Privacy Policy

1. Who this policy covers

This policy applies to two groups of people:

• Portal users — staff of merchant companies who hold an account to create and manage delivery requests.
• Delivery recipients — people to whom a merchant sends a delivery. Recipient details are entered into the Service by the merchant, not by the recipient.

2. Data we collect

Account data (portal users): name, email address, phone number, company affiliation, role, and a securely hashed password. We never store passwords in readable form.

Delivery data (including recipient personal data): recipient name, phone number(s), delivery address and landmarks, optional recipient email, order description, and delivery instructions. This data is provided by the merchant to enable the delivery.

Operational and technical data: delivery status history, timestamps, a strictly-necessary session cookie used to keep you signed in, and standard server logs (e.g. IP address) used for security and troubleshooting.

3. How we use data

• To create, dispatch, and track delivery requests.
• To notify recipients about their delivery (e.g. tracking link by SMS, WhatsApp, or email) where applicable.
• To produce billing reports and, where applicable, invoices.
• To provide support and respond to enquiries.
• To secure the Service, prevent abuse, and meet legal and accounting obligations.

4. Recipient personal data — merchant responsibility

When a merchant enters a recipient's details, the merchant is responsible for having a lawful basis to share that information with us for the purpose of arranging delivery. We process recipient data on the merchant's instructions to perform the delivery. Recipients who wish to access or delete their data may contact us at support@caribgo.com and we will coordinate with the relevant merchant.

5. Sharing with third parties

We share the minimum data necessary with service providers that help us operate the Service:

• Dispatch & courier system — to assign a driver and enable live tracking.
• Workflow automation — to route delivery requests between the Service and the dispatch system.
• Email provider — to send account and delivery notifications.
• Payment gateway — where card payment is offered, to process transactions. Card details are handled by the payment provider and are not stored by us.
• Hosting infrastructure — to run the Service securely.

We do not sell personal data. We do not use advertising or analytics tracking technologies.

6. Cookies

The Service uses a single strictly-necessary session cookie to keep you signed in. It is essential to the operation of the Service and is not used for tracking or advertising. Because it is strictly necessary, it does not require consent.

Your browser's local storage is also used to remember interface preferences (such as light/dark theme and saved filter views). This stays on your device and is not used to track you. We use no analytics, advertising, or third-party tracking cookies.

7. Data retention

Financial and transaction records (invoices, billing records, payment references) are retained for 7 years to meet tax and accounting obligations.

Delivery operational data and recipient details are retained for the life of the merchant's account and then deleted or anonymised within 12 months of account closure, unless a specific record must be kept to satisfy the financial-records obligation above.

8. Security

We use industry-standard measures including encrypted transport (HTTPS), hashed passwords, role-based access control, and restricted network access to protect personal data. No method of transmission or storage is completely secure, but we work to protect your information and to address issues promptly.

9. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. To exercise these rights, contact support@caribgo.com. We may need to verify your identity before acting on a request.

10. International transfers

Some service providers that support the Service may process data outside Saint Kitts and Nevis. Where this occurs, we take reasonable steps to ensure an appropriate level of protection for your data.

11. Children

The Service is intended for business use and is not directed at individuals under 18. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date and, where appropriate, communicated to account holders.

13. Contact

For privacy questions or to exercise your rights, contact support@caribgo.com. For formal legal notices, contact legal@caribgo.com.

Caribbean Commerce Ltd, Saint Kitts and Nevis.