Data Protection Statement
Effective: October 1, 2026 | Version 1.1
1. Our commitment
The Portal is designed and operated to align with the Data Protection Act, 2020 (Jamaica). In summary, that means personal data on the Portal is processed fairly and lawfully; collected for specified emergency-preparedness purposes and not used incompatibly with them; adequate, relevant, and not excessive; kept accurate; retained no longer than necessary; processed in accordance with data subjects' rights; protected by appropriate technical and organizational measures; and transferred abroad only with adequate protection.
2. Roles
The Jamaica Hotel and Tourist Association is the data controller and operates the Portal. The Association maintains its obligations under the Act, including registration with the Office of the Information Commissioner where required.
3. Team members' data
Managers enter team members' contact details so that emergency plans, drills, and alerts can reach them; the manager confirms authority to do so at entry. Every team member can see their own details on their role page, and can have them corrected or removed by their manager or by writing to us.
4. Requests
Data subject requests (access, correction, erasure, restriction, objection) go to admin@jhtareadiness.org and are handled within the timeframes the DPA prescribes.
5. Security measures
Encryption in transit and at rest; per-property row-level access controls; least-privilege administrative access; alert and send logs kept as evidence; regular review of access.
6. Breach handling
Suspected personal data breaches are assessed immediately, and notification to the Office of the Information Commissioner and to affected persons is made where the DPA requires it.
7. Exports and portability
The Portal maintains periodic exports of its data under the Association's control, and any property may request an export of its own data at any time.
8. Sub-processing and locations
Hosting and email delivery are performed by service providers in the United States and the European Union under contractual safeguards. A current list of sub-processing arrangements is available on request.
9. Contact
admin@jhtareadiness.org. Complaints may also be made to the Office of the Information Commissioner (Jamaica).