Log In

Don't have an account? Sign up now

Lost Password?

Sign Up

Privacy Policy

Introduction

Cayman Contractor Connection (“Cayman Contractor Connection,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and safeguard your personal data when you use our website, mobile site, or any associated services (together, the “Platform”).

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.

This Privacy Policy forms part of our Terms & Conditions. By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

Who We Are

Cayman Contractor Connection is the data controller of your personal data for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This means that we determine the purposes for which, and the manner in which, your personal data is processed.

Our full contact details are set out in Clause 12 of this Privacy Policy.

Data We Collect

We collect and process the following categories of personal data in connection with your use of the Platform:

(a) Information you provide directly

  • Registration details such as name, email address, phone number, business name, and password.
  • Contractor credentials such as Trade & Business licences, professional certifications, insurance documents, and related records.
  • Payment and billing details (processed via authorised third-party providers such as Stripe — we do not store full card information).
  • Content you upload to the Platform, including logos, images, service descriptions, reviews, or messages.

(b) Information collected automatically

  • Technical data such as IP address, browser type, operating system, device identifiers, and access times.
  • Usage data such as search queries, profile views, click activity, and referral sources.
  • Cookies and similar tracking technologies (see our Cookie Policy for more details).

(c) Information from third parties

  • Verification data provided by regulators, licensing authorities, or professional bodies where applicable.
  • Payment confirmation or fraud-check information from payment processors.
  • Publicly available information such as reviews or business registration details.

How We Use Personal Data

We process personal data only where we have a lawful basis to do so and only for specific, explicit, and legitimate purposes. In particular, we use your personal data for the following purposes:

  • To operate and provide the Platform – including creating and managing accounts, enabling search and messaging, hosting contractor profiles, and publishing reviews.
  • To verify contractors and credentials – including checking Trade & Business licences, professional certifications, and insurance documents, and displaying a “Verified” status where applicable.
  • To manage subscriptions and payments – including processing membership fees, managing billing records, and handling account renewals.
  • To provide customer support – including responding to enquiries, troubleshooting issues, and resolving complaints.
  • To maintain trust and safety – including monitoring use of the Platform, detecting fraud, enforcing our Terms & Conditions, and moderating reviews or content.
  • To comply with legal and regulatory obligations – including recordkeeping, tax, and reporting obligations.
  • To improve and develop the Platform – including monitoring usage, analysing trends, and enhancing features and security.
  • For marketing and communications – including sending service updates, newsletters, promotional messages, or survey invitations, where you have consented or where we rely on legitimate interests in accordance with data protection law.

Lawful Bases for Processing

Under UK GDPR, we must have a valid lawful basis for each way in which we process personal data. Cayman Contractor Connection relies on the following lawful bases:

  • Contract – where processing is necessary to perform our contract with you, including creating and managing your account, providing Platform functionality, verifying contractors, and processing subscription payments.
  • Consent – where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing emails, newsletters, or optional communications. You may withdraw your consent at any time.
  • Legitimate Interests – where processing is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. Examples include monitoring use of the Platform, improving services, preventing fraud, moderating reviews, and promoting our services to existing users.
  • Legal Obligation – where processing is necessary for compliance with a legal or regulatory obligation, such as keeping financial records for tax purposes or responding to lawful requests from public authorities.

Data Sharing and Third Parties

We do not sell or rent your personal data. We only share personal data where it is necessary for the operation of the Platform, where you have provided consent, or where we are legally required to do so. In particular, we may share your personal data with:

  • Payment processors – Processors such as PlugNpay, to process subscription payments securely. We do not store full payment card details.
  • Hosting and IT service providers – who provide cloud storage, security, and technical support for the Platform.
  • Verification and compliance partners – where necessary to check licences, certifications, or other credentials.
  • Analytics and communication providers – such as email delivery or analytics tools, used to improve Platform functionality and communications.
  • Legal and regulatory authorities – where disclosure is required by law, regulation, or court order, or to respond to lawful requests from public authorities.
  • Professional advisers – including lawyers, accountants, or auditors, where necessary for the protection of our business and compliance with legal obligations.
  • Corporate transactions – if Cayman Contractor Connection undergoes a merger, acquisition, restructuring, or sale of all or part of its business or assets, personal data may be transferred as part of that transaction, subject to appropriate confidentiality and security protections.

Where we share data with third-party service providers, they are contractually required to handle personal data securely, use it only for authorized purposes, and comply with applicable data protection laws.

International Data Transfers

As we operate in the Cayman Islands and use service providers located outside the United Kingdom, your personal data may be transferred to and stored in countries outside the UK. This may include countries that do not provide the same level of data protection as the UK.

Where we transfer personal data outside the UK, we ensure that appropriate safeguards are in place to protect it, as required by UK GDPR and the Data Protection Act 2018. These safeguards may include:

  • Transfers to countries that the UK has recognised as providing an adequate level of protection (“adequacy regulations”).
  • Standard Contractual Clauses (SCCs) or equivalent contractual safeguards approved by the UK Information Commissioner’s Office (ICO).
  • Binding corporate rules or other recognised mechanisms.

You may request a copy of the safeguards (or information about how to obtain a copy) used for international transfers by contacting us using the details set out in Clause 12.

By using the Platform, you acknowledge that your personal data may be transferred, processed, and stored outside the UK, subject always to compliance with applicable data protection laws.

Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data:

  • Account information – retained for as long as your account remains active. If you close your account, we will delete or anonymise your personal data within a reasonable period, except where retention is required by law.
  • Contractor verification documents – retained for as long as the verification remains valid and for a reasonable period afterwards, unless required longer by law.
  • Payment and billing records – retained for at least six (6) years in accordance with UK tax and financial recordkeeping obligations.
  • Reviews and public content – may remain visible on the Platform even after account closure, to preserve Platform integrity, unless removal is specifically requested and permitted by law.
  • Technical logs and usage data – retained for operational and security purposes for a limited period, typically no longer than twelve (12) months, unless longer retention is necessary for security or fraud-prevention.

When personal data is no longer required, we will securely delete, anonymise, or archive it.

Your Rights

As a data subject under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights in relation to your personal data:

  • Right of Access – to request confirmation of whether we hold personal data about you and to obtain a copy of that data.
  • Right to Rectification – to request correction of any inaccurate or incomplete personal data.
  • Right to Erasure (“Right to be Forgotten”) – to request deletion of your personal data where there is no lawful reason for us to continue processing it.
  • Right to Restrict Processing – to request that we limit the processing of your personal data in certain circumstances.
  • Right to Data Portability – to request a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
  • Right to Object – to object to processing carried out on the basis of our legitimate interests, or to object to receiving direct marketing.
  • Rights in relation to automated decision-making – to request human intervention, express your view, and contest decisions made solely by automated means where such decisions have a legal or significant effect on you.

You may exercise your rights at any time by contacting us using the details set out in Clause 12. We will respond to all valid requests within one month, or longer where permitted by law.

Security of Personal Data

We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:

  • The use of secure servers, firewalls, and encryption technologies (such as SSL/TLS) to protect data in transit.
  • Access controls to ensure that personal data is only accessible to authorised staff and service providers who need it for legitimate business purposes.
  • Regular monitoring, testing, and assessment of our security procedures to maintain data integrity and resilience.
  • Contractual obligations requiring third-party service providers to implement adequate security measures in line with applicable data protection laws.

While we use all reasonable efforts to safeguard personal data, no system can guarantee absolute security. Users are responsible for maintaining the confidentiality of their account credentials and for ensuring that access to their devices and accounts is appropriately secured.

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage, and deliver relevant content. For more detailed information about the types of cookies we use, the purposes for which we use them, and how you can manage your cookie preferences, please see our Cookie Policy, which forms part of this Privacy Policy.

 Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or our data protection practices, you may contact us using the details below:

  • Email: [caymancontractorconnection@gmail.com]

If you are not satisfied with our response, you also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO), the supervisory authority for data protection in the United Kingdom. The ICO’s contact details are available at https://ico.org.uk.