Privacy Policy
How we handle your data — in plain language
What we collect
- Account email — verified at signup, never shown publicly.
- Review content — ratings and text you submit.
- Moderation records — flags, complaints, and action logs (for our legal defence record).
What we do NOT collect
- Your real name is never a public field.
- No photo or document uploads are attached to reviews in this version.
Where your data is processed — important
NotHR is built on Base44, whose database and hosting infrastructure is located outside of Jamaica. This means your personal data may be processed and stored outside Jamaica. Under the Data Protection Act, 2020, this cross-border transfer is a disclosure we are required to make openly. We rely on contractual safeguards with our infrastructure provider. If you have concerns about cross-border processing, please contact us before using the platform.
Your rights under the DPA
- Access — request a copy of your personal data.
- Correction — fix inaccurate information.
- Deletion — request erasure of your data (subject to legal retention obligations for moderation records).
- Withdrawal of consent — for any processing based on consent.
To exercise these rights, contact us through the platform.
Retention
Account data is retained while your account is active. Moderation logs and complaint notices are retained for longer as they form the evidentiary record for the innocent-dissemination defence — these are near-immutable, append-only records.
Breach notification
In the event of a personal data breach, we commit to notifying the Office of the Information Commissioner within 72 hours, as required by the Data Protection Act, 2020.