Jamaica DPA 2020 compliant

Privacy Policy

Last updated: 25 June 2026 · Effective immediately

LinkUp Jamaica Limited (“LinkUp”, “we”, “us”) operates the LinkUp marketplace that connects Jamaican customers with verified skilled tradespeople. This policy explains what personal information we collect, why we collect it, how we keep it safe, and the rights you have under The Data Protection Act, 2020 of Jamaica.

If anything here is unclear, write to us at help@linkupjamaica.com and a human will respond within five business days.

1Who we are (Data Controller)

LinkUp Jamaica Limited is the data controller responsible for personal information processed through the LinkUp marketplace, including our website at linkupjamaica.com and our mobile applications.

Registered in Jamaica. All data-protection enquiries, requests to exercise your rights, and complaints should be sent to help@linkupjamaica.com.

2What personal data we collect & why

We only collect data we genuinely need to connect you with the right pro (or, if you're a pro, with the right customer) and to keep the marketplace safe and legal.

Category	Examples	Why we use it	Legal basis (DPA 2020)
Identifiers & contact	Full name, email address, phone number	Create and authenticate your account; deliver booking notifications; recover your account	Contract (necessary to provide the service you requested)
Government identity documents (providers only)	National ID / Driver's Licence / Passport image, TRN where required	Verify provider identity (KYC), comply with anti-fraud screening, protect customers booking work in their homes	Legal obligation + Legitimate interest in platform safety
Work photos & portfolio media	Before/after job photos, portfolio images, completion-proof photos	Display provider capability to customers; verify that paid jobs were actually completed before releasing escrow	Contract + Consent (you choose what to upload)
Location data	Parish (e.g. Kingston, St. Andrew), service address, optional live GPS while a job is active	Match you to nearby providers; dispatch jobs to the correct address; share ETA with the customer during travel	Contract (service address) + Consent (live GPS)
Payment & transaction data	Bank transfer / Lynk payment references, booking amounts, payouts, dispute records	Take payment for bookings, hold funds in escrow, pay providers, process refunds, prevent fraud	Contract + Legal obligation (financial record-keeping)
Communications	In-app messages, SMS, email, support tickets	Resolve disputes, audit safety incidents, improve the service	Legitimate interest in keeping the marketplace safe and operable
Device & technical data	Device model, OS version, IP address, app version, crash logs, push-notification token	Security monitoring, abuse prevention, technical troubleshooting	Legitimate interest in network and information security

We do not sell your personal data, ever — and we do not share it with advertisers.

3How we collect your data

Directly from you — when you create an account, complete a profile, upload a photo, post a job, or contact support.
From your device — IP address, device model, app version, crash logs, push token (only when you grant the notification permission).
From transactions — booking history, message history, and payment metadata generated by your activity on the platform.
From identity-verification partners — checks against government databases where the law allows, used only for vetting providers.

4How we share data with third parties

We work with a small number of vetted processors who help us run LinkUp. Each is contractually bound to use your data only on our instructions and to protect it to at least the standard required by the Jamaica Data Protection Act, 2020.

Processor	What they do for us	Location
Sagicor Bank Jamaica	Business bank account — customer payments & provider payouts	Jamaica
SendGrid (Twilio Inc.)	Transactional email delivery	United States
Twilio Inc.	SMS / OTP delivery	United States
Daily.co Inc.	Video call hosting (where used)	United States
Google LLC (Firebase Cloud Messaging)	Push notification delivery	United States
MongoDB Inc.	Encrypted database hosting	United States / EU region
Cloudflare Inc.	Edge proxy, WAF, DDoS protection	United States

We may also share your data when we are legally required to do so — for example, in response to a valid court order, a request from the Jamaica Constabulary Force, or to defend a legal claim.

5International data transfers

Some of the processors listed above store data outside Jamaica (primarily the United States and the European Union). We rely on the safeguards permitted by section 24 of the DPA 2020 — namely contractual data-protection clauses with each processor and a requirement that they apply a level of protection at least equivalent to Jamaica's.

You can request a list of these safeguards by emailing help@linkupjamaica.com.

6How long we keep your data

Active accounts — for as long as the account is open.
Closed accounts — basic identity + transaction records are retained for 7 years after closure to comply with Jamaica's financial record-keeping laws. Everything else is deleted or anonymised within 90 days.
Identity documents (KYC) — retained for 5 years after the provider's last booking, in line with anti-fraud and proceeds-of-crime obligations.
Work photos & messages — retained for the duration of any related dispute window plus 2 years, then deleted.
Marketing consent records — kept while you remain subscribed, plus a permanent record that you opted out (so we don't accidentally re-contact you).

7How we keep your data safe

All data in transit is encrypted with TLS 1.2 or above (HTTPS).
Government ID images and payment information are encrypted at rest.
Passwords are hashed with bcrypt — we never see your password in plain text.
Access to personal data inside LinkUp is restricted on a need-to-know basis and logged.
LinkUp never collects card numbers — payments are made by bank transfer or Lynk to our Sagicor business account.
We run continuous monitoring for unusual access patterns and alert our team if anomalies are detected.

8Your rights under the DPA 2020

You have the following rights regarding your personal data. To exercise any of them, email help@linkupjamaica.com from the address on your account.

Right of access — request a copy of the personal data we hold about you.
Right to rectification — ask us to correct inaccurate or incomplete data.
Right to erasure — ask us to delete your data, subject to retention obligations above.
Right to restriction — ask us to pause processing while a complaint or correction is investigated.
Right to object — object to processing that relies on legitimate interest, including marketing.
Right to data portability — receive your data in a structured, commonly-used machine-readable format.
Right to withdraw consent — where processing is based on consent (e.g. live GPS, marketing email), you can withdraw at any time.
Right not to be subject to automated decision-making — LinkUp does not make significant automated decisions about you; any vetting decision is reviewed by a human.
Right to complain to the regulator — you may lodge a complaint with the Office of the Information Commissioner of Jamaica.

We will respond to any rights request within 30 days (or sooner where the DPA requires a faster response).

9Cookies & analytics

LinkUp uses a small number of strictly-necessary cookies to keep you signed in and to remember your preferences. We also use server-side analytics (counts of bookings, completion rates) which do not require cookies in your browser. We do not use advertising cookies or third-party trackers.

10Children

LinkUp is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has registered, please contact us and we will remove the account immediately.

11Changes to this policy

If we make material changes to this policy we will notify you by email and via an in-app banner at least 30 days before the changes take effect. The current version is always available at linkupjamaica.com/privacy.

12Contact & complaints

LinkUp Jamaica Limited
Email: help@linkupjamaica.com

If you are unhappy with our response you may also complain to the regulator: The Office of the Information Commissioner, Jamaica.

Questions about your data?

Write to us at help@linkupjamaica.com and a real person will reply within five business days.

Install LINKUP

Add to home screen for the best experience

We use cookies to keep you signed in and improve your experience. You can choose what to allow. (Jamaica DPA 2020)