This policy explains what personal information we collect when you use the EQI Caribbean platform, why we collect it, who we share it with, and what rights you have over it. It applies to both routes through the platform, insurance and credit. Please read it alongside our Data Protection Notice, which sets out in detail exactly what each provider on the platform can see and when.
The EQI Caribbean platform is operated by Project 3 Consultants and Logistics Inc., a company incorporated in Barbados under Company Registration No. 52770, trading as EQI Caribbean (Technology) ("EQI Caribbean", "we", "us", "our"). Project 3 Consultants and Logistics Inc. is the data controller for all personal information described in this policy.
Our registered office is #42 Durette Gardens, Gemswick, St Philip, Barbados.
EQI Caribbean is a technology platform only. We are not an insurer, an insurance broker, a lender, a financial adviser, or any form of financial intermediary. We do not issue policies, bind coverage, make credit decisions, approve loans, or handle premiums, repayments or deposits. No payment is made on this platform at any stage.
Our designated Data Protection Officer is Mark Foster, who can be reached at legal@eqicaribbean.com or by writing to the registered office above.
For any question about this policy or about your personal information, write to us at legal@eqicaribbean.com.
You hold one EQI Caribbean account. From that account you can take either of two routes:
In both cases you choose which providers receive your request. Responses are indicative and non-binding. Any agreement you go on to make is between you and the provider directly.
We collect information you give us directly, and information generated automatically as you use the platform.
| Purpose | Lawful basis |
|---|---|
| Creating and running your account | Performance of a contract |
| Sharing your request with the providers you select, so they can prepare an indicative response | Your explicit consent, given at the point of submission |
| Sending you platform notifications and your sign-in verification code | Performance of a contract |
| Keeping the platform secure, preventing fraud, and maintaining audit records | Legitimate interest and legal obligation |
| Responding to requests from regulators, courts or law enforcement | Legal obligation |
We do not use your information to make automated decisions about you. The platform does not score, rank or filter applicants, and it does not carry out any underwriting or credit assessment. Every such decision is made by the licensed provider you engage, using their own processes.
We share your information only with the providers you yourself select, and only in the way described below. Providers you do not select receive nothing.
What is shared depends on the route you choose:
| Route | What the provider receives | When |
|---|---|---|
| Direct to insurer or lender | Your risk or application details, together with your name, email, telephone number and address | At the point you submit |
| Through a broker | Your broker receives your full details. Any insurer the broker approaches on your behalf receives your risk details and your name only, never your email, telephone number or address, at any stage | At the point you submit, and when the broker approaches an insurer |
| Providers you did not select | Nothing | Never |
Responses are sealed. No provider can see the pricing or terms offered by any other provider. This is enforced by the platform, not by policy alone.
When you accept a response, the provider who made it is notified that you have chosen them and will contact you directly. No policy is bound, no credit is advanced and no payment is collected through this platform at any stage.
Once a provider receives your information they become responsible for it in their own right, as an independent data controller. Their own privacy policy governs what they do with it from that point. Our agreement with them requires that they use it only to respond to your request, that they do not use it for marketing or any other purpose without your separate permission, and that they handle it in line with applicable data protection law.
We never sell, rent or trade your personal information. We do not share it with anyone for their own marketing or commercial purposes.
Brokers may submit requests on behalf of clients who have approached them directly rather than through this platform. Where that happens, the broker confirms to us that they hold that client's permission to do so. The client's contact details are withheld from every insurer on the platform at every stage, and the broker handles all direct contact with their client themselves.
Some requests name another individual, for example an additional driver on a motor request or a joint insured on a property request. We collect only the limited details needed to assess the risk, typically that person's name, age and relationship to you.
When you submit a request naming someone else, you confirm that they are aware their details are being submitted and that they have given you their permission. We rely on that confirmation and do not contact them separately.
If you have been named in a request submitted by someone else and you want to see, correct or remove your details, contact us at legal@eqicaribbean.com and we will help you.
Each time a provider views your request on the platform, we record which organisation viewed it, which member of their staff viewed it, when, what level of detail they were shown, and which fields were returned to them.
You have the right to ask us for a complete record of every organisation that has accessed your personal information. Email legal@eqicaribbean.com with the subject "Data Access Log Request".
There are two paths, and which one applies depends on what you ask us to do.
| What you do | What happens to your information |
|---|---|
| You ask us to erase your data | We erase your personal information within 30 days. Your consent records and audit trail are retained for seven years, because the Data Protection Act requires us to keep them, but they no longer identify you. |
| You stop using the platform, or close your account without asking for erasure | We retain your records for seven years, in line with our regulatory obligations, and then review and securely delete them. |
Where we are subject to a legal hold requiring us to keep particular records, we will tell you and retain only what we are obliged to.
Under the Barbados Data Protection Act 2019-29, and equivalent legislation in the other territories we serve, you have the right to:
Withdrawing consent does not affect the lawfulness of anything we did before you withdrew it, and it cannot recall information already shared with a provider you selected.
| Request | How to make it | Our response time |
|---|---|---|
| Access your data | Email legal@eqicaribbean.com, subject "Data Access Request" | 30 days |
| Correct your data | Email legal@eqicaribbean.com, subject "Data Correction Request" | 30 days |
| Erase your data | Email legal@eqicaribbean.com, subject "Data Deletion Request" | 30 days |
| Record of access | Email legal@eqicaribbean.com, subject "Data Access Log Request" | 30 days |
| Withdraw consent | Email legal@eqicaribbean.com, subject "Consent Withdrawal" | 5 business days |
For erasure requests we apply a double confirmation step, so that no account is deleted by accident or by someone acting without your authority.
No system connected to the internet can be guaranteed completely secure. We take all reasonable steps to protect your information, and we will notify you and the Data Protection Commissioner within the time limits set by the Act if a breach occurs that is likely to affect your rights.
We use a single authentication cookie to keep you signed in across the platform. It cannot be read by browser scripts, it is only ever transmitted over an encrypted connection, and it expires when you sign out or after a period of inactivity. We do not use advertising cookies and we do not track you across other websites.
We use the service providers below to operate the platform. Each is engaged under terms that permit them to use your information only to provide the service described, and never for their own purposes.
| Provider | What they do | Where |
|---|---|---|
| Render Inc. | Hosting for the platform and its database | Virginia, United States |
| Cloudflare Inc. | Domain routing, encryption and content delivery | United States |
| Brevo (Sendinblue SA) | Sending sign-in codes and platform notification emails | France |
| Anthropic PBC | Powers Benn, our on-platform assistant. What you type into Benn is sent to Anthropic to generate a reply | United States |
| Cloudinary Ltd | Hosting provider company logos | United States |
| GitHub Inc. | Storing the platform's source code. No personal information is held here | United States |
The platform is hosted in the United States and some of the companies listed in section 13 are based outside the Caribbean. This means your information is processed outside the territory you live in.
We only transfer your information where it is necessary to operate the platform and provide the service you have asked for. Each provider is engaged under written terms that require them to protect your information to a standard equivalent to that required by the Barbados Data Protection Act 2019-29, to process it only on our instructions, to keep it secure, and to notify us promptly of any breach. By using the platform you consent to your information being processed in these countries for the purposes set out in this policy.
The platform is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a person under 18 has provided information through the platform, contact us at legal@eqicaribbean.com and we will delete it.
We may update this policy from time to time. When we do, we will change the effective date at the top of this page, and where the change is significant we will email registered users at least 14 days before it takes effect. Continuing to use the platform after that date means you accept the updated policy.
If you have a question or a complaint about how we handle your information, contact us first at legal@eqicaribbean.com. We aim to acknowledge every complaint within two business days.
If you are not satisfied with our response, you have the right to complain to the data protection authority in your territory. In Barbados that is: