Privacy Policy
At Hashtagz Lab, we believe technology should make running a business easier, and protecting your information is part of that commitment.
This Privacy Policy explains how we collect, use, store, protect and share personal information when you visit our website, enquire about our services, complete our Website Finder, purchase a website or business management system, or use our services.
1. Who We Are
Hashtagz Lab is a web design and digital solutions studio operated by Hashtagz Marketing Solutions Ltd.
For the purposes of this policy, “Hashtagz Lab,” “we,” “our” and “us” refer to the business operating the Hashtagz Lab service.
2. Information We Collect
We may collect the following categories of information.
Information you provide directly
- Name, email address, telephone number and business name.
- Business details, service requirements and responses to our Website Finder.
- Information submitted through contact forms, consultation requests and onboarding questionnaires.
- Brand assets, website content, photographs, products, services and other materials provided for a project.
- Communications with our team, including customer support requests.
Account and system information
When you use our business management systems, information may include account credentials, customer enquiries, appointments, orders, product details, project records and other information entered into the system.
Payment and billing information
We may receive billing details, transaction records, payment status and subscription information. Payment card information is handled by authorized payment processing providers.
Technical information
We may collect IP addresses, browser and device information, security logs, website activity and information necessary to operate and protect our services.
3. How We Use Your Information
We use personal information to:
- Respond to enquiries and service requests.
- Recommend suitable website and business system solutions.
- Prepare quotations, process purchases and manage subscriptions.
- Design, develop, host and maintain websites and business systems.
- Configure customer accounts and complete onboarding.
- Provide technical support and resolve service issues.
- Protect our systems against fraud, unauthorized access and misuse.
- Improve our services and customer experience.
- Maintain appropriate business, financial and legal records.
- Send necessary account, billing and service communications.
- Send promotional communications where permitted by law and supported by the appropriate consent or other lawful basis.
We process information only where we have an appropriate lawful basis under applicable data protection legislation.
4. Marketing Communications
Submitting an enquiry or using our Website Finder does not automatically subscribe you to promotional emails.
Where marketing consent is required, we will provide a separate, optional choice.
You can unsubscribe from promotional communications at any time by following the unsubscribe instructions or contacting admin@hashtagzms.com.
We may still send necessary transactional, billing, security and service-related messages.
5. Information in Client Business Management Systems
Hashtagz Lab provides systems that businesses may use to manage customers, appointments, orders, products, enquiries and projects.
Where a client determines the purposes and methods of collecting information through its business system, that client is generally responsible for its own customer privacy practices. Hashtagz Lab generally processes that information on the client's behalf to provide the contracted service.
Clients are responsible for obtaining any necessary permissions, publishing appropriate privacy notices and ensuring lawful use of customer information.
We may enter into separate data processing arrangements with clients where required.
Our standard systems are not designed for storing sensitive medical records, complete payment card information or other specially regulated information unless expressly agreed with appropriate safeguards.
6. Hosting, Storage and Service Providers
We use or may use trusted third-party technology providers to deliver our services, including providers of:
- Website hosting and cloud infrastructure.
- Database hosting and information storage.
- Account authentication and security.
- Payment processing and subscription billing.
- Email and customer communications.
- Analytics, monitoring and technical support.
Our planned infrastructure may include Netlify or Vercel for website hosting and Supabase for database services. The actual providers used may change as our systems evolve.
Authorized service providers may process information on our behalf where necessary to deliver our services, subject to appropriate contractual, confidentiality and security safeguards.
Where required by applicable law, we will provide further information about relevant recipients or categories of recipients.
We do not sell personal information to third parties for their independent marketing purposes.
7. Cookies and Analytics
Our website and systems may use essential cookies and similar technologies for functionality, account sessions, security and user preferences.
We may introduce optional analytics and advertising technologies, including Google Analytics and Meta Pixel.
These technologies will not be described as active until implemented. Where consent is legally required, appropriate consent controls will be provided before optional tracking is enabled.
You may also manage certain cookies through your browser settings.
8. How Long We Keep Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal requirements.
Our general retention practices include:
- Non-customer enquiries: Information from individuals who do not become customers is generally retained for up to six months after their last interaction, unless another lawful reason justifies a different period.
- Active customer accounts: Information required to provide our services is generally retained while the relevant account or agreement remains active.
- Cancelled subscriptions: Customers have 30 days after their subscription ends to request an available export of their business information or arrange a migration. After that period, active system data may be deleted, subject to applicable legal requirements, unresolved disputes and disclosed backup retention practices.
- Project records: Relevant project information may be retained for a reasonable period to support contractual, accounting and legal obligations.
- Financial records: Billing and transaction information is retained for the period required by applicable accounting, taxation and other laws.
- Backups: Deleted information may remain temporarily in secured backups until those backups are rotated or deleted under our applicable retention schedule.
We will not retain personal information indefinitely without a legitimate purpose.
9. Data Security
We take reasonable technical and organizational steps to protect information against unauthorized access, disclosure, alteration and loss.
These may include secure authentication, restricted access, appropriate cloud infrastructure safeguards, software maintenance and security monitoring.
No online system is completely risk-free. Customers are responsible for protecting their passwords, controlling authorized users and notifying us promptly of suspected unauthorized access.
Where a personal data breach occurs, we will investigate and provide notifications as required by applicable law.
10. International Data Transfers
Hashtagz Lab is based in Jamaica and may use international technology providers or serve customers in other countries.
As a result, information may be stored or processed outside Jamaica.
Where applicable, we will implement appropriate safeguards and comply with relevant requirements governing international transfers of personal information.
11. Your Privacy Rights
Subject to applicable law, you may have rights to:
- Request access to personal information held about you.
- Request correction of inaccurate information.
- Request deletion where appropriate.
- Withdraw consent where processing relies on consent.
- Object to certain processing activities.
- Request restrictions on processing where applicable.
- Request information about how your data is used.
To exercise a privacy right, email admin@hashtagzms.com.
We may request reasonable verification of your identity before fulfilling a request.
If your information is held in a business system operated by one of our clients, you should generally contact that business first. We will assist the client where required.
You may also contact Jamaica's Office of the Information Commissioner regarding concerns within its jurisdiction.
12. Children's Privacy
Our website and services are primarily intended for adults and businesses.
We do not knowingly seek to collect personal information directly from children through our website.
If you believe information has been collected from a child without appropriate authorization, please contact us.
13. Third-Party Websites and Integrations
Our website and services may link to or integrate with third-party platforms.
These providers may have their own privacy policies and terms. We encourage you to review them before providing information or connecting accounts.
14. Changes to This Policy
We may update this Privacy Policy as our services, technology or legal obligations change.
The current version will be available on our website with its effective date. We will provide additional notice of material changes where required.
15. Contact Us
For privacy enquiries, requests or concerns: