CareLink Jamaica (“CareLink”, “we”, “us”) operates carelinkja.com and the CareLink platform. This policy explains what personal data we collect, how we use it, who we share it with, and the rights you have under the Jamaica Data Protection Act 2020.

1. Who is the data controller

CareLink Jamaica is the data controller for personal data processed through this site. You can reach us at privacy@carelinkja.com for any privacy question or to exercise your rights.

2. What data we collect

From parents

Full name, email, WhatsApp number, parish + community
Bookings (sitter, date, hours, children's ages, special instructions)
Payment method choice (no card numbers stored — handled by WiPay / PayPal)
Reviews and messages exchanged with sitters

From sitters

Profile information you choose to publish (bio, rate, availability)
JCF Police Certificate document (uploaded to verify trust status)
Bank, Lynk, or PayPal payout details (visible only to parents on confirmed bookings)
Bookings, earnings, and reviews

Automatically

Browser type, device, screen size (for layout)
IP-derived country/parish (for regional results)
Privacy-friendly analytics via Plausible — no cookies, no cross-site tracking, no personal identifiers

3. Why we use your data

To match parents with sitters in their parish
To process bookings and (where you choose card / PayPal) facilitate payment
To verify Police Certificates using AI document review (Claude vision)
To send WhatsApp confirmations and reminders
To investigate safety incidents or suspected fraud
To improve the platform — understanding which pages are used (aggregate, not individual)

4. Who we share your data with

Sitters / parents you book or apply to — name, parish, booking details, message contents
Supabase (US-hosted database) — encrypted at rest, used to store all account data
WiPay Caribbean / PayPal — only when you choose card or PayPal payment
Twilio — to send WhatsApp messages on our behalf
Anthropic Claude — for AI matching, AI-assisted Police Cert review, and AI text summaries; no personal data is used to train Anthropic models
Vercel — site hosting (CDN, no analytics)
Plausible — privacy-friendly analytics (no cookies, no PII)

We do not sell your data, ever. We do not run third-party advertising networks on this site.

5. Cross-border transfers

Some of our service providers (Supabase, Vercel, Anthropic, Twilio, PayPal, Plausible) process data outside Jamaica — typically in the United States and EU. Each has its own security and data-protection certifications, and your data is transferred under standard contractual clauses where applicable.

6. How long we keep your data

Account data: while your account is open + 12 months after deletion (for fraud / safety records)
Booking + payment records: 7 years (Jamaican tax + financial recordkeeping requirements)
Police Certificates: kept while the verified badge is active, deleted on request after profile deletion
Messages between users: 24 months
Analytics: 12 months, aggregate only

7. Your rights under the Jamaica Data Protection Act

Access — request a copy of the data we hold about you
Correction — fix anything inaccurate
Erasure — close your account and delete your profile (some records retained for fraud / tax as above)
Object — to certain types of processing
Withdraw consent — for any processing that relies on consent
Complain — to the Office of the Information Commissioner of Jamaica if you believe we've mishandled your data

Email privacy@carelinkja.com to exercise any of these rights. We respond within 30 days.

8. Children's data

Parents include their children's ages and any special instructions when booking. We treat this as sensitive — visible only to the sitter on the confirmed booking, and deleted from message history after 24 months. We do not knowingly collect personal data from anyone under 18 directly.

9. Security

All connections to carelinkja.com use TLS 1.3
Database encryption at rest (Supabase / AWS-grade)
Row-level security policies enforce that only the right user sees the right data
Police Certificate documents stored in a private Supabase Storage bucket; signed URLs expire after 1 hour
No card numbers ever touch our servers (handled directly by WiPay / PayPal)

10. Cookies

We use a single first-party authentication cookie (Supabase session). We do not use third-party advertising or tracking cookies. Plausible analytics is cookieless.

11. Changes to this policy

We'll post any updates here and bump the “Last updated” date above. Material changes (e.g. new categories of data processed) will be announced via in-app notice or WhatsApp before they take effect.

12. Contact

Email privacy@carelinkja.com for any privacy question. For all other queries: hello@carelinkja.com.

Privacy Policy