Privacy Policy

PRIVACY POLICY

Insurance Association of Jamaica

Effective Date: February 20, 2026

1. Introduction

The Insurance Association of Jamaica (“IAJ”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data in accordance with the Data Protection Act, 2020 of Jamaica (“DPA”). This Privacy Policy explains how we collect, use, process, store, disclose, and safeguard personal data when you access or interact with our website, which is located at:

https://www.iaj-online.com

By using our website, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of the Data Protection Act, IAJ acts as a Data Controller, meaning we determine how and why personal data is processed.

2. Information We Collect Through Comments

When visitors leave comments on our website, we collect the information displayed in the comments form, which may include your name, email address, and website (if provided). In addition, we automatically collect the visitor’s IP address and browser user agent string. This information is collected primarily for security purposes, including spam detection and website integrity.

An anonymised string (also known as a “hash”) created from your email address may be transmitted to the Gravatar service to determine whether you are using that service. The Gravatar service is operated by Automattic Inc., and its privacy policy is available at https://automattic.com/privacy/. Once your comment is approved, your profile picture, if associated with Gravatar, may be visible to the public in connection with your comment.

Comments and associated metadata are retained indefinitely. This enables us to automatically recognise and approve follow-up comments, rather than holding them for moderation.

3. Media Uploads

If you upload images to our website, you should avoid uploading images that contain embedded location data (EXIF GPS). Visitors to the website may be able to download images and extract any location data contained within them. IAJ is not responsible for personal information voluntarily embedded in uploaded media files.

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve functionality, enhance user experience, maintain session integrity, and support security features.

If you leave a comment on our site, you may opt in to saving your name, email address, and website in cookies for convenience. These cookies allow you to avoid re-entering your details when posting subsequent comments. Such cookies remain active for one year unless manually deleted.

When you visit our login page, a temporary cookie is set to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

Upon logging in, additional cookies are established to save your login credentials and screen display preferences. Login cookies typically last for two days, while screen options cookies may remain active for up to one year. If you select the “Remember Me” option, your login session may persist for two weeks. Logging out removes login cookies.

If you edit or publish content on the website, an additional cookie may be saved in your browser. This cookie does not contain personal data but identifies the post ID of the article edited and expires after one day.

Users may adjust browser settings to refuse cookies; however, certain website functionalities may be limited as a result.

5. Embedded Content from Third-Party Websites

Articles and pages on our website may include embedded content such as videos, images, or articles hosted by third-party platforms. Embedded content behaves in the same manner as if you had visited the external website directly.

These third-party websites may collect data about you, use cookies, embed additional tracking technologies, and monitor your interaction with their content, particularly if you have an account with them and are logged in. IAJ does not control the data practices of these external platforms and encourages users to review their respective privacy policies.

6. Account Registration and User Profiles

When users register for an account on our website, we collect and store the personal information provided within their user profile. Registered users may view, edit, or delete their personal information at any time, except for their username, which cannot be changed. Website administrators may also access and edit user profile information for administrative and operational purposes.

If a password reset is requested, the requesting user’s IP address may be included in the reset email as part of standard security protocols.

7. How Long We Retain Personal Data

IAJ retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, administrative, and security obligations.

Comments and related metadata are retained indefinitely to facilitate efficient moderation and historical record-keeping.

User profile data remains stored for the duration of the user’s account. Users may request deletion of their personal data, subject to legal and administrative retention requirements.

Certain information may be retained where required for compliance with Jamaican law, dispute resolution, fraud prevention, or security enforcement.

8. Where Your Data Is Sent

Visitor comments may be processed through automated spam detection services to protect the integrity of the website. These services may operate outside of Jamaica; however, appropriate safeguards are implemented to ensure that personal data is processed securely and in compliance with the Data Protection Act.

Additionally, certain technical data may be processed by third-party hosting providers, cloud infrastructure services, or security monitoring platforms used to maintain the website.

9. Lawful Basis for Processing

Under Jamaica’s Data Protection Act, personal data must be processed on a lawful basis. IAJ processes personal data based on one or more of the following grounds:

• The data subject’s consent

• Performance of a contract

• Compliance with legal obligations

• Legitimate interests pursued by IAJ

• Public interest functions relevant to industry representation

10. Your Rights Under the Data Protection Act

In accordance with the Data Protection Act, individuals have the right to request access to the personal data held about them. If you have an account on this website or have left comments, you may request an exported file of the personal data we hold about you, including information you have provided directly.

You may also request correction of inaccurate information or request erasure of personal data where applicable. However, certain information may be retained where required for administrative, legal, or security purposes.

Requests should be submitted in writing to the contact details provided below.

Individuals also have the right to lodge a complaint with the Office of the Information Commissioner (OIC) in Jamaica if they believe their data protection rights have been violated.

11. Data Security

IAJ implements appropriate technical and organisational safeguards to protect personal data from unauthorised access, disclosure, alteration, or destruction. While we strive to protect your personal data, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

12. International Transfers

Where personal data is transferred outside of Jamaica, including through cloud-based hosting providers or embedded third-party services, IAJ ensures that appropriate safeguards are in place to maintain compliance with the Data Protection Act.

13. Data Breach Procedures

In the event of a data breach that poses a risk to the rights and freedoms of individuals, IAJ will take appropriate steps to contain the breach and, where required by law, notify affected individuals and the Office of the Information Commissioner in accordance with statutory requirements.

14. Changes to This Policy

IAJ reserves the right to amend this Privacy Policy at any time. The updated version will be published on our website with the revised effective date.

15. Contact Information

For questions regarding this Privacy Policy or to exercise your rights under the Data Protection Act, please contact:

Insurance Association of Jamaica
Website: https://www.iaj-online.com
Email: info@iaj-online.com
Telephone: (876).920.3385
Physical Address: 3 Richmond Ave., Kingston

You may also contact the Office of the Information Commissioner, Jamaica, for further guidance regarding your rights under the Data Protection Act.