Legal
Privacy Policy
Last updated: March 2026
Contents
1 Who We Are
Caribbean RFID is a B2B supplier of sustainable RFID access credentials for the Caribbean and Latin American hospitality industry. Our website is located at caribbeanrfid.com. For privacy-related enquiries, you may contact us through the contact form at caribbeanrfid.com/contact/ or by email at info@caribbeanrfid.com.
2 Information We Collect
We collect only the personal information you voluntarily provide to us through this website:
Contact form submissions: your name, email address, company name, and the content of your message.
Sample kit requests: your name, email address, company name, property location, and shipping address.
Email correspondence: any information you include when contacting us directly by email.
We do not collect payment information, credit card details, or financial data through this website. We do not use automated profiling or decision-making processes that produce legal or similarly significant effects.
3 How We Use Your Information
We use the personal information you provide for the following purposes:
To respond to your enquiry within our standard one-business-day response time.
To dispatch sample kits to the address you provide.
To prepare quotations, compatibility assessments, and product recommendations for your property.
To maintain our business correspondence records.
To send follow-up communications relevant to your enquiry (for example, to confirm sample dispatch or provide requested documentation).
We do not sell, rent, lease, or share your personal information with third parties for marketing purposes. We do not use your personal data for purposes other than those stated above without obtaining your explicit consent.
4 Legal Basis for Processing
We process personal data on the following legal bases under the General Data Protection Regulation (GDPR) and applicable data protection laws:
Legitimate interests: processing your enquiry and maintaining a business relationship is in our legitimate interests as a B2B supplier, and is proportionate to the minimal data we collect.
Contractual performance: when fulfilling sample orders or procurement agreements, processing is necessary to perform the contract.
Consent: where we send marketing communications, we will obtain your prior consent and provide an easy means to withdraw it.
5 Cookies and Analytics
This website uses a limited set of cookies for the following purposes:
Session cookies: strictly necessary for website functionality (no personal data collected).
Live chat: if you initiate a conversation through our live chat widget, that service operates under its own privacy policy. No chat data is initiated without your action.
We do not use advertising tracking cookies, cross-site tracking, or third-party analytics that collect personally identifiable information without your consent. We do not participate in advertising networks or remarketing programmes.
6 Third-Party Service Providers
Contact form submissions on this website are processed through Web3Forms (web3forms.com), a form handling service that transmits your submission to our email. Web3Forms operates under its own privacy policy and handles personal data as a data processor on our behalf. We do not share your data with Web3Forms for their own marketing or any purpose other than form delivery.
Our website is hosted on Cloudflare Pages. Cloudflare may process request-level data (IP addresses, access logs) for the purpose of content delivery, security, and abuse prevention, in accordance with Cloudflare's privacy policy.
7 International Data Transfers
Caribbean RFID operates across the Caribbean, Latin America, and internationally. If you submit your personal data through our website, that data may be transferred to and processed in countries outside your home jurisdiction, including countries that may not have equivalent data protection laws.
Where we transfer personal data from the European Economic Area (EEA) or the United Kingdom to third countries, we rely on appropriate transfer mechanisms including standard contractual clauses or adequacy decisions as required by applicable law.
8 Data Retention
We retain personal data for as long as is necessary to fulfil the purpose for which it was collected, and in accordance with our legal obligations:
Enquiry correspondence: retained for up to 3 years following the date of the last substantive communication, after which it is securely deleted.
Active client records: retained for the duration of the business relationship and for up to 7 years following its end, to comply with applicable commercial and tax record-keeping requirements.
Sample dispatch records: retained for up to 3 years.
You may request earlier deletion of your data — see Your Rights section below.
9 Data Security
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
Secure transmission (HTTPS/TLS) for all data submitted through this website.
Access controls limiting who within our organisation can access personal data.
Secure email handling of enquiry data.
No method of transmission over the internet or electronic storage is completely secure. While we use commercially reasonable means to protect your data, we cannot guarantee absolute security.
10 Your Rights
Subject to applicable data protection law, you have the following rights regarding your personal data:
Right of access: request a copy of the personal data we hold about you.
Right to rectification: request correction of inaccurate or incomplete personal data.
Right to erasure: request deletion of your personal data ("right to be forgotten"), subject to our legal obligations to retain certain records.
Right to restriction: request that we restrict processing of your personal data in certain circumstances.
Right to object: object to processing based on our legitimate interests.
Right to data portability: receive your personal data in a structured, machine-readable format.
Right to withdraw consent: where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at info@caribbeanrfid.com or through our contact form. We will respond within 30 days. If you are located in the EEA, you also have the right to lodge a complaint with your local supervisory authority.
11 Children's Privacy
This website is a B2B information and enquiry service directed at hospitality industry professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided personal data through this website, please contact us and we will delete it promptly.
12 Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or applicable law. The most recent version will always be available at caribbeanrfid.com/privacy/ with the date of last update noted at the top of the page. For material changes, we will make reasonable efforts to notify active clients.
13 Contact
For any privacy-related enquiries, requests to exercise your rights, or concerns about how we handle your personal data, please contact us:
Email: info@caribbeanrfid.com
Contact form: caribbeanrfid.com/contact/
We will respond to all privacy enquiries within 30 days.
Privacy Questions?
Contact us through our contact form or email info@caribbeanrfid.com. We respond to all privacy enquiries within 30 days.
Contact Us