Privacy Policy
Privacy Policy
List It Jamaica, listitjamaica.com
How List It Jamaica collects, uses, shares and protects personal data, and the rights you have over it under Jamaica's Data Protection Act, 2020.
Effective: January 1, 2025
Last updated: September 11, 2026
Version: 1.1
Governing law: Jamaica
In short
- We don't sell member lists. We do not sell, rent or trade your account details to list brokers. We do, however, carry third-party advertising and analytics, and those companies receive identifiers about your visit. Section 8 names every one of them.
- Your listing is public. Your account is not. Anyone can see what you list. Your email address, password and date of birth are never shown to other members.
- We don't take card payments for items. Payment for an item is arranged directly between buyer and seller. The site never asks for or stores card numbers.
- We count how buyers reach you. When someone views your listing, reveals your phone number or opens WhatsApp from it, we count it. See section 3.
Contents
- Who we are
- What this policy covers
- Information we collect
- Why we use it
- What other users can see
- Who we share it with
- Paying for items
- Cookies, advertising and analytics
- Email and marketing
- How long we keep it
- Sending data overseas
- How we protect it
- Your rights
- Making a request
- Age limit
- Data breaches
- Other sites
- Changes and complaints
1. Who we are
List It Jamaica is an online marketplace where people and businesses in Jamaica advertise, browse, bid on and buy vehicles, property, equipment and general goods. This policy applies to the website at listitjamaica.com and to every account, listing, showroom and message on it.
Automated mail from the platform is sent from [email protected]. That mailbox is not monitored, so privacy requests sent there will not reach anyone. Use the address above.
2. What this policy covers
It covers personal data, meaning information that identifies you or could be linked back to you. It applies whether you are a registered member, a business running a showroom, or a visitor who never signs up.
It does not cover what happens after you leave the site. If a seller moves a conversation to WhatsApp, or you click through to a dealer's own website, that exchange is between you and them. It also does not cover how a seller handles details you give them directly. When you buy from a seller on List It Jamaica, that seller becomes a data controller of your information in their own right, and is responsible for their own compliance with the Act.
3. Information we collect
What you give us
- Account
- Username, email address, and password (stored as a hash and never in readable form).
- Identity
- Your name section 15.
- Contact and address
- Street address, town or city, parish, postal code, country, and a phone number. You may also flag whether that number is reachable on WhatsApp, which controls whether a WhatsApp button appears on your listings.
- Business details
- Company name, showroom name, description and logo, if you register a business account or open a showroom.
- Listings
- Everything you put in a listing: title, description, price, condition, photos, location, and category details such as make, model, year, mileage, bedrooms or lot size.
- Trading activity
- Bids, offers, orders, cart contents, watched items, saved searches and invoices.
- Messages
- Messages you send other members through the site, and questions posted on listings.
- Payment details you choose to publish
- Bank account details, if you choose to enter them in your seller profile so buyers can pay you directly. The field is optional and you can clear it at any time.
- Support
- Emails, reports and anything else you send us about a dispute or a problem.
If you sign in with Facebook or Google
You can create an account or sign in using Facebook or Google instead of a password. When you do, that provider sends us the basic profile information you approve, typically your name, email address and profile picture. We do not receive your password, and we do not post anything to your social accounts. You can see and withdraw that permission in your Facebook or Google account settings.
What we collect automatically
Our servers record your IP address, browser and device type, the pages you view, the searches you run, referring links, and the date and time of each request. We log failed and successful sign-ins, and set a "remember me" token if you ask us to keep you signed in. We also keep a record of listings you have recently viewed, so we can show them back to you.
Engagement counts on listings
We count how many times each listing is viewed. We also count each time a visitor reveals the seller's phone number, and each time a visitor opens WhatsApp from a listing. These counts are shown to the seller and to our administrators so sellers can see how their listings are performing. They are recorded against the listing rather than against a named buyer, and they are separate from the advertising and analytics services described in section 8.
Revealing a phone number or opening WhatsApp does not send your own contact details to the seller. That only happens if you then message or call them.
What we get from others
Google reCAPTCHA returns a score indicating whether a submission looks automated. Where we run partnerships with dealers, banks or credit unions, those partners may tell us that a listing has sold or that a referral converted.
We do not ask for your TRN, national ID number, or any government identification document to open an account. If someone contacts you claiming to be List It Jamaica and asks for those, or for your password or a one-time code, it is not us. Report it to the address in section 1.
4. Why we use it
The Data Protection Act, 2020 requires a lawful basis for each use of personal data. Ours are set out below.
- Run your account
- Create and secure your account, publish your listings, process bids and orders, deliver messages, issue invoices. Basis: performance of our contract with you.
- Record a sale
- Record that an order was placed, generate the invoice for buyer and seller, and track any listing, showroom subscription or featured-listing fees owed on your account. Basis: contract.
- Service messages
- Tell you that you have been outbid, that an item sold, that a message arrived, or that a subscription is ending. Basis: contract. These are not marketing, and they continue while your account is open.
- Show sellers how their listings perform
- Report view counts, phone reveals and WhatsApp opens back to the seller. Basis: contract, since it is part of the listing service we provide.
- Keep the site honest
- Detect fraud, scam listings, stolen goods, duplicate accounts and automated abuse, enforce our Terms, and assist investigations. Basis: our legitimate interest in a safe marketplace, and legal obligation where a law requires it.
- Improve the site
- Understand which categories, searches and pages people use, and fix what is broken. Basis: legitimate interest for basic traffic counting, and your consent for the third-party analytics and session-recording tools named in section 8.
- Advertising
- Display advertising on the site and measure whether our own adverts elsewhere brought people here. Basis: your consent.
- Marketing
- Send newsletters and promotions. Basis: your consent, which you may withdraw at any time (section 9).
- Records and tax
- Keep the business records we are required by law to keep. Basis: legal obligation.
We do not make decisions that significantly affect you by automated means alone. Automated checks may flag a listing or an account for review, but a person decides whether to suspend, remove or restore.
5. What other users can see
This is the part people most often get wrong, so it is worth stating plainly.
Public to anyone, signed in or not: your listings and their photos, your username, the general location you set on a listing (usually town and parish), your showroom page and logo if you have one, and any feedback or rating left about you.
Shown on your listing if you choose: your phone number, behind a "show number" control, and a WhatsApp button if you flagged that number as reachable on WhatsApp. Both are optional and you can remove them at any time.
Visible only to the member you are dealing with: the contents of your messages, and, once a sale is agreed, the name, delivery address and phone number needed to complete it.
Never shown to other members by us: your email address, password and date of birth.
Anything you type into a listing title, description or photo is published. If you put your phone number, your email or your home address in a description, or leave a licence plate, house number or document visible in a photo, it is public and search engines will index it. We can remove the listing, but we cannot un-publish what has already been copied or cached elsewhere.
6. Who we share it with
We do not sell, rent or trade member lists. We share personal data only in these situations:
- Other members, as described in section 5.
- Service providers who work for us, covering web hosting, content delivery and security, image storage, email delivery, backups and error monitoring. They act on our instructions as data processors, under contract, and may not use your data for their own purposes.
- Advertising and analytics companies, as set out in section 8. These are not simple processors. Several of them use what they collect for their own purposes, including profiling across other websites. This is the sharing most likely to matter to you, which is why section 8 names each one.
- Shopping and advertising feeds. We publish a product feed of live listings, including title, price, photograph, category and general location, to Meta and Google so that listings can appear in their shopping and advertising surfaces. The feed contains listing data and the seller's showroom name. It does not contain buyer data, email addresses or phone numbers.
- Delivery and courier services, where a shipping option is used and an address has to be handed over to get the item to you.
- Professional advisers, meaning our attorneys, accountants and auditors, where they need it and are bound by confidentiality.
- Law enforcement, the courts and regulators, where we are required by law to disclose, or where disclosure is necessary to investigate fraud or protect someone's safety.
- A buyer of the business, if List It Jamaica is sold or merged. You would be told before your data moved, and this policy would continue to apply to it.
7. Paying for items
List It Jamaica does not take card payments for items. There is no card checkout on this site. We do not collect, transmit or store card numbers, CVV codes, expiry dates or banking passwords.
Payment for an item is arranged directly between buyer and seller, by cash, bank transfer, deposit, or whatever else the two of you agree. That arrangement sits outside this platform and outside this policy. We are not a party to it, we do not hold funds in escrow, and we cannot reverse, refund or guarantee a payment.
What we do keep is the order record itself: which listing, which buyer, which seller, the agreed price, the date, and the invoice generated from it. That is a record of the sale, not of a payment.
If you enter bank details in your seller profile so buyers can pay you directly, those details are shown to a buyer only in connection with an order they have placed with you. Leave the field blank if you would rather arrange payment another way.
Separately from item payments, your account may carry fees to us for optional services such as showroom subscriptions or featured listings. Where those are payable, we record what is owed and what has been settled. [Confirm and describe how site fees are collected, for example bank transfer or an invoice settled offline, and name any payment provider if one is used.]
If we introduce online card processing in future, we will update this policy and tell you what changes before it goes live, as described in section 18.
8. Cookies, advertising and analytics
Cookies are small files the site stores in your browser. Some are ours. Most are set by the third-party companies listed below, and several of those companies track visitors across other websites too, not just this one. We think you should be able to see the actual list rather than a general description.
Set by us, and necessary for the site to work
- Strictly necessary
- Keeping you signed in, holding your cart, and protecting forms against cross-site request forgery. The site does not work without these and they cannot be switched off.
- Preferences
- Remembering your currency, language, search filters and list or grid view.
- Security
- The "remember me" token, and Google reCAPTCHA's check that a submission is not automated.
Set by third parties
- Google AdSense and Google Ads
- Serve the adverts on this site, and measure whether our own adverts elsewhere brought you here. Google may use cookies and advertising identifiers to personalise what you are shown, here and on other sites. You can control this at myadcenter.google.com.
- Microsoft Clarity
- Records how pages are used, including a replay of mouse movement, scrolling and clicks, and aggregates it into heatmaps. This is session recording, so it captures how you moved through a page. Clarity is configured to mask text input, but you should assume a recording of your visit exists.
- Histats
- Visitor counting and traffic statistics.
- Cloudflare
- Serves and protects the site, filters malicious traffic, and provides basic visitor analytics. All traffic to listitjamaica.com passes through Cloudflare.
- Meta (Facebook)
- Measures whether people who saw our adverts on Facebook or Instagram went on to use the site, and supports the Facebook sign-in option.
- ShareThis
- Provides the social sharing buttons and collects data about sharing activity for its own purposes.
- Other advertising partners
- Our advertising carries additional measurement and audience partners, which at the time of writing include DTSCOUT and Market Metrics. Advertising supply chains change, so this list may not always be exhaustive. If you want to know what is running on a given day, ask us using the address in section 1.
Your choices
You can accept or decline non-essential cookies through the cookie notice on the site, and change your mind later by clearing cookies for listitjamaica.com and choosing again. You can also block or clear cookies in your browser settings. Blocking the strictly necessary ones will sign you out and empty your cart. Advertising will still be shown if you decline, but it will be less targeted.
We do not currently respond to browser "Do Not Track" signals, as there is no agreed standard for what a site should do on receiving one.
9. Email and marketing
Newsletters and promotional email go only to members who ticked the subscription box at registration, or turned it on later in account settings. Every marketing email carries an unsubscribe link, and you can also switch the subscription off in your account at any time. Under the Data Protection Act you have an absolute right to stop direct marketing, and we will act on the request without asking why.
Unsubscribing does not stop service messages such as outbid notices, order confirmations, password resets and security alerts. Those are part of running your account, and they end when you close it.
10. How long we keep it
- Active accounts
- For as long as the account is open.
- Closed accounts
- Deleted or anonymised within [e.g. 90 days] of closure, except where a category below requires longer.
- Order and invoice records
- Kept for [e.g. 7 years] to meet tax and accounting obligations.
- Listings that sold
- Removed from public view, retained as part of the sale record.
- Messages
- Kept for [e.g. 24 months], so disputes can be investigated.
- Server and access logs
- Kept for [e.g. 12 months], then deleted.
- Listing engagement counts
- View, phone-reveal and WhatsApp counts are kept for the life of the listing and its sale record. Detailed visit-level statistics are pruned on a rolling basis and are not kept indefinitely.
- Fraud and ban records
- Where an account is closed for fraud or a serious breach of our Terms, we keep the minimum needed, typically email address, IP address and the reason, to stop the same person re-registering.
Data held by the third parties in section 8 is kept according to their own retention rules, not ours.
11. Sending data overseas
Several services we rely on operate outside Jamaica, mainly in the United States and the European Union. These include our content delivery and security provider, image storage, email delivery, and the advertising and analytics companies named in section 8. Your personal data may therefore be stored or processed outside Jamaica.
The Data Protection Act restricts transfers to countries that do not provide an adequate level of protection. Where we transfer data abroad, we do so on one of the bases the Act permits: the transfer is necessary to perform our contract with you, the receiving country provides adequate protection, we have contractual safeguards in place with the provider, or you have consented.
12. How we protect it
We apply the technical and organisational measures the Act's security standard requires, including:
- TLS encryption across the site, so traffic between your browser and our servers is encrypted in transit.
- Passwords stored as salted hashes, never in readable form. No one at List It Jamaica can look up your password.
- Role-based access, so staff reach only the data their job requires, with administrative actions logged.
- Encrypted backups, and restore testing.
- Rate limiting, CAPTCHA and automated abuse detection on sign-in and listing forms.
- A web application firewall and bot filtering in front of the site.
- Contracts with our processors requiring equivalent security.
No system is perfectly secure, and we will not pretend otherwise. Your part matters too: use a password you have not used anywhere else, do not share it, and sign out on shared devices.
13. Your rights
The Data Protection Act, 2020 gives you the following rights over your personal data. Exercising them is free.
- Access
- Be told whether we hold data about you, what it is, why we have it and who we share it with, and get a copy.
- Correction
- Have inaccurate or incomplete data corrected or completed.
- Erasure
- Have data blocked, erased or destroyed where it is inaccurate, or where we no longer have grounds to keep it.
- Object
- Require us to stop processing that is causing, or is likely to cause, substantial damage or distress.
- Stop marketing
- Require us to stop using your data for direct marketing. This right is absolute and no reason is needed.
- Withdraw consent
- Where we rely on your consent, including for advertising and analytics cookies, withdraw it at any time. Withdrawing consent does not undo processing already carried out.
- Automated decisions
- Require that a decision significantly affecting you is not taken by automated means alone.
- Compensation
- Seek compensation through the courts for damage caused by a breach of the Act.
- Complain
- Complain to the Information Commissioner (section 18).
Much of this you can do yourself. Your account settings let you edit your details, delete listings, clear your bank details, turn the newsletter off and close your account.
14. Making a request
Email [[email protected]] from the address on your account, say which right you are exercising, and give us enough detail to find the data, such as your username and a date range if the request is a narrow one.
We may ask you to confirm your identity before we act. This protects you: we are not going to hand your account history to someone who has merely learned your username.
We respond within 30 days. If a request is unusually complex we will tell you inside those 30 days why we need longer and when to expect an answer. If we cannot do what you asked, we will tell you why, and how to complain.
15. Age limit
You must be at least 18 to register, because buying and selling here means entering into contracts. That is why we ask for date of birth at registration. We do not knowingly collect data from children.
If you believe a child has registered, tell us at the address in section 1 and we will close the account and delete the data.
16. Data breaches
If personal data we hold is lost, stolen or accessed without authorisation, we will notify the Office of the Information Commissioner within 72 hours of becoming aware of it.
Where the breach affects you, we will tell you within the same 72 hours: what happened, what data was involved, what we are doing about it, and what you should do, such as changing a password you may have reused elsewhere. We keep an internal record of every breach, including those that do not meet the notification threshold.
17. Other sites
Listings, showroom pages and adverts may link to sites we do not run, including dealer websites, finance partners and social media. Following a link takes you out of our care and into theirs. Read their privacy policies, because we are not responsible for what they do with your data.
18. Changes and complaints
Changes to this policy
We update this policy when the platform or the law changes. The effective date at the top always shows the current version. For material changes, such as a new category of data, a new purpose, a new class of recipient, or the introduction of online card payments, we will email registered members or post a notice on the site before the change takes effect. Continuing to use List It Jamaica after that means the updated policy applies to you.
Complaints
Come to us first, at the address in section 1, because most problems are faster to fix directly. If you are not satisfied, you have the right to complain to Jamaica's data protection regulator:
Office of the Information Commissioner
Masonic Building, 2nd Floor
45-47 Barbados Avenue
Kingston 5, Jamaica
Phone: (876) 929-8568
Web: oic.gov.jm
Complaining to the Commissioner does not prevent you from also seeking compensation through the courts.