Privacy Policy

Issued by Project 3 Consultants and Logistics Inc., which carries on business under the registered business name EQI Caribbean Technology  ·  Effective date: 25 October 2026  ·  Version 3.6

This policy explains what personal information we collect when you use the EQI Caribbean platform, why we collect it, who we share it with, and what rights you have over it. It applies to both routes through the platform, insurance and credit. Please read it alongside our Data Protection Notice, which sets out in detail exactly what each provider on the platform can see and when.

1. Who we are

The EQI Caribbean platform is operated by Project 3 Consultants and Logistics Inc., a company incorporated in Barbados under Company Registration No. 52770, which carries on business under the registered business name EQI Caribbean Technology ("EQI Caribbean", "we", "us", "our"). Project 3 Consultants and Logistics Inc. is the data controller for all personal information described in this policy.

Our registered office is #42 Durette Gardens, Gemswick, St Philip, Barbados.

EQI Caribbean is a technology tool that insurers, brokers and lenders choose to use, within their own business, to communicate directly with their customers. Each provider decides for itself whether to use the platform and how. EQI Caribbean does not direct, encourage or require any provider or customer to use it, and takes no part in any provider's dealings with its customers. It does not recommend, rank or promote any provider or product, does not give advice, and receives nothing from any provider because of any enquiry, response or customer's choice. No payment of any kind is made through the platform. Every response comes directly from the provider and remains subject to the provider's own terms, assessment and regulatory obligations.

We are not an insurer, an insurance broker, a lender, a financial adviser, or any form of financial intermediary. We do not issue policies, bind coverage, make credit decisions, approve loans, or handle premiums, repayments or deposits. No payment is made on this platform at any stage.

Our designated Data Protection Officer is Mark Foster, who can be reached at legal@eqicaribbean.com or by writing to the registered office above.

For any question about this policy or about your personal information, write to us at legal@eqicaribbean.com.

2. What the platform does

You hold one EQI Caribbean account. From that account you can take either of two routes:

• Insurance. You send an enquiry about motor or property cover and receive indicative responses from insurers and brokers licensed in your territory.
• Credit. You send an enquiry about a loan, mortgage, vehicle finance, credit card or other credit product and receive indicative responses from lenders licensed in your territory.

In both cases you choose which providers receive your enquiry. Responses are indicative and non-binding. Any agreement you go on to make is between you and the provider directly.

3. What information we collect

We collect information you give us directly, and information generated automatically as you use the platform.

Information you give us

• Identity and contact. First name, last name, email address, telephone number, street address, parish and territory.
• Account credentials. Your email address and a hashed version of your password. We never store your password in readable form.
• Insurance risk details. Information about the vehicle or property you want covered, such as make, model, year, declared value, use, construction type, occupancy, sum insured and claims history.
• Credit enquiry details. Employment status, employer, income, amount and purpose of the credit sought, collateral offered and existing financial commitments.
• Details of other people you name. Where your enquiry names another individual, such as an additional driver or a joint insured, we collect the limited details you provide about that person. See section 7.
• Provider information. If you use the platform on behalf of an insurer, broker or lender, we collect your company name, regulatory licence number, registered details and staff account information.
• Platform feedback. If you choose to rate the platform or tell us what could be better, we keep your rating and comment without your name or account, to improve the platform, for two years.

When a provider registers or gives Commitment, we keep a record of who accepted the Provider Agreement, for which organisation, the version and the date and time, together with a one way code made from the internet address used, to show which agreement was accepted. The record of who accepted the Provider Agreement is kept for seven years.

Information generated automatically

• Sign-in activity, including timestamps, IP address and multi-factor authentication events.
• Which parts of the platform you use and when.
• When your account was last active on the platform.
• A record of each email the platform sends you: what kind of email it was, when it was sent, and whether it was sent or failed. The record never holds your email address, the subject or the content of the email.
• Audit records of significant actions taken on the platform, kept for security and compliance purposes.
• Where our mobile app offers this, and you choose it, a reference to your remembered device and the date it was registered.

4. Why we use your information

We do not use your information to make automated decisions about you. The platform does not score, rank or filter customers, and it does not carry out any underwriting or credit assessment. Every such decision is made by the licensed provider you engage, using their own processes.

5. Who we share your information with

We share your information only with the providers you yourself select, and only in the way described below. Providers you do not select receive nothing.

What is shared depends on the route you choose:

Responses are sealed. No provider can see the pricing or terms offered by any other provider. This is enforced by the platform, not by policy alone.

If you submit a response on behalf of an insurer, your name and work email address are shown with that response to the broker or customer who receives it, so that they can contact you about it.

When you choose to proceed with a response, the provider who sent it is notified that you have chosen it and will contact you directly. No policy is bound, no credit is advanced and no payment is collected through this platform at any stage.

Once a provider receives your information they become responsible for it in their own right, as an independent data controller. Their own privacy policy governs what they do with it from that point. Our agreement with them requires that they use it only to respond to your enquiry, that they do not use it for marketing or any other purpose without your separate permission, and that they handle it in line with applicable data protection law.

We never sell, rent or trade your personal information. We do not share it with anyone for their own marketing or commercial purposes.

6. Where a broker sends an enquiry for you

Brokers may submit enquiries on behalf of clients who have approached them directly rather than through this platform. Where that happens, the broker confirms to us that they hold that client's permission to do so. The client's contact details are withheld from every insurer on the platform at every stage, and the broker handles all direct contact with their client themselves.

If your broker uses renewal reminders, your broker may record when your policy renews, so that EQI Caribbean can remind your broker before that date. This date is shown only to your broker, never to an insurer, and is deleted 90 days after the renewal date passes.

7. Other people named in your enquiry

Some enquiries name another individual, for example an additional driver on a motor enquiry or a joint insured on a property enquiry. We collect only the limited details needed to assess the risk, typically that person's name, age and relationship to you.

When you submit an enquiry naming someone else, you confirm that they are aware their details are being submitted and that they have given you their permission. We rely on that confirmation and do not contact them separately.

If you have been named in an enquiry submitted by someone else and you want to see, correct or remove your details, contact us at legal@eqicaribbean.com and we will help you.

8. Keeping a record of who has seen your data

Each time a provider views your enquiry on the platform, we record which organisation viewed it, which member of their staff viewed it, when, what level of detail they were shown, and which fields were returned to them.

You have the right to ask us for a complete record of every organisation that has accessed your personal information. Email legal@eqicaribbean.com with the subject "Data Access Log Request".

9. How long we keep your information

There are two paths, and which one applies depends on what you ask us to do.

Where we are subject to a legal hold requiring us to keep particular records, we will tell you and retain only what we are obliged to.

10. Your rights

Under the Barbados Data Protection Act 2019-29, and equivalent legislation in the other territories we serve, you have the right to:

• Access the personal information we hold about you
• Have inaccurate information corrected
• Have your information erased
• Obtain a record of who has accessed your information
• Object to or restrict certain kinds of processing
• Receive your information in a portable, machine-readable form
• Withdraw your consent at any time

Withdrawing consent does not affect the lawfulness of anything we did before you withdrew it, and it cannot recall information already shared with a provider you selected.

For erasure requests we apply a double confirmation step, so that no account is deleted by accident or by someone acting without your authority.

11. How we protect your information

• All traffic to and from the platform is encrypted in transit using HTTPS.
• Sign-in uses an authentication cookie that browser scripts cannot read.
• Multi-factor authentication is required every time you sign in. On our website, the second factor is a single-use code sent to your email address. Where our mobile app offers this, and you choose it, the first sign-in on a device uses that same code; after that, the device itself becomes the second factor and is unlocked by your fingerprint, face or device passcode. If your device has no screen lock set, the emailed code continues to be used every time.
• Accounts lock automatically after repeated failed sign-in attempts.
• Access to your enquiry is controlled at system level, so a provider can only see what the route you chose permits them to see.
• Audit records cannot be altered or deleted once written.
• Passwords are stored only in hashed form and are never recoverable, by us or anyone else.

No system connected to the internet can be guaranteed completely secure. We take all reasonable steps to protect your information, and we will notify you and the Data Protection Commission within the time limits set by the Act if a breach occurs that is likely to affect your rights.

12. Cookies

We use a single authentication cookie to keep you signed in across the platform. It cannot be read by browser scripts, it is only ever transmitted over an encrypted connection, and it expires when you sign out or after a period of inactivity. We do not use advertising cookies and we do not track you across other websites.

Where our mobile app offers this, and you choose it, your device is remembered and the app also stores a security credential in your device's protected hardware storage. It is not a cookie, it cannot be read by websites or by other apps, it cannot be copied to another device, and it is not used to track you. It is removed when you sign out of the app or when you remove the app.

13. Companies that help us run the platform

We use the service providers below to operate the platform. Each is engaged under terms that permit them to use your information only to provide the service described, and never for their own purposes.

14. Information sent outside your territory

The platform is hosted in the United States and some of the companies listed in section 13 are based outside the Caribbean. This means your information is processed outside the territory you live in.

We only transfer your information where it is necessary to operate the platform and provide the service you have asked for. Each provider is engaged under written terms that require them to protect your information to a standard equivalent to that required by the Barbados Data Protection Act 2019-29, to process it only on our instructions, to keep it secure, and to notify us promptly of any breach. By using the platform you consent to your information being processed in these countries for the purposes set out in this policy.

15. Children

The platform is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a person under 18 has provided information through the platform, contact us at legal@eqicaribbean.com and we will delete it.

16. Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date at the top of this page, and where the change is significant we will email registered users at least 14 days before it takes effect. Continuing to use the platform after that date means you accept the updated policy.

17. Contact and complaints

If you have a question or a complaint about how we handle your information, contact us first at legal@eqicaribbean.com. We aim to acknowledge every complaint within two business days.

If you are not satisfied with our response, you have the right to complain to the data protection authority in your territory. In Barbados that is:

18. Clients who join through a broker

Who this section applies to

This section applies to you if you set up your EQI Caribbean account by accepting an invitation from your broker. Your broker is named on your sign in page and on every page of your account. If you also read the rest of this Privacy Policy, this section takes priority wherever the two differ.

Who controls your information

Your broker is the data controller for the information that you and your broker record about you and your insurance enquiries. You have authorised your broker to act on your behalf, and your broker decides how that information is used.

EQI Caribbean is the associated platform. It is operated by Project 3 Consultants and Logistics Inc. It provides the tools your broker uses to manage your enquiries, and it handles your information only on your broker's instructions, given through those tools. EQI Caribbean is not an insurer, a broker, a lender or a financial institution, and it gives no advice.

EQI Caribbean is the data controller only of your login and security records: the email address you sign in with, your password (stored in a form that cannot be read back), the sign in codes we send you, the dates, times and network addresses of your sign ins, the record of the actions taken on your account, the record of the consents you give, the time your account was last active, and the record of the emails the platform sends you (what kind each was, when it was sent and whether it was sent, never its content).

What information is held

1. Your name, email address, telephone number, street address and parish.
2. The details of the risk you want covered, for example your vehicle, your property or your driving history, as recorded by you or your broker.
3. Your enquiries, the responses insurers send to your broker, your broker's notes to you, and the choices you make.
4. Your confirmation that the details your broker recorded are correct, and any changes you ask your broker to make.
5. Your login and security records, described above.

How your information is used

1. Your broker uses it to manage your insurance enquiries and to send your risk details to the insurers your broker chooses.
2. Insurers receive your risk details and your name. They never receive your email address, telephone number or street address from this platform.
3. You can see your enquiries, confirm or correct the details your broker recorded, and follow each enquiry's progress.
4. We send you emails about your account and your enquiries. Email is the only channel used for clients who join through a broker; no WhatsApp messages are sent to them.
5. EQI Caribbean uses your login and security records to keep your account and the platform secure, and to keep the records the law requires.

Your information is not sold, and it is not used for marketing by EQI Caribbean.

Lawful basis

Your information is used with your explicit consent under the Barbados Data Protection Act 2019-29, which you give on the consent page when you set up your account. Before inviting you, your broker also confirms that it holds your consent to record your details on this platform and to send them to the insurers it chooses.

Who can see your information

1. Your broker and the members of its staff it authorises.
2. The insurers your broker chooses, who see your risk details and your name only.
3. EQI Caribbean staff, only where needed to keep the platform running and secure, to help your broker when it asks for support, or where the law requires.
4. The service providers listed in section 13 of this Privacy Policy, who host and run parts of the platform for us.

Where your information is kept

The platform is hosted in the United States, and some of our service providers are in the United States and France. Section 14 of this Privacy Policy explains how your information is protected when it is held outside Barbados.

How long your information is kept

Your broker decides how long the records about your enquiries are kept, within what the law allows. EQI Caribbean keeps your login and security records and the audit trail for seven years, as section 9 of this Privacy Policy explains. If your broker stops using EQI Caribbean, the records it controls are returned to your broker or deleted, as agreed between your broker and EQI Caribbean, except where the law requires us to keep them.

Your rights

You may ask to see your information, to have it corrected or deleted, and to withdraw your consent. You may also complain to the Data Protection Commissioner.

For the records about your enquiries, please contact your broker first. Your broker's contact details are on your sign in page. For your login and security records, or if you cannot reach your broker, email legal@eqicaribbean.com. We will pass your request to your broker where it concerns their records, and help them reply within 30 days.

Your broker's own privacy notice

If your broker has its own privacy notice, it is linked from your consent page, and it applies together with this section. If your broker has no privacy notice of its own, this section is the notice that applies to you.

Contact

Project 3 Consultants and Logistics Inc., trading as EQI Caribbean Technology, #42 Durette Gardens, Gemswick, St Philip, Barbados. Email: legal@eqicaribbean.com.

19. How the platform operates in your territory

In some territories, or for some products, accounts are set up only by invitation from a licensed provider. If you set up your account that way, section 18 of this Privacy Policy applies to you, and the provider who invited you is the data controller for the information about your enquiries. The record of your consent shows which way you joined and the version of this Privacy Policy you were shown.