Port Management Association of the Caribbean (PMAC) Privacy Policy
1. Who we are and what this policy covers
This policy explains what personal information Port Management Association of the Caribbean (PMAC) collects about the people who use our services, why, who we share it with, and the choices you have. In this policy, "Port Management Association of the Caribbean (PMAC)", "we" and "us" mean Port Management Association of the Caribbean, Suriname. We are responsible for your personal information as its data controller.
It covers:
- our website, pmac-ports.com, including your account and the "My Account" pages;
- registering for our events, online or through our team;
- the Attendee Hub, the private area of the website where registered attendees see the agenda, other attendees, messages, the event feed and announcements;
- the Port Management Association of the Caribbean (PMAC) Events app for Android and iPhone, which shows the Attendee Hub on your phone and adds phone notifications;
- the emails, announcements and notifications we send about our events.
Questions about this policy or your information: [privacy contact email].
2. Information we collect
We collect only what we need to run our events and the services above.
What | Examples | Where it comes from |
|---|---|---|
Registration details | Name, email address, phone number, organisation, job title, the events and tickets you register for, answers to registration questions | You, or the person or organisation that registers you |
Account | Login email, password (stored only in encrypted, hashed form), language, time zone | Created when you register or sign up |
Attendee profile | Profile photo, a short introduction, LinkedIn link, and which of these details other attendees may see | You, in the Attendee Hub |
Messages | Messages you send to and receive from other attendees | You and the attendees you write to |
Event feed | Posts, photos, comments and likes | You |
Agenda | Sessions you add to your personal agenda | You |
Notification settings and device identifiers | Whether you want notifications; for each phone or browser where you turned them on, a technical address (a "push token") that lets us send it notifications, the device type and the app version | Your browser or our app |
Payment details, if a ticket is paid | Amount, date, payment status and reference. Card details are entered on our payment provider's page and are not stored by us. | You and our payment provider |
Technical data | IP address, browser and device type, pages visited on our website, date and time of visits, and cookies (see section 7) | Your browser or our app |
You do not have to give us optional details such as a photo, phone number or LinkedIn link. Without a name and email address, we cannot register you for an event.
3. How we use your information
We use your information only for the purposes below, and only where the law allows it.
Purpose | Information used | Legal basis |
|---|---|---|
Registering you, issuing tickets and badges, admitting you to the event | Registration details, payment details | Performing our agreement with you |
Giving you an account and access to the Attendee Hub and the app | Account, registration details | Performing our agreement with you |
Letting you message other attendees, post in the feed and keep an agenda | Profile, messages, feed, agenda | Performing our agreement with you |
Listing you in the attendee directory | Only the profile details you choose to share | Your consent, which you can withdraw at any time in your profile |
Sending event information: confirmations, practical details, agenda changes, organiser announcements | Contact details, notification settings, device identifiers | Performing our agreement with you, and our legitimate interest in running a safe, well-organised event |
Notifying you of new messages on your phone or in your browser | Notification settings, device identifiers | Your consent, given when you allow notifications |
Keeping the Attendee Hub safe: reviewing reported or flagged content, stopping abuse | Messages and posts concerned, account | Our legitimate interest in protecting attendees |
Running and securing our website and app, fixing problems | Technical data | Our legitimate interest in providing a working, secure service |
Accounting, tax and other legal duties | Registration and payment details | Legal obligation |
News about future Port Management Association of the Caribbean (PMAC) events | Name, email address | Your consent; every such email has an unsubscribe link |
We do not sell your personal information, we do not use it for advertising, and we do not make decisions about you by automated means alone.
4. What other attendees can see
You decide what other attendees see, in My profile in the Attendee Hub. Only people registered for the same event can see anything, and only while they have access to that event's hub.
Information | Who can see it | Default |
|---|---|---|
That you attend, with your name | Attendees of the same event, only if you choose to be listed in the attendee directory | Not listed |
Photo, headline, "About" text | Attendees of the same event, if you are listed | Shown when listed |
Organisation and job title | Attendees of the same event, if you are listed | Shown when listed; you can hide each |
Email address, phone number, LinkedIn link | Attendees of the same event, if you are listed and switch each one on | Hidden |
Direct messages | Only you and the person you write to | You can turn off receiving messages |
Feed posts, photos, comments and likes | All attendees of that event | Visible once published |
Authorised Port Management Association of the Caribbean (PMAC) staff who moderate the Attendee Hub can see feed content. They can also access conversations, but only to deal with content reported to them, abuse, or a legal requirement. They may hide or remove content that breaks the event's rules.
What you share with other attendees, they may copy or keep. Please share only what you are comfortable with.
5. Emails and notifications
As an attendee, you receive event emails and announcements from the organisers, and notifications when another attendee messages you. All of them are also listed in the Attendee Hub under Notifications.
- Emails about an event you registered for (confirmation, practical details, changes) are part of the service. Marketing emails about future events are sent only with your consent and include an unsubscribe link.
- Phone and browser notifications are sent only after you allow them on that device. In the app, the phone asks you the first time you open the Attendee Hub. In a web browser, you turn them on in the Attendee Hub.
To stop notifications, do any of the following:
- switch off "Notify me when another attendee messages me" in My profile;
- turn notifications off for the app or the website in your phone's or browser's settings;
- sign out of the app. Signing out stops notifications for your account on that phone.
- What a notification contains: the sender's name or the announcement title, and a short preview of the text. Organisers can choose to show no preview. A notification may appear on your lock screen, depending on your phone's settings.
6. Who we share information with
We share personal information only with the service providers below, which act on our instructions, and where the law requires it. We do not sell it, and we do not give attendee lists to sponsors or other third parties without your consent.
Recipient | Why | What they receive |
|---|---|---|
[Hosting provider, country] | Hosts our website, the Attendee Hub and our database | All information described in this policy, stored on our server |
Google Firebase Cloud Messaging (Google LLC) | Delivers notifications to the Port Management Association of the Caribbean (PMAC) Events app | The phone's push token and the notification: title, short preview, link |
Apple Push Notification service (Apple Inc.) | Delivers notifications to iPhones, through Firebase | The same as Google, for iPhones |
Your web browser's push service (for example Google for Chrome, Mozilla for Firefox, Apple for Safari) | Delivers notifications to a browser where you turned them on | The browser's push address. The notification text is encrypted so that the push service cannot read it. |
[Email delivery provider] | Sends our emails | Your name, email address and the email |
[Payment provider], if a ticket is paid | Takes the payment | What you enter on their payment page |
Professional advisers, auditors, insurers | Advice, audits, claims | Only what they need |
Police, courts, regulators | When the law requires it, or to protect someone's safety | Only what is required |
If our organisation or its events are transferred to another organisation, your information may be transferred with them, under this policy.
7. Cookies and similar technologies
Our website and app use a small number of cookies and similar storage. Most are needed for the service to work.
Type | Purpose | Can you refuse it? |
|---|---|---|
Essential | Keep you signed in, remember your language and time zone, protect forms against misuse | No; without them you cannot sign in |
Website statistics | Count visits and pages viewed, so we can improve the website | Yes, in the cookie banner. [Remove this row if no analytics tool is used.] |
App and browser storage | Remember that the phone or browser is registered for notifications, and whether you were already asked | Remove it by signing out or uninstalling the app |
We do not use advertising or cross-site tracking cookies. You can delete cookies at any time in your browser settings; you will then need to sign in again.
8. International transfers
Your information is stored on our server in [country of the server]. Some providers in section 6 process it in other countries, mainly the United States (Google and Apple, for notifications). Our attendees come from many countries, so information also reaches other attendees wherever they are.
When information leaves Jamaica, we use providers that protect it to a standard comparable with Jamaican law. Where required, we rely on contractual safeguards with them, such as their data processing terms.
9. How long we keep information
We keep information only as long as we need it for the purposes in section 3, then delete it or make it anonymous.
Information | How long |
|---|---|
Account | Until you delete it, or after [3] years without use |
Registration details | [3] years after the event, so we can answer questions and invite you to future editions with your consent |
Payment and accounting records | As long as tax and accounting law requires, currently [7] years |
Messages, feed posts, profile and agenda | Until you delete them or your account, or [12] months after the event, whichever comes first |
Notification history in the Attendee Hub | 180 days |
Push tokens for phones and browsers | Until you sign out, turn notifications off, or the device stops accepting notifications |
Website technical logs | [90] days |
10. Your rights and choices
Under Jamaica's Data Protection Act, 2020, and the law of other countries where it applies to you, you can:
- access the personal information we hold about you, and learn how we use it and who we share it with;
- have inaccurate information corrected, and have information erased or blocked where we no longer have a right to keep it;
- object to processing that is causing you damage or distress, and ask us to stop using your information for marketing at any time;
- withdraw your consent at any time, for example to the attendee directory or to notifications, without affecting what we did before;
- not be subject to decisions taken by automated means alone (we do not take any);
- complain to the data protection regulator.
Do it yourself: most changes take a few seconds. Sign in on pmac-ports.com or in the app, then:
- Edit or hide your profile: Attendee Hub, then My profile.
- Change your account details: My Account.
- Delete your account: My Account, then Connection & Security, then Delete Account. This removes your login. Your registrations and invoices are kept only for as long as section 9 states.
Ask us: email [privacy contact email] for anything else. We may ask you to confirm your identity first. We answer within 30 days, and free of charge unless a request is clearly excessive.
Complaints: please contact us first, so we can try to put things right. You can also complain to Jamaica's Office of the Information Commissioner: 2nd Floor, The Masonic Building, 45–47 Barbados Avenue, Kingston 5, telephone (876) 920-4390 (details). If you live elsewhere, you can contact your local data protection authority.
11. Security
We protect your information with measures suited to its sensitivity:
- all traffic to the website and app is encrypted (HTTPS);
- passwords are stored only in hashed form;
- access rules in our system let attendees see only what section 4 allows;
- staff access is limited to those who need it.
No system is completely secure. If a breach puts your information at risk, we will inform you and the Information Commissioner as the law requires.
12. Children
Our events, the Attendee Hub and the app are intended for professionals aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.
13. Changes and contact
We may update this policy when our services or the law change. The date at the top shows the latest version. If a change significantly affects how we use your information, we will tell you by email or in the Attendee Hub before it applies.
Contact: [legal name of the organisation], [postal address], [privacy contact email], [telephone].