Privacy Policy

Effective date: 12 May 2026

1. Who we are

1.1

CaptureLand is the data controller for personal data processed through captureland.org and CaptureLand account and checkout features described here, under the Data Protection Act 2020 (“DPA 2020”).

1.2

Privacy contact: [email protected] (subject: Privacy Request).

1.3

Postal contact: P.O. #1 BOX 335, Montego Bay, St. James, Jamaica

2. Scope

2.1

This Policy covers:

• guest browsing, search, and map use;
• registered accounts, memberships, and saved preferences;
• location-based or coordinate search where you enable it;
• payments, support, and rights requests you send us;
• optional linking or cross-sign-in with companion products where you choose to connect them.

2.2

Third-party data sources, payment processors, analytics providers, and companion products may process data under their own policies when you leave CaptureLand or use their services.

3. What we collect

We collect only what each feature reasonably needs.

4. Lawful bases (DPA 2020)

We process personal data on one or more of:

• Contract — to provide accounts, memberships, and features you request (section 23, performance of contract);
• Legitimate interests — security, fraud prevention, service improvement, and operating a property information platform, balanced against your rights;
• Consent — non-essential cookies, optional marketing, precise location where consent is required, or other processing where consent is required;
• Legal obligation — compliance, court orders, and regulatory duties.

We maintain a processing record for accountability, including purposes, categories, recipients, transfers, and security measures as required by section 16(2) of the DPA 2020.

5. How we use personal data

• provide and secure the Platform, including search, maps, and membership features;
• authenticate users and remember preferences;
• process subscriptions and payments;
• respond to support, correction, and privacy requests;
• detect abuse and protect users and rights holders;
• comply with law and enforce our Terms.

We do not sell personal data.

6. Sharing and processors

We may share data with:

• Stripe and other payment, hosting, email, mapping, and security providers under contract;
• analytics providers such as Google Analytics, where used and permitted;
• professional advisers where required;
• authorities when law or court order requires;
• successors in a merger or reorganisation, subject to this Policy.

Processors must implement appropriate technical and organisational measures and process only on our instructions.

7. International transfers

Data may be processed outside Jamaica (for example cloud hosting). Where Part VII of the DPA 2020 applies, we use appropriate safeguards (adequacy, standard contractual clauses, or other permitted mechanisms). Where you are in the EEA/UK or another jurisdiction with local privacy law, we honour equivalent rights and transfer safeguards required by applicable law.

8. Retention

We keep data only as long as needed for the purposes above, including legal, accounting, fraud-prevention, and complaint records. Account data is deleted or anonymised within a reasonable period after account closure, unless law requires longer retention.

9. Security and breaches

9.1

We use administrative, technical, and organisational measures appropriate to the risk, including encryption in transit, access controls, and secure payment processing. No system is completely secure.

9.2

If a personal data breach is likely to affect your rights, we will notify the Office of the Information Commissioner and affected individuals as required by section 27 of the DPA 2020, including where applicable within 72 hours of becoming aware of a notifiable breach.

10. Your rights (DPA 2020)

Subject to exceptions in the Act, you may request:

Use the contact details on our site with Privacy Request and enough detail to verify your identity. We respond within 30 days, extendable to 60 days where complex.

You may complain to the Office of the Information Commissioner if unsatisfied.

11. Cookies

11.1

Essential cookies support login, security, and core functions.

11.2

Non-essential analytics or preference cookies, where used, rely on consent via the site banner or settings.

11.3

You may control cookies through browser settings; blocking some cookies may limit features.

12. Children

The Platform is not directed at persons under 18. We do not knowingly collect children’s personal data. Contact us to request deletion if you believe we have done so.

13. Changes

We may update this Policy. Material changes will be notified as in the Terms (registered email and/or on-site notice, 30 days where practicable). The effective date appears at the top.

14. Contact

CaptureLand — use the email and postal details below (Privacy Request, Data Subject Access, Erasure, Complaint).