Privacy Policy

1.Who this policy covers

This policy applies to customers, partner businesses and their staff, drivers, couriers, service Providers, applicants, website visitors and other people whose personal information is processed through Voryn Connect.

Until a separate Voryn Connect operating company is identified in the Platform or another legal notice, Voryn Group Ltd. operates the Voryn Connect brand and is responsible for determining how and why personal information is processed for the Platform, except where another organization independently determines its own processing. References in this policy to "Voryn Connect", "we", "us" and "our" refer to that operator in its capacity as data controller.

We process personal information in accordance with the Data Protection Act, 2020 (Jamaica) and other applicable Jamaican laws.

2.Information we collect

• Account information: name, phone number, email address, profile details, authentication information and optional profile photo. Passwords are stored as secure hashes rather than readable passwords.
• Identity and verification information: where required for a Provider, driver, courier, rental operator, payment feature or fraud review, this may include date of birth, government-issued identification details, driver's licence information, business registration details, TRN, permits, vehicle documents, banking/payout information and verification files.
• Order, ride, delivery, rental and booking information: goods or services requested, Provider, pickup and delivery details, trip route information, addresses, timestamps, pricing, status history, cancellation information and dispute records.
• Payment and wallet information: transaction records, balance information displayed in the Platform, payment method type, top-ups, transfers, refunds, payouts and withdrawals where those features are enabled. Full card numbers are not stored by Voryn Connect when card details are handled directly by a payment processor.
• Location information: precise or approximate device location, pickup and destination points, driver/courier position during matching and fulfilment, trip-route information and location events used for safety, fraud prevention, support and dispute resolution.
• Communications and content: in-app messages, support requests, contact-form submissions, reviews, ratings, photos, feedback and other content you send us or other Platform users.
• Device, security and usage information: device type, operating system, app version, browser, IP address, sign-in events, security events, logs, crash information, referral information and records used to detect abuse or troubleshoot problems.
• Information from third parties: Providers, payment providers, identity-verification services, fraud-prevention vendors, mapping providers, regulators or other parties may provide information where lawful and necessary to operate or protect the Platform.

3.How we use your information

• to create and administer accounts;
• to match customers with Providers, drivers and couriers and to process orders, rides, rentals and service bookings;
• to show navigation, live trip progress, delivery status and estimated arrival information;
• to process or facilitate payments, refunds, payouts and wallet features through appropriate financial or payment providers where applicable;
• to verify Providers, drivers, vehicles and businesses and monitor required documents;
• to prevent fraud, account takeover, money laundering, abuse and other unlawful or unsafe activity;
• to investigate complaints, disputes, safety incidents, chargebacks and refund requests;
• to send service messages, security alerts, verification messages and, where permitted, marketing that you can opt out of;
• to improve, secure, measure and troubleshoot the Platform;
• to comply with legal, regulatory, tax, accounting, record-keeping and law-enforcement obligations.

4.Our legal bases

Depending on the activity, we process personal information because it is necessary to perform a contract or take steps at your request before entering a contract, because you consented, because we have a legitimate interest that is not overridden by your rights, because processing is necessary to comply with law, or because another lawful basis under Jamaican data-protection law applies.

Examples of legitimate interests include Platform security, fraud prevention, service quality, dispute handling and protecting users and Providers. Where we rely on consent, you may withdraw it for future processing, although withdrawing consent does not make earlier lawful processing unlawful.

5.Who we share information with

• Providers and people fulfilling your request: we share the information reasonably needed to complete an order, ride, delivery, rental or service. This can include your name, contact options, pickup/delivery location, order details and service instructions.
• Payment and financial providers: banks, payment service providers, card processors, payout providers and fraud/compliance vendors may receive information needed to process payments, support wallet functionality, verify identity, prevent fraud and comply with financial regulation.
• Technology processors: cloud hosting, object storage, communications, mapping/routing, analytics, monitoring, identity verification, support and security providers process information for us under contractual and security requirements.
• Professional advisers: lawyers, accountants, auditors, insurers and consultants may receive information where reasonably necessary and subject to confidentiality obligations.
• Legal, regulatory and safety disclosures: we may disclose information to regulators, courts, law-enforcement bodies, emergency services or other competent authorities where required or permitted by law or necessary to protect life, safety, rights or the integrity of the Platform.
• Corporate transactions: information may be disclosed as part of a genuine financing, restructuring, merger, acquisition or sale, subject to appropriate safeguards and applicable law.

6.Location data

• Customers: with the permissions required by your device, location can be used to suggest pickup or delivery points, calculate routes, match nearby Providers and show trip progress.
• Drivers and couriers: location may be collected while online or fulfilling a trip to match requests, provide navigation, show progress, calculate distance, support safety and investigate disputes.
• Historical trip data: route and location events may be retained for a limited period where necessary for safety, fraud prevention, dispute resolution, legal claims and service quality. We do not keep precise live-position history indefinitely.
• Access controls: access to precise location information is restricted to roles and systems that need it. Sensitive support or operational access may be logged and audited.

7.How long we keep information

We use documented retention periods based on the purpose of the information, legal requirements, fraud and safety needs, and the need to establish, exercise or defend legal claims. Unless a longer or shorter period is required by law or a specific operational need, our current target schedule is:

• Account profile data: while the account is active, then deleted or anonymised after account closure except for information we must retain.
• Precise live-location telemetry not needed for a transaction record: retained only for the period needed to operate or secure the live service and then deleted or reduced.
• Trip, delivery and booking location records: generally up to 24 months after completion, then deleted, aggregated or reduced in precision unless a dispute, safety investigation, fraud matter or legal obligation requires longer retention.
• Support tickets, complaints and disputes: generally up to 3 years after closure, or longer where necessary for an active claim or legal obligation.
• Security and access logs: generally up to 12 months, unless needed longer for an active security, fraud or legal investigation.
• Provider verification and identity documents: while the Provider relationship is active and for up to 2 years afterwards, unless law, fraud prevention, a regulator or an active dispute requires longer retention.
• Payment, payout, refund and financial records: retained for the period required by applicable financial, accounting, tax, anti-money-laundering or payment-provider obligations.
• Fraud, abuse and legal-enforcement records: retained for as long as reasonably necessary to protect the Platform, comply with law and prevent repeated abuse, subject to periodic review.

When a retention period ends, we delete, anonymise, aggregate or otherwise de-identify the information unless continued retention is lawfully required. You may request account deletion as explained in section 11 and on our Delete your account page.

8.How we protect information & respond to breaches

• Passwords are protected using strong one-way hashing and authentication systems include controls against repeated failed attempts.
• Access to personal information is role-based and limited to people and systems that need it for an authorized purpose.
• Sensitive data is transmitted over encrypted connections and verification documents are stored with restricted access.
• Payment, payout and wallet-related activity is recorded so that material changes can be investigated and audited.
• We use logging, monitoring, security review and incident-response procedures to detect and manage suspected compromise.

If we become aware of a data breach or other contravention that must be reported under Jamaican law, we will assess it promptly and notify the Office of the Information Commissioner within the legally required timeframe, including the applicable 72-hour reporting window where required. We will also notify affected individuals where the law requires or where notification is appropriate to help them protect themselves.

9.Your rights

Subject to the conditions and exemptions in the Data Protection Act, 2020 (Jamaica), you may have the right to:

• ask whether we process your personal information and obtain access to it;
• have inaccurate or incomplete information corrected;
• request deletion or erasure where we no longer have a lawful reason to keep the information;
• request that processing be restricted in circumstances recognized by law;
• object to certain processing, including direct marketing;
• withdraw consent where consent is the basis for future processing;
• receive information about significant automated decision-making and object to a decision based solely on automated processing where the Act gives that right;
• complain to the Office of the Information Commissioner of Jamaica.

To exercise a right, email info@vorynconnect.com or use an available in-app privacy tool. We may verify your identity before disclosing or changing information. We will respond within the period required by law and will explain if an exemption prevents us from fulfilling all or part of a request.

10.Automated decisions & fraud controls

We may use automated tools to flag unusual account activity, suspicious transactions, safety concerns, document expiry, duplicate accounts or other risk indicators. These tools may result in a temporary hold, request for additional verification or referral to a human reviewer.

Where a decision would have a significant effect on you and is based solely on automated processing, we will provide the protections required by Jamaican law, including information about the decision and a route to request human review or otherwise challenge it where applicable.

11.Deleting your account & downloading your data

Where the feature is available, you can request deletion from inside the app and may also request a copy of your data. We may require re-authentication because a device in another person's possession should not be able to erase or export your account without verification.

• Delete your account: use the account-deletion option in Profile or Privacy & Security, or follow the instructions on our Delete your account page. Active trips, open disputes, unsettled withdrawals, legal holds or remaining balances may need to be resolved before final deletion.
• Download your data: use the available privacy export tool or email us. We may redact or limit information about other people to protect their rights.

Deletion removes or de-identifies information that we no longer have a lawful reason to keep. Transaction, fraud, dispute, accounting, legal and other records may remain where retention is required or permitted by law, with direct identifiers removed or minimized where appropriate.

12.Children

Voryn Connect accounts are intended for adults aged 18 or older. We do not knowingly permit a person under 18 to create a standard user account. If you believe a minor has provided personal information contrary to our rules, contact us so we can investigate and take appropriate action.

13.International transfers & storage

Some service providers may process or store information outside Jamaica, including in the United States or other countries where our cloud, storage, communications, mapping, monitoring or payment vendors operate. Before making or permitting a transfer, we assess the destination and the safeguards available under Jamaica's Data Protection Act.

Where required, we use contractual, organizational and technical safeguards designed to ensure an appropriate level of protection, and we require processors to protect information, use it only for authorized purposes and manage sub-processors appropriately. We also maintain records of key processors and transfer arrangements as part of our compliance programme.

14.Cookies & website data

Our website and dashboards may use session cookies, local storage or similar technologies needed for authentication, security, preferences and core functionality. We may also use limited technical logs and analytics needed to protect and improve the service. Where a non-essential cookie or tracking technology requires consent under applicable law, we will request that consent before using it.

15.Changes to this policy

We may update this policy when our services, vendors, legal obligations or data practices change. For material changes, we will give notice through the Platform or another appropriate channel before the change takes effect where required. The effective date above identifies the current version.

16.Contact us

For privacy questions, data-subject requests or concerns about how we process personal information, email info@vorynconnect.com or write to Voryn Connect, Portmore, St. Catherine, Jamaica. We may publish a dedicated Data Protection Officer or privacy contact when that appointment is finalized. You may also contact the Office of the Information Commissioner of Jamaica about matters within its jurisdiction.

See also our Terms & Conditions, Delete your account page and Safety page.