1. Who we are
1.1OFMOP is the data controller for personal data processed through ofmop.org and OFMOP account features described here, under the Data Protection Act 2020 (“DPA 2020”).
1.2Privacy contact: [email protected] only (subject: Privacy Request).
1.3Ownership disclosure is not published on the public site. For lawful ownership or corporate enquiries, email [email protected] with subject Ownership Disclosure Request.
2. Scope
2.1This Policy covers:
- guest browsing and map use;
- registered accounts, onboarding, and saved preferences;
- location-based features you enable;
- listings, notices, and support or rights requests you send us;
- optional linking or cross-sign-in with companion products where you choose to connect them.
2.2Third-party businesses, agents, carriers, analytics providers, and companion products may process data under their own policies when you leave OFMOP or use their services.
3. What we collect
| Category | Examples | Typical context |
|---|---|---|
| Account & identity | Email, display name, phone if provided, account IDs | Registration, sign-in, support |
| Location | Approximate or precise device location when you allow it | Map, parish or district views, nearby results |
| Usage & device | IP address, browser, device type, pages or map layers viewed, filters | Service delivery, security, improvement |
| Listings & submissions | Business details, property or service listings, notices, images, messages | Content you choose to publish or send |
| Communications | Support mail, complaints, ownership or privacy requests | Customer and compliance records |
| Cookies & similar tech | Session, preferences, analytics (where used) | Site function and measurement |
We collect only what each feature reasonably needs.
4. Lawful bases (DPA 2020)
We process personal data on one or more of:
- Contract — to provide accounts, map features, and services you request (section 23, performance of contract);
- Legitimate interests — security, fraud prevention, service improvement, and operating a community information platform, balanced against your rights;
- Consent — non-essential cookies, optional marketing, precise location where consent is required, or other processing where consent is required;
- Legal obligation — compliance, court orders, and regulatory duties.
We maintain a processing record for accountability.
5. How we use personal data
- provide and secure the Platform, including maps, listings, and notices;
- authenticate users and remember preferences;
- show parish, district, or proximity-based results when you enable location;
- publish and moderate User Content you submit;
- respond to support, privacy, ownership, and rights requests;
- detect abuse and protect users and third parties;
- comply with law and enforce our Terms.
We do not sell personal data.
7. International transfers
Data may be processed outside Jamaica (for example cloud hosting). Where Part VII of the DPA 2020 applies, we use appropriate safeguards (adequacy, standard contractual clauses, or other permitted mechanisms).
8. Retention
We keep data only as long as needed for the purposes above, including legal, accounting, and complaint records. Account data is deleted or anonymised within a reasonable period after account closure, unless law requires longer retention. Public listings or notices may remain visible in archived or cached form where removal is not technically or legally practicable.
9. Security and breaches
9.1We use administrative, technical, and organisational measures appropriate to the risk. No system is completely secure.
9.2If a personal data breach is likely to affect your rights, we will notify the Office of the Information Commissioner and affected individuals as required by section 27 of the DPA 2020, including where applicable within 72 hours of becoming aware of a notifiable breach.
10. Your rights (DPA 2020)
Subject to exceptions in the Act, you may request:
| Right | Section |
|---|---|
| Access | s.6 |
| Rectification | s.7 |
| Erasure | s.8 |
| Restriction | s.9 |
| Data portability | s.10 |
| Objection | s.11 |
Email [email protected] with Privacy Request and enough detail to verify your identity. We respond within 30 days, extendable to 60 days where complex.
You may complain to the Office of the Information Commissioner if unsatisfied.
12. Children
The Platform is not directed at persons under 18. We do not knowingly collect children’s personal data. Contact [email protected] to request deletion if you believe we have done so.
13. Changes
We may update this Policy. Material changes will be notified as in the Terms (registered email and/or on-site notice, 30 days where practicable). The effective date appears at the top.
14. Contact
OFMOP — [email protected] only (Privacy Request, Data Subject Access, Erasure, Complaint, Ownership Disclosure Request).