Privacy Policy

STOKLYNC is a B2B wholesale marketplace operating in Jamaica, connecting buyers with verified suppliers. We operate under Jamaican law including the Data Protection Act 2020. Contact: privacy@stoklync.com

• Name, business name, email, phone — when you submit a quote, sourcing request, or create an account • Order and transaction history — when you place orders • Device and usage data — IP address, browser type, pages visited (security and analytics) • Supplier/seller information — business name, contact details • Driver information — name, vehicle, contact, verification documents We do not collect sensitive personal data (race, religion, health, biometrics).

We process your personal data on one or more of the following lawful bases: • Consent — you have given clear consent (e.g. quote form checkbox). You may withdraw consent at any time. • Contract — processing is necessary to fulfil an order or service agreement • Legitimate interests — operating our business, fraud prevention, analytics • Legal obligation — tax and accounting records required by Jamaican law

• Respond to quote and sourcing requests • Process and fulfil orders • Send order updates and invoices • Operate the seller and supplier portal • Prevent fraud and ensure platform security • Comply with Jamaican tax and company law • Improve our services (using anonymised analytics)

We do not sell your personal data. We share it only: • With sellers/suppliers: your order details are shared with the relevant seller to fulfil your order • With payment processors: Stripe processes card payments — see stripe.com/privacy • With delivery partners: driver dispatch to coordinate deliveries • With legal authorities: if required by Jamaican law or court order

We retain personal data only as long as necessary: • Customer orders: 7 years (tax records) • Customer accounts: 7 years after last transaction • Quote/lead requests: 3 years • Driver records: 7 years (employment law) • Activity/security logs: 1 year • Feedback and complaints: 2 years After the retention period, records are permanently deleted or anonymised.

You have the right to: • Access — request a copy of your personal data we hold • Correction — request correction of inaccurate or incomplete data • Erasure — request deletion of your data (subject to legal retention obligations) • Objection — object to processing based on legitimate interests • Portability — receive your data in a machine-readable format Submit requests at stoklync.com/dsr. We will respond within 30 days.

We implement encryption (HTTPS/TLS), Row Level Security, and access controls. Staff receive data handling training. In the event of a data breach, we will notify the relevant authorities and affected individuals promptly.

We use essential cookies only (session management, security). We do not use advertising or tracking cookies.

Privacy enquiries: privacy@stoklync.com Data subject requests: stoklync.com/dsr Complaints may be lodged with the Jamaica Information Commissioner's Office: www.ico.gov.jm