Privacy Policy

1. Our Commitment to Your Privacy

Quiet Craft Solutions Inc. ("we," "us," "our") is committed to protecting and respecting your privacy. This Policy explains how we collect, use, process, and protect your personal data in compliance with the Data Protection Act 2023 of Guyana (the "Act").

2. Who We Are (Data Controller)

For the purposes of the Act, the Data Controller is:

Our Data Protection Officer can be contacted at:

3. Information We Collect ("Personal Data")

We may collect and process the following types of personal data about you:

• Personal Identifiers: Information you provide by filling in forms, such as your name, email address, postal address, and phone number.
• Transaction Data: Details of transactions you carry out through our Site. We do not store your full financial (credit card) data, which is processed by our third-party provider, Stripe. We only receive confirmation of payment.
• Technical & Usage Data: Information collected automatically when you use our Site, such as your IP address, cookie data, device type, browser information, and location data.
• User-Generated Content: Information you provide through our services, such as messages to other users, uploaded files, photos, or project descriptions.
• Sensitive Personal Data: We do not collect any "sensitive personal data" as defined by the Act (e.g., racial or ethnic origin, political opinions, religious beliefs, health data).

4. Legal Basis for Processing Your Data

We will only process your personal data when the law allows us to. Under the Data Protection Act 2023, our legal bases for processing include:

• Consent: Where you have given us freely given, specific, informed, and unambiguous consent to process your data for a specific purpose (e.g., signing up for our marketing newsletter).
• Contract: Where processing is necessary for the performance of a contract with you (e.g., to create your account and provide the Services you have requested).
• Legal Obligation: Where processing is necessary for us to comply with the law (e.g., our record-keeping obligations under the Companies Act).
• Legitimate Interests: Where it is necessary for our legitimate interests (such as ensuring platform security and preventing fraud) and your fundamental rights do not override those interests.

5. How We Use Your Personal Data

We use the information we collect only for specified, explicit, and legitimate purposes. These purposes include:

• Email Address: To send login alerts, provide invoices, and (where you have consented) send marketing newsletters.
• IP Address: To ensure platform security, prevent fraud, and personalize content.
• Address: To verify your identity and, if applicable, to facilitate the delivery of products or services.
• User-Generated Content: To display this content to other users as part of our service (e.g., to show your profile, post your job listing, or deliver your message).
• Financial Data: We do not collect or store your full credit card information. We use a third-party processor (Stripe) to handle all payments. We only receive a transaction confirmation, token, or partial card details to verify payment.

6. Your Rights as a Data Subject

Under the Data Protection Act 2023, you have the following rights regarding your personal data. You may exercise these rights at any time by contacting our Data Protection Officer.

• The Right to Access: You can request copies of your personal data.
• The Right to Rectification: You can request that we correct any information you believe is inaccurate or incomplete.
• The Right to Erasure ("Right to be Forgotten"): You can ask us to delete your personal data under certain conditions.
• The Right to Restrict Processing: You can request that we restrict the processing of your personal data under certain conditions.
• The Right to Object to Processing: You can object to our processing of your personal data under certain conditions.
• The Right to Data Portability: You can request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
• The Right to Withdraw Consent: Where we rely on your consent to process data (e.g., for marketing), you have the right to withdraw that consent at any time.

7. Data Security

We have implemented appropriate technical and organizational security measures (such as encryption and access controls) to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed.

In the event of a personal data breach, we will notify the Data Protection Commissioner of Guyana without undue delay and not later than 72 hours after becoming aware of it, as required by the Act. We will notify you if the breach is likely to result in a high risk to your rights and freedoms.

8. Data Retention

We will only retain your personal data for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• User Account Data: We retain your personal data for as long as your account is active and for a period of 6 months after account deletion to handle any final queries or issues.
• Transaction Data: We are required by Guyanese tax and company law to retain financial transaction records for a period of seven (7) years after the transaction.
• Marketing Data: If you have consented to marketing, we will retain your contact details for this purpose until you withdraw your consent.
• Technical & Log Data: Server logs (including IP addresses) are retained for a rolling period of 90 days for security and troubleshooting purposes.

9. Third-Party Sharing and International Data Transfers

We do not sell your personal data. We only share it with the following categories of third-party service providers who help us operate our business:

• Payment Processors (e.g., Stripe) to securely handle payments
• Cloud Hosting Providers (e.g., AWS, Google Cloud, DigitalOcean) to host our Site and data
• Analytics Providers (e.g., Google Analytics) to understand how our users interact with our Site
• Email/Marketing Services (e.g., Mailchimp) to manage our newsletters
• Customer Support Software to manage and respond to user queries

Many of these service providers are based in the United States of America. When we transfer your personal data to the US or another country outside of Guyana, we do so in full compliance with the Data Protection Act 2023. We ensure a similar degree of protection is afforded to it by using legal safeguards such as Standard Contractual Clauses or ensuring the provider operates under a data protection framework deemed "adequate" by the relevant authorities.

10. Cookie Policy

Our Site uses "cookies" to help personalize your online experience. A cookie is a text file placed on your hard disk by a web page server. You have the ability to accept or decline cookies. We recommend publishing a separate Cookie Policy detailing the specific cookies in use.

11. Changes to This Privacy Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

12. Contact Us & Lodging Complaints

For any questions, concerns, or requests to exercise your rights, please first contact our Data Protection Officer:

You also have the right to lodge a complaint at any time with the Data Protection Office of Guyana if you believe your data protection rights have been infringed.