Privacy Policy
Stewart’s Auto Sales (“SAS”) is a first-class, full-service dealership that provides automobiles, industrial equipment and automotive products in Jamaica. SAS values your trust in us and is committed to protecting your privacy and the confidentiality of your personal information.
This document explains who we are, what personal data we collect, why, how and where we use it, who we may share it with, and how long we keep it. It explains your rights over your personal data under The Jamaica Data Protection Act, 2020. In here, you can find the addresses for SAS and the contact details for our Data Protection Officer.
This notice applies to all processing by SAS within Jamaica for all purposes other than employment by SAS.
This privacy notice was last updated on 9th of March 2025. It is updated frequently. If you are an active customer of SAS and we hold an email address for you, we will email you to notify you of significant updates, but you should always check this website page to ensure you are referring to the current version.
Personal data is any information about you that is held in a way that allows you to be identified. We treat all personal data with great care and commitment to confidentiality.
Data protection and privacy laws categorise some personal data as “sensitive.” This places additional duties on us to protect it with a greater degree of care and shows that we are processing it for the right reasons. Here at SAS, we treat your financial information and other highly personal data with the utmost sensitivity and confidentiality and, of course, in full compliance with the law.
Your personal data belongs to you. We use it to provide products and services to you, to obey the law, and to improve our services. Whatever your relationship with us, you are entitled to the following rights over your data:
“Transparency”
You have the right to a detailed explanation of what data we have about you, how and where we use it, how long we keep it and with whom it is shared. That information is contained in the details of our data processing below.
“Access”
You have the right to a copy of the data we hold about you. We will not charge you for providing this information in electronic form; we may charge for providing it on paper in accordance with the JDPA. We may ask you to prove your identity before we release your data to you.
“Correction”
You have the right to have your data corrected. If you believe we have incomplete, outdated or incorrect information about you, please let us know. We may ask you to provide your identity and to provide evidence supporting the changes you would like made. If you seek to exercise your right to correct your personal data and we are unable to confirm your revised information, we will retain a record of your version of the data alongside ours.
“Review of Automated Decision Making”
You have the right to a human review of decisions we have made about you by purely automated means. Please note that almost all of our decision-making is already reviewed by a person – we use automation to support our team members. You also have the right to prevent decisions being made about you based exclusively on the automated processing of your personal data.
“Prevention of Processing”
You have the right, in certain circumstances, to require us to stop processing your data. These circumstances are: if the personal data is incomplete or irrelevant; if you believe the processing may cause you substantial harm or distress; if our processing is not justified by law; or if we have retained your data longer than required by law.
“Direct Marketing”
You have the right to opt-out of direct marketing. You will need to tell us the email addresses or phone numbers you wish to remove. You also have the right to opt back into marketing at any time.
“Data Portability”
In some circumstances, you have the right to ask us to transfer your data to another service provider directly, where technically possible.
“Withdrawal of Consent”
Where we have asked for your consent to process data, you have the right to withdraw it at any time. We will explain the consequences of withdrawing consent at the time you ask to do so.
If you would like to exercise any of your Rights, email us at: dpo@stewartsautomotivegroup.com
Data Protection Officer
49 ½ South Camp Road, Kingston 4, Jamaica
Tel: 876-928-5041
The data protection law in Jamaica is the Data Protection Act of 2020. This Act defines sensitive personal data as information on a person’s genetic/biometric data, racial origin, political/religious beliefs, trade union membership, health, sex life, or criminal records.
Jamaica does not include financial records in the definition of sensitive data, but SAS treats your financial information with the strictest confidence.
If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Information Commissioner:
The Masonic Building (2nd Floor), 45-47 Barbados Avenue, Kingston 5
Tel: +1 (876) 920-4390 | Email: info@oic.gov.jm
The list below is constantly under review and will be updated as the law changes. If you would like more information about our processing on the basis of legal obligation, please contact our DPO.
| Category | Legislation | Regulator |
|---|---|---|
| Data protection | Data Protection Act of 2020 | Office of the Information Commissioner |
| Special Economic Zone | Special Economic Zones Act of 2016 | Jamaica Special Economic Zone Authority |
The information we collect varies depending on the context. Below are the categories of information we may collect for the purposes listed in the specifics of processing sections below.
| Category | Examples of data collected |
|---|---|
| Browser data | Details provided by your device when using an app or browser, including IP address and technical device info. |
| Call recordings | Audio and video recordings of inbound and outbound calls. |
| CCTV | Video recordings collected at our premises, including interior and surrounding public areas. |
| Contact / Demographic | Name, address, phone, email, social media, DOB, marital status, gender, and signature. |
| Cookies | Small files used to deliver website services and identify you between sessions. |
| Employment info | Employment status and employer name (as part of concession agreements). |
| Financial info | Credit scores, references, income/outgoings, bank details, and transactional history. |
| Govt-issued ID | Driver’s licence, passport, or tax identification numbers. |
| Vehicle info | Make, model, value, registration, and VIN. |
We transfer your personal data to other countries as required to enable the monitoring of vehicle performance, service delivery, and administering warranty-related services. These transfers are protected by binding agreements that include standard contractual clauses and appropriate safeguards.
Purposes & Legal Bases:
- Delivering the website and analyzing traffic (Legitimate interest).
- Placing cookies on your device (Consent).
- Contacting us or booking an appointment (Consent).
Data Collected:
Browser data, cookies, and contact information if an appointment is booked.
Retention:
Cookies are deleted when you close your browser. Appointment data is retained for 90 days following your last interaction.
Purposes:
Crime prevention and detection, and Health and Safety.
Retention:
Recordings are kept for 90 days. If an incident is suspected, this may extend to 180 days or longer if legally required.
Sharing:
Data is shared with technology partners and, if required by law, law enforcement or government entities.
Purposes of processing:
- Facilitating contract performance and vehicle sales/services.
- Processing payments and providing warranty services.
- Detecting, preventing, and investigating fraud.
- Complying with legal and regulatory obligations.
- Direct marketing (based on legitimate interest for profiling and consent for contact).
- Customer satisfaction surveys and distribution strategy planning.
Categories of Data Collected:
Contact/Demographic info, Government ID, Employment info, Filiation info, Financial info, Interests, and Marketing preferences.
Retention:
We retain data for 7 years following the expiration of our relationship or the end of the warranty period. If no contract is established, data is kept for 7 years from the date of the final decision not to proceed to comply with regulatory obligations.
Purposes of processing:
- Assessing suitability for roles and conducting due diligence (including Criminal Background checks).
- Fraud prevention and reporting to regulators.
- Providing online application services.
Categories of Data Collected:
Contact info, Government ID, Employment/Financial info, Health info, Criminal Background info, and Filiation information.
Retention:
Successful applicants follow the Employee Privacy Notice. Unsuccessful applicants’ data is retained for 6 months, unless consent is given to keep it longer for future vacancies.
We share your data with the following categories of third parties:
- Technology and service partners.
- Suppliers, contractors, and partnering manufacturers.
- Regulators and government bodies.
- Other entities and affiliates within the Stewart’s Automotive Group.