Privacy Policy

1Who We Are

CaribSys Ltd. is a Caribbean systems integrator headquartered in Castries, Saint Lucia.

CaribSys Ltd. is the data controller for personal data collected through this website. This means that we determine why and how that information is processed.

CaribSys Ltd.Castries, Saint LuciaEmail: privacy@caribsys.io

2Information We Collect

The information we collect depends on how you interact with the website.

Enquiries

When you submit an enquiry, we collect:

• Your name
• Your company or organisation
• Your email address
• Your telephone number, if you provide one
• The area of interest and industry you select, if you provide them
• The information included in your message
• The date and time of your submission
• Any additional information you voluntarily provide during subsequent communications

Enquiries are delivered to sales@caribsys.io.

Newsletter subscriptions

When you subscribe to receive CaribSys insights and updates, we collect:

• Your email address
• The date and time of your subscription request
• Information necessary to record and manage your subscription preferences

Subscription requests are initially delivered to info@caribsys.io and are managed through our Constant Contact mailing list.

Careers and applications

The careers link opens your own email application and allows you to contact join@caribsys.io directly. It does not submit information through the CaribSys website or website server.

If you contact us regarding a career opportunity, we may receive:

• Your name and contact information
• Your résumé or curriculum vitae
• Employment history, qualifications and professional experience
• Information included in your email or application materials
• Any other information you voluntarily provide

Please do not send passwords, financial account details, government identification numbers, health information or other unnecessary sensitive personal data through the website or by email.

Technical and usage information

When you visit the website, Vercel, our hosting provider, may process limited technical information required to deliver and protect the website, including:

• Internet Protocol address
• Browser and device type
• Operating system
• Requested page or path
• Referring page
• Date and time of access
• Request timing and performance information
• Information necessary to maintain website security and availability

We also use Vercel Web Analytics to receive aggregated information about website traffic, page views, approximate geographic regions and general usage.

Vercel Web Analytics is delivered through a first-party request from our own domain. It does not use third-party cookies and is not used by CaribSys to identify individual visitors or track them across unrelated websites.

3How We Use Personal Data

We use personal data to:

• Respond to enquiries and requests
• Understand your organisation’s requirements
• Prepare for potential assessments, proposals, projects or services
• Manage existing and prospective business relationships
• Send requested CaribSys insights and updates
• Maintain and manage newsletter subscriptions
• Review career enquiries and applications
• Communicate with applicants
• Operate, maintain and secure the website
• Detect and prevent spam, abuse, fraud and security incidents
• Understand aggregate website usage and improve the visitor experience
• Maintain appropriate business records
• Comply with legal and regulatory obligations
• Establish, exercise or defend legal claims

Submitting a general enquiry does not automatically subscribe you to our newsletter. Newsletter communications are sent only when you separately request them or where otherwise permitted by applicable law.

4Legal Bases for Processing

Where applicable law requires a legal basis, we process personal data under one or more of the following grounds:

• Pre-contractual steps or performance of a contract: when you request information, ask us to assess a requirement, request a proposal, engage our services or apply for an opportunity.
• Legitimate interests: to respond to business enquiries, manage relationships, review applications, operate and improve the website, maintain security and conduct ordinary business activities.
• Consent: when you subscribe to CaribSys insights and updates or when we specifically request your permission for another purpose. You may withdraw your consent at any time.
• Legal obligations: when processing is necessary to comply with applicable laws, regulations, court orders or lawful governmental requests.

5How Website Forms Work

The CaribSys website does not maintain a database of enquiry or newsletter submissions.

When you submit a form:

• The information is held temporarily in server memory for the duration of the request.
• The information is passed to Resend for email delivery.
• No submission file, database record or key-value record is created by the website.
• The website route does not intentionally log the content of your submission.

Resend processes and temporarily retains sent messages, message content, email metadata, delivery status and related logs as part of providing its email-delivery service.

The forms use a hidden local honeypot field to detect automated spam submissions. This feature does not use third-party scoring, device fingerprinting or an external CAPTCHA service. If the hidden field is completed, the submission is discarded.

6How We Share Personal Data

CaribSys does not sell or rent personal data.

We use selected service providers to operate the website and manage communications:

• Vercel: website hosting, infrastructure, access logging and aggregated web analytics.
• Resend: transmission and delivery of website enquiry and newsletter-request emails.
• Constant Contact: storage and management of newsletter subscriptions and delivery of CaribSys insights and updates.
• Professional advisers and contractors: where reasonably necessary and subject to appropriate confidentiality obligations.

Cloudflare provides authoritative DNS services for the CaribSys domain. The website is configured using DNS-only records. Cloudflare does not proxy the website’s application traffic and does not set cookies on caribsys.io under this configuration.

We may also disclose personal data:

• When required by applicable law or valid legal process
• To protect the rights, safety, systems or property of CaribSys or others
• To investigate suspected fraud, abuse or security incidents
• In connection with a merger, restructuring, financing, acquisition or transfer of all or part of our business, subject to appropriate safeguards

Our service providers may use authorised subprocessors when delivering their services.

7Newsletter Communications

If you subscribe to receive CaribSys insights and updates, we will use your email address for that purpose.

Our newsletter communications may include information about:

• Technology and infrastructure
• Resilience, data protection and recovery
• Broadcast and media systems
• Caribbean business and technology developments
• CaribSys services, capabilities and company updates

You may unsubscribe at any time by using the unsubscribe link included in our emails or by contacting privacy@caribsys.io.

Withdrawing consent does not affect processing that took place before your withdrawal.

After you unsubscribe, we may retain limited information on a suppression list to ensure that we honour your request and do not unintentionally add you back to the mailing list.

8Careers and Recruitment

Career enquiries are initiated through a standard email link and are sent using the applicant’s own email provider. The website does not collect or transmit application materials.

When CaribSys receives an application, we may use the information to:

• Review your suitability for current or potential opportunities
• Communicate with you about your application
• Verify information you provide
• Maintain appropriate recruitment records
• Comply with legal obligations and defend legal claims

We will not use application information for newsletter marketing without separate permission.

9Cookies and Similar Technologies

CaribSys does not use advertising cookies, marketing pixels, cross-site behavioural tracking or device fingerprinting on this website.

Vercel Web Analytics is our only website analytics service. It uses aggregated measurements, does not use third-party cookies and does not allow CaribSys to reconstruct an individual visitor’s browsing activity across different websites.

The website does not currently use:

• Google Analytics
• Meta Pixel
• Advertising trackers
• Embedded YouTube or Vimeo players
• Google Maps
• Third-party web fonts
• Third-party iframes
• Service workers used for tracking

Because the website does not use nonessential cookies or tracking technologies, CaribSys does not display a cookie-consent banner.

If this changes, we will update this Privacy Policy and introduce consent controls where required.

10Third-Party Links

The website contains links to CaribSys’s LinkedIn and Instagram accounts. It may also contain other external links in the future.

No personal data is sent to those platforms merely because the links appear on our website. However, when you select an external link, you leave the CaribSys website and the third party may process information according to its own terms and privacy policy.

CaribSys does not control third-party websites or their privacy practices.

11International Data Transfers

CaribSys is headquartered in Saint Lucia. Some service providers supporting the website and our communications operate in the United States or other countries.

Personal data may therefore be processed outside your country of residence, where privacy laws may differ.

Where required, we use providers that offer recognised contractual or legal safeguards for international transfers, including data-processing agreements, standard contractual clauses or other valid transfer mechanisms.

12Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

General enquiries

We generally retain enquiry correspondence for up to 24 months after our last meaningful interaction with you.

If an enquiry develops into a customer, supplier or contractual relationship, relevant information may be retained for the duration of that relationship and afterward as required for contractual, accounting, tax, warranty, regulatory or legal purposes.

Newsletter subscriptions

We retain newsletter subscription information for as long as you remain subscribed.

If you unsubscribe, we will stop sending newsletter communications and may retain limited information on a suppression list to honour your request.

Career applications

If an application does not result in employment or engagement, we generally retain the application for up to 12 months after the conclusion of the relevant recruitment process, unless:

• You consent to a longer period
• A longer period is required by law
• Retention is reasonably necessary to establish, exercise or defend legal claims

If you become an employee or contractor, relevant application information may become part of your employment or engagement record.

Service-provider records

Resend currently retains email content, metadata, delivery information and associated logs for up to 30 days under its standard service-retention period.

Vercel, Constant Contact and other providers may retain technical or account information according to their applicable service terms and retention schedules.

When information is no longer required, we will delete, anonymise or securely dispose of it.

13Data Security

We use reasonable administrative, technical and organisational measures designed to protect personal data against accidental or unlawful loss, misuse, unauthorised access, alteration or disclosure.

However, no internet transmission or electronic storage system is completely secure. You should not send passwords, confidential credentials or unnecessary sensitive information through the website or by email.

14Your Privacy Rights

Depending on where you reside and the law that applies, you may have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Request restriction of certain processing
• Object to processing based on legitimate interests
• Request portability of certain personal data
• Withdraw consent where processing is based on consent
• Object to or unsubscribe from direct marketing
• Submit a complaint to an applicable data protection authority

These rights may be subject to legal limitations or exceptions.

To submit a request, email privacy@caribsys.io with the subject line “Privacy Request.”

We may need to verify your identity before completing a request. We will respond within the period required by applicable law.

If you are located in Martinique or elsewhere in the European Union, you may also lodge a complaint with the data protection authority in the country or territory where you live, work or believe an infringement occurred.

15Automated Decision-Making

CaribSys does not use personal data collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.

16Children’s Privacy

This website is intended for business and professional audiences and is not directed toward children.

We do not knowingly collect personal data from children through the website. If you believe a child has provided personal data to us, please contact us so that we can review and, where appropriate, delete it.

17Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our website, services, technology, legal obligations or data-handling practices.

The effective date shown at the top identifies the latest version. Where appropriate, material changes will also be communicated through a notice on the website.

18Contact Us

For questions, concerns or requests regarding this Privacy Policy or our handling of personal data, contact:

CaribSys Ltd.Castries, Saint LuciaEmail: privacy@caribsys.io