, job records and communications.
• Solar orders: products, quantities, currency, delivery and installation details, order status and payment references. Stripe handles card entry; we do not receive your full card number or card security code.
• Technical and consent records: IP address, browser information, page or referral URL, requests, diagnostic events and the consent wording shown when you submit a form.

Fields marked required are needed to handle that particular request. Other fields are optional. Please avoid sending identity documents, medical information or unrelated sensitive information through the enquiry forms.

Why we use it

We use this information to respond to enquiries, prepare quotations, provide services, deliver orders, arrange requested installations, manage your account, process payments, maintain accounting records, prevent misuse and diagnose technical problems.

Depending on the activity, processing is based on your request or consent, steps needed to enter or perform an agreement, our legal obligations, or legitimate operational interests where permitted. Enquiry consent is for communication about your request, not an agreement to unrelated marketing. You can ask us to stop optional follow-up or change your contact preference.

We may use software to prioritise enquiries and help staff draft replies. When staff use our AI-assisted email feature, relevant contact, enquiry and property information may be sent to Anthropic to prepare a draft. Contact us if you have a concern about an automated suggestion or want a person to review how your enquiry was handled.

Who receives information

Authorised Yardworks personnel and service providers receive the information needed for their work. Providers used by the website include:

• Vercel for hosting, Supabase for accounts, database and file storage, and Inngest for background workflows.
• Resend for email delivery, Stripe for payments, and hCaptcha for spam and abuse prevention.
• Sentry for error and performance diagnostics. Diagnostic reports can contain request details and information needed to investigate a failed form or consent record. Automatic session replay is disabled.
• Anthropic when AI-assisted email drafting is used. Delivery partners and installers may receive relevant contact, delivery or site details when needed to fulfil your request.

We may also disclose information where required by law, to professional advisers handling our obligations or claims, or at your direction. We do not sell enquiry lists or treat an enquiry as permission to share your details for unrelated advertising.

Processing outside Jamaica

Some of these technology providers process information outside Jamaica, including in the United States and other countries where they or their service providers operate. The country depends on the service. Cross-border processing must use a basis permitted by applicable Jamaican data-protection law; this notice does not mean that you waive your rights or that every overseas destination has been approved by the OIC. Contact us for information about the providers and arrangements relevant to your data.

How long we keep information

Our retention policy distinguishes enquiries from records needed to provide services and meet legal obligations:

• Enquiries that do not become customers: normally up to 12 months after the last meaningful contact, then review for deletion or anonymisation unless an ongoing request, complaint or legal obligation requires retention.
• Active customer and property information: while needed for the customer relationship and requested services. Unnecessary access instructions and other operational details should be removed when no longer needed.
• Order, invoice, payment and tax-supporting records: normally six years after the relevant accounting year, and longer where a tax requirement, unresolved dispute, continuing warranty or other legal obligation requires it.
• Consent and audit records: for the period needed to evidence the related enquiry or transaction and deal with applicable claims. Restricted backups follow their separate rotation cycle; our scheduled application backups use a 90-day retention window.

These are retention and review rules, not a promise of automatic deletion on a particular date. Requests are reviewed so we can remove information that is no longer needed without destroying records we must retain. Where we must keep some information, we will explain the reason in response to your request.

Cookies, security and your choices

We use browser storage for sign-in, the solar cart, currency preferences and public offline assets. See our Cookie notice for details and browser controls. Payment and anti-abuse providers may use their own technologies.

We use access controls and other technical measures to protect information, but no system is risk-free. Protect your password, sign out on shared devices and contact us promptly if you believe your account or information has been compromised.

Your privacy rights

Subject to applicable law, you can ask to access or correct your information, request deletion where retention is no longer justified, object to or ask us to stop certain processing, and withdraw consent for future consent-based processing. Withdrawing consent does not undo processing already lawfully completed. Some requests may affect services that need the information.

Email us with “Privacy request” in the subject and enough information to identify the relevant account or enquiry. We may need proportionate identity verification before releasing or changing personal information. Do not send identity documents unless we have agreed a suitable way to provide them. You can also contact Jamaica’s Office of the Information Commissioner about a data-protection concern.

Other services and policy updates

Following links to WhatsApp, social media or a payment provider takes you to another service with its own privacy terms. We update this policy when our practices change and show the effective date above. Material changes requiring fresh consent will not be treated as accepted merely because this page was updated.