This notice explains in plain language exactly what personal information the EQI Caribbean platform collects, why, who can see it, and precisely when it is shared. It is more detailed than our Privacy Policy and is written to meet the transparency requirements of the Barbados Data Protection Act 2019-29. Please read it before creating an account or submitting a request.
| Data controller | Project 3 Consultants and Logistics Inc., Company Registration No. 52770, Barbados |
| Trading as | EQI Caribbean (Technology) |
| Registered office | #42 Durette Gardens, Gemswick, St Philip, Barbados |
| Platform | EQI Caribbean, comprising an insurance route and a credit route |
| Data Protection Officer | Mark Foster |
| Contact for data protection | legal@eqicaribbean.com, or by writing to the registered office above, marked for the attention of the Data Protection Officer |
| Lawful basis | Your explicit consent, together with performance of a contract and our legal obligations, under the Barbados Data Protection Act 2019-29 |
EQI Caribbean is a technology platform only. We are not a licensed insurer, broker, lender or financial adviser. Responses received through the platform are indicative and non-binding, and no payment is made on the platform at any stage.
We capture your explicit consent at three separate points. Each is recorded with the date and time and exactly which consents you gave. That record is retained for seven years, as the Act requires.
When you create your EQI Caribbean account you consent to us storing and processing your information to operate the platform. This covers your name, email address, telephone number and home address.
Before your request is sent anywhere, you are asked to confirm a set of declarations giving your explicit consent to your information being shared with the specific providers you have selected. Nothing is disclosed to anyone until you give that consent. What is then shared depends on your route, as set out in section 3.
When you accept a provider's response, you confirm your consent for that provider to use your contact details to follow up with you directly. Where you went through a broker and the insurer did not already hold your contact details, your acceptance is the point at which your broker connects you with that insurer.
| Party | What they can see | From when |
|---|---|---|
| Insurer you selected directly | All risk details, plus your name, email, telephone number and address | The moment you submit |
| Broker you selected | All risk details, plus your name, email, telephone number and address | The moment you submit |
| Insurer approached by your broker | Risk details and your name only. Never your email, telephone number or address, at any stage, including after you accept | When your broker approaches them |
| Provider whose response you accept | Confirmation that you chose them, and the contact details their route permits | When you accept |
| Providers you did not select | Nothing at all | Never |
| EQI Caribbean | Everything you have submitted, used only to operate the platform and meet our compliance obligations | Throughout the retention period |
The credit route works directly with licensed lenders. There are no credit brokers on the platform.
| Party | What they can see | From when |
|---|---|---|
| Lender you selected | All application details, plus your name, email, telephone number and address | The moment you submit |
| Lenders you did not select | Nothing at all | Never |
| EQI Caribbean | Everything you have submitted, used only to operate the platform and meet our compliance obligations | Throughout the retention period |
The Act treats information about a person's financial record or position as sensitive personal data, the category that attracts the highest level of protection. Credit applications on this platform contain that kind of information, including your employment status, income, existing commitments and the collateral you can offer.
We collect it only with your explicit consent, share it only with the lenders you have selected, never use it for any other purpose, and never disclose it to anyone else.
Some requests name another individual, for example an additional driver on a motor request or a joint insured on a property request. We collect only the limited details needed to assess the risk, ordinarily that person's name, age and relationship to you.
When you submit a request naming someone else, you confirm that they are aware their details are being submitted to EQI Caribbean and shared with the providers you select, and that they have given you their permission. We rely on that confirmation and do not contact them separately.
A broker may submit a request on behalf of a client who approached the broker directly rather than through this platform. Where that happens:
The broker is responsible for having obtained that permission lawfully, and acts as an independent data controller in respect of their own client relationship. If you are such a client and have a question about your information, you may contact your broker or us at legal@eqicaribbean.com.
Each time a provider views your request on the platform, we create a data access record showing:
Under the Act you have the right to ask us for a complete record of every organisation that has accessed your personal information. Email legal@eqicaribbean.com with the subject "Data Access Log Request".
EQI Caribbean does not make automated decisions about you that produce legal or similarly significant effects. The platform routes your request to the providers you select. It does not score you, rank you, filter you, assess your risk or your creditworthiness, or make any underwriting or lending decision. Every such decision is made by the licensed provider you engage, using their own processes, and you should ask them how those work.
The platform is operated using the service providers below. Each is engaged under written terms permitting them to use your information only to deliver the service described, and never for their own purposes.
| Provider | What they do | Where |
|---|---|---|
| Render Inc. | Hosting for the platform and its database | Virginia, United States |
| Cloudflare Inc. | Domain routing, encryption and content delivery | United States |
| Brevo (Sendinblue SA) | Sign-in codes and platform notification emails | France |
| Anthropic PBC | Powers Benn, our on-platform assistant | United States |
| Cloudinary Ltd | Hosting provider company logos | United States |
| GitHub Inc. | Source code storage. No personal information held | United States |
Because the platform is hosted outside the Caribbean, your information is processed outside your territory. We transfer it only where necessary to operate the platform and deliver the service you asked for. Each provider is engaged under written terms requiring them to protect your information to a standard equivalent to that required by the Act, to process it only on our instructions, to keep it secure, and to tell us promptly of any breach. By using the platform you consent to processing in these countries for the purposes described here.
There are two paths, and which applies depends on what you ask us to do.
| What you do | What happens |
|---|---|
| You ask us to erase your data | We erase your personal information within 30 days. Your consent records and audit trail are retained for seven years, because the Act requires it, but they no longer identify you. |
| You stop using the platform, or close your account without asking for erasure | We retain your records for seven years in line with our regulatory obligations, then review and securely delete them. |
Where a legal hold requires us to keep particular records, we will tell you and keep only what we are obliged to.
| Right | How to exercise it | Response time |
|---|---|---|
| Access your data | Email legal@eqicaribbean.com, subject "Data Access Request" | 30 days |
| Correct inaccurate data | Email legal@eqicaribbean.com, subject "Data Correction Request" | 30 days |
| Erase your data | Email legal@eqicaribbean.com, subject "Data Deletion Request" | 30 days |
| Obtain your data access record | Email legal@eqicaribbean.com, subject "Data Access Log Request" | 30 days |
| Receive your data in portable form | Email legal@eqicaribbean.com, subject "Data Portability Request" | 30 days |
| Object to or restrict processing | Email legal@eqicaribbean.com, subject "Processing Objection" | 30 days |
| Withdraw consent | Email legal@eqicaribbean.com, subject "Consent Withdrawal" | 5 business days |
Withdrawing consent does not affect the lawfulness of anything done before you withdrew it, and it cannot recall information already shared with a provider you selected. For erasure we apply a double confirmation step so that no account is deleted by accident or by someone acting without your authority.
If a security breach occurs that is likely to affect your rights, we will notify the Data Protection Commission and, where required, you directly, within the time limits set by the Act.
Please raise any concern with us first at legal@eqicaribbean.com. We aim to acknowledge every complaint within two business days. If you are not satisfied with our response, you may complain directly to the Commission.