Privacy Policy

1. Introduction

This Privacy Policy explains how Griffiths Motors Sales & Car Rentals ("we", "us") collects, uses, stores, and protects your personal information when you participate in our Affiliate Program. We comply with Jamaica's Data Protection Act, 2020. Your participation in the Affiliate Program is also governed by our Terms and Conditions.

Our registered address is Lot 2-3 Kingsland, Spur Tree, Manchester, Jamaica. For any privacy matter, contact us at [email protected].

2. Information We Collect

When you register and use the Affiliate Program, we collect:

• Identity details: first name and last name
• Contact details: email address and phone number
• Government identification: Tax Registration Number (TRN), the type of ID you select (passport, national ID, or driver's licence), and a scanned copy of that ID document, which you upload during signup
• Account credentials: a password you choose, stored only in hashed (one-way encrypted) form — we never see or store the plaintext value
• Payout details: your bank account details required to pay your commissions
• Activity data: referral link clicks, leads and conversions attributed to your link, and commission balances
• Limited technical data: a basic browser fingerprint (screen resolution, timezone, language, browser identifier) used solely to rate-limit signup and login attempts and prevent abuse. We do not log raw IP addresses or operate any third-party analytics tools on this site.

3. How We Use Your Information

We use the information above only for the following purposes:

• To process and review your affiliate application and verify your identity
• To generate your referral link and track conversions so we can calculate and pay your commissions accurately
• To send you essential service emails — account verification, password reset, and approval status
• To meet legal, tax, and accounting obligations in Jamaica, including reporting obligations linked to your TRN
• To detect and prevent fraud, abuse, and unauthorised access to the platform

We do not use your data for advertising, behavioural profiling, or sale to third parties.

4. Who We Share Your Information With

We share your data only with the parties below, and only to the extent necessary:

• Service providers we use to run the platform — our email delivery provider (for account verification, password reset, and approval emails) and our hosting provider, which stores platform data on encrypted servers outside Jamaica.
• Tax and regulatory authorities in Jamaica — where required by law, including reporting commission payments tied to your TRN.
• Your bank — when you request a withdrawal, to deliver your commission payment using the account details you provide.

We do not sell, rent, or trade your personal information.

5. How We Protect Your Information

We apply the following safeguards:

• All traffic between your browser and our servers is encrypted with HTTPS/TLS
• Passwords are stored only as one-way hashes — we cannot read your password
• Login sessions automatically expire after 10 hours of inactivity
• Uploaded ID documents are stored in a restricted area of the database, accessible only to authorised administrators for verification purposes
• Signup and login are protected by bot-detection (honeypot fields, timing checks) and rate limiting
• Banking and payout details are visible only to authorised finance staff

If you suspect your account has been compromised, email [email protected] immediately. We will notify affected users without undue delay if a personal data breach occurs.

6. Cookies

We use only the cookies required to operate the Affiliate Program. We do not use advertising or analytics cookies.

• session — keeps you signed in; expires when your session ends or after 10 hours of inactivity
• ref — records the affiliate link a customer clicked, so the resulting referral can be credited to you
• ref_campaign — records which marketing campaign a click came from, where supplied

You can clear or block cookies in your browser, but if you block session you will not be able to sign in, and if you block ref referrals will not be attributed to your account.

7. Your Rights

Under Jamaica's Data Protection Act, 2020, you have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate or incomplete
• Request deletion of your data, subject to records we are legally required to keep

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. How Long We Keep Your Data

• Active affiliate accounts: for as long as your account is active
• Closed or inactive accounts: profile data is deleted on request, except where retention is required by law
• Commission, payout, and TRN records: retained for at least 6 years to comply with Jamaican tax and accounting law
• ID document scans: retained while your account is active and deleted within a reasonable period after closure, unless required for fraud or legal investigation

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date below reflects the current version, and we will notify you of material changes by email.

10. Contact

Griffiths Motors Sales & Car Rentals Affiliate Program
Lot 2-3 Kingsland, Spur Tree, Manchester, Jamaica
Privacy: [email protected]
General affiliate inquiries: [email protected]