Privacy Notice
This Privacy Notice explains how Salada Foods Jamaica Limited collects, uses, shares and protects personal data through this website, and the rights you have under the Jamaica Data Protection Act, 2020 (the “Act”).
1. Who we are
The data controller responsible for your personal data is:
Salada Foods Jamaica Limited
20 Bell Road, Kingston 11, Jamaica W.I.
Telephone: (876) 923-7114
Email: info@saladafoodsja.com
Website: www.saladafoodsja.com
Data protection contact: please write to our Data Protection Officer at info@saladafoodsja.com (subject line “Data Protection Officer”) or by post to the address above, marked “For the attention of the Data Protection Officer”.
This notice covers personal data collected through saladafoodsja.com, including our email subscription forms, contact and enquiry forms and online shop. It does not cover third-party websites that we link to.
2. What personal data we collect
We only collect what we need. Depending on how you use our website, this may include:
- Email subscriptions: your email address; your first name (optional); the topics you choose (optional); which form you used to sign up; a record of your consent (the wording you agreed to, its version, and the date and time); the dates you confirmed or unsubscribed; and a one-way, irreversible code (hash) derived from your IP address, used to prevent abuse. We do not store your IP address itself for subscriptions.
- Enquiries and contact forms: your name, email address, telephone number, company (if given) and the content of your message.
- Online shop and customer accounts: your name, billing and delivery address, email address, telephone number, account login details and order history.
- Website usage: technical information such as your browser and device type, pages visited, approximate location (city or country level) and the referring website, collected through cookies and our web server logs (see Cookies and analytics).
We do not intentionally collect sensitive personal data (for example health, religious or political information) through this website. Please do not send us such information in a message.
Giving us your personal data is voluntary and not required by law. If you choose not to provide your email address, we cannot send you our newsletter; if you do not provide contact details with an enquiry, we may not be able to reply.
3. Why we use it and our lawful basis
| Purpose | Data used | Lawful basis under the Act |
|---|---|---|
| Sending you recipes, new product news and offers by email | Email, first name, interests, consent record | Your consent (sections 9 and 10) |
| Confirming your subscription, preventing fraudulent sign-ups and honouring your unsubscribe request | Email, consent record, IP hash, dates | Your consent, and compliance with our legal obligations under the Act |
| Replying to your enquiries | Contact details, message | Your consent, or steps taken at your request with a view to entering into a contract |
| Processing and delivering orders, and managing your account | Name, addresses, contact details, order history | Performance of a contract with you, and compliance with legal (for example tax) obligations |
| Understanding how our website is used so we can improve it | Cookie and usage data | Our legitimate interests in running and improving our website |
| Keeping our website and systems secure | Server logs, IP hash | Our legitimate interests and compliance with the security requirements of the Act |
We will not use your personal data for a new purpose that is incompatible with the purpose for which we collected it.
4. Email marketing and your consent
We only send marketing emails to people who have clearly asked to receive them. Our sign-up forms use an unticked consent box, and we then send a confirmation email: you are only added to our list once you click the link in it (“double opt-in”). If you do not confirm, your details are deleted after 30 days and we will not ask you again unless you sign up again.
Every marketing email we send identifies Salada Foods Jamaica Limited, gives our contact details and includes a one-click unsubscribe link.
5. How we follow the eight data protection standards
The Act requires every data controller to follow eight data protection standards. In plain language, this is what they mean for you:
- Fair and lawful: we process your data fairly, tell you how we use it, and only where we have a lawful basis such as your consent.
- Specific purposes: we collect data only for the clear purposes set out in this notice and do not use it in ways that are incompatible with them.
- Only what we need: we keep the data adequate, relevant and limited to what is necessary (which is why a first name is optional and we store only a hash of your IP address).
- Accurate: we keep your data accurate and up to date, and correct it when you tell us it is wrong.
- Not kept longer than necessary: we delete data when it is no longer needed (see How long we keep data).
- Respecting your rights: we handle your data in line with your rights under the Act (see Your rights).
- Kept secure: we use appropriate technical and organisational measures to protect your data against unauthorised use, loss or damage, and we report security breaches to the Information Commissioner as the Act requires.
- Protected when transferred abroad: we only transfer data outside Jamaica where it receives an adequate level of protection or another condition in the Act applies (see Transfers outside Jamaica).
6. Who we share data with
We do not sell or rent your personal data. We share it only with:
- Service providers (data processors) who act on our instructions under written terms, including our website hosting provider, our business email provider (Google Workspace) and our website analytics provider (Google Analytics).
- Delivery and payment partners, where needed to fulfil an order you place.
- Professional advisers and authorities, such as our auditors or lawyers, or a regulator, court or law-enforcement body, where we are required or permitted to do so by law.
7. Transfers outside Jamaica
Some of our service providers store data on servers outside Jamaica, mainly in the United States (for example our web host and Google). Where data is transferred outside Jamaica, we take steps to ensure it is adequately protected, taking into account the factors set out in the Act, including the provider’s security measures and contractual commitments. Where required, we rely on your consent or on the transfer being necessary to provide a service you have requested. You can ask us for more information about these safeguards.
8. How long we keep data
- Unconfirmed email sign-ups: deleted automatically after 30 days.
- Email subscribers: kept while you remain subscribed. When you unsubscribe, we delete your name and preferences straight away and keep only your email address, the dates and your consent record for 12 months, so we can respect your opt-out and show that we acted lawfully. After that, the record is deleted.
- Enquiries: kept for as long as needed to deal with your enquiry, and then for no longer than 24 months.
- Orders and accounts: kept while your account is active, and order records for the period required by Jamaican tax and company law.
- Analytics data: kept for no longer than 14 months.
You can ask us to delete your data sooner (see Your rights).
9. How we keep data secure
We protect personal data using measures appropriate to the risk, including encrypted (HTTPS) connections, restricted and password-protected administrator access, one-way hashing of IP addresses for subscriptions, regular software updates and backups, and limiting access to staff who need it. If a security breach affects personal data, we will report it to the Office of the Information Commissioner within 72 hours of becoming aware of it, as required by the Act, and tell you where appropriate.
10. Your rights
Under the Act you have the right to:
- Access your data: ask whether we process your personal data and receive a description of it, why we use it and who we share it with, free of charge. You may also ask for a copy of the data and, where technically feasible, have the data you gave us sent to another organisation in a commonly used, machine-readable format (a prescribed fee may apply where the law allows).
- Rectification: ask us to correct, complete, block or erase personal data that is inaccurate or incomplete.
- Erasure: ask us to delete your personal data. We will do so unless we have to keep it by law (for example, order records for tax purposes).
- Prevent processing: ask us to stop, or not to begin, processing your data in certain circumstances, for example where it is causing or likely to cause unwarranted substantial damage or distress.
- Stop direct marketing: withdraw your consent and stop marketing emails at any time, free of charge.
- Automated decisions: ask that no decision significantly affecting you is based solely on automated processing. We do not make any such decisions about website visitors or subscribers.
- Complain to the Office of the Information Commissioner (see Complaints).
To exercise any of these rights, email info@saladafoodsja.com with the subject “Data protection request”, or write to us at the address above. We may need to verify your identity before acting. We will respond within the time limits set by the Act, normally within 30 days.
11. How to withdraw consent or unsubscribe
You can withdraw your consent at any time, as easily as you gave it:
- click the Unsubscribe link at the bottom of any of our emails (it works in one click); or
- email info@saladafoodsja.com with the subject “Unsubscribe”.
Withdrawing consent does not affect anything we did lawfully before you withdrew it.
12. Cookies and analytics
Cookies are small text files stored on your device. We use:
- Essential cookies that make the website, shopping basket, checkout and account log-in work. These cannot be switched off.
- Analytics cookies (Google Analytics, through Google Site Kit) that tell us, in aggregate, how visitors use our website so we can improve it.
You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google’s browser add-on. Some parts of the website may not work properly if you block essential cookies.
13. Children
Our website is not aimed at children, and our email subscriptions are only for people aged 18 or over. If you believe a child has given us personal data, please contact us and we will delete it.
14. Complaints
If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to complain to the regulator:
Office of the Information Commissioner (OIC), Jamaica
Masonic Building, 2nd Floor, 45–47 Barbados Avenue, Kingston 5
Email: info@oic.gov.jm · Telephone: (876) 929-8568
Website: oic.gov.jm
15. Email Subscription Terms
- What you will receive: emails from Salada Foods Jamaica Limited with recipes, new products and flavours, offers and promotions, and occasional company news, for our brands including Jamaica Mountain Peak, Mountain Bliss 876 and Robert’s.
- How often: no more than a few emails a month.
- Eligibility: you must be 18 or over and sign up with your own email address.
- Confirmation: your subscription starts only when you click the link in our confirmation email.
- Your details: we use them only to send you these emails, as described in this notice. We never sell them.
- Leaving: you can unsubscribe at any time, free of charge, using the link in every email or by emailing info@saladafoodsja.com.
- Offers: any offer sent by email is subject to the terms stated in that email and while stocks last.
- Changes: we may change or stop the newsletter at any time. We will ask for your consent again before using your data for anything materially different.
16. Changes to this notice
We may update this notice from time to time. The effective date at the top shows when it was last changed. If we make significant changes, we will tell subscribers by email before they take effect.