privacy policy

1. Who we are

H&S Peanuts Depot (“we”, “us”) sells peas, nuts, seeds, spices and related goods at 16 Oxford Road, Kingston, Jamaica. We decide how your personal information is used, which makes us the data controller for it. You can reach us about anything in this policy using the details in section 11.

2. What we collect

When you send an order from this website

• Your name and phone number
• The items and quantities you want, when you plan to pick up, and any note you add
• For delivery: your delivery address, the delivery day you choose and how you plan to pay. We make an invoice for each delivery order, which you open from a private link; anyone you share that link with can see the invoice

When you have a wholesale account

• Your business name, the contact person, email address and phone number
• Your credit limit, purchases, payments, balance and reorders
• The email address you sign in with. We send a one-time code to it each time you sign in; we do not use passwords for customers

When you buy at the counter

• Your receipt (items, prices, payment method and which staff member served you)
• If you buy on a wholesale account, the sale is linked to that account
• We do not store card numbers. Card payments are handled by the card terminal and your bank

When you message us

If you contact us on WhatsApp, by phone or by email, we keep what you send us so we can reply and fill your order.

Technical information

Like every website, the services that host this site record basic request details (such as your IP address, browser type and the time of the visit) to keep it running and secure. We do not use advertising, tracking or analytics tools, and we do not set cookies of our own.

Information kept on your own device

To save you typing, this website remembers your pickup list and, after you send an order, your name and phone number in your browser's storage. This stays on your device and is not sent to us until you send an order. You can remove it by clearing this site's data in your browser settings. If you sign in to a wholesale account, your browser keeps you signed in until you sign out.

3. Why we use it

• To prepare and hand over or deliver your order, and to contact you about it (for example, to say it is bagged and ready, or on its way). We do this because you asked us to.
• To run wholesale accounts: credit limits, statements, payments and reorders. This is needed for our agreement with you.
• To keep proper business and tax records of sales, refunds and payments. The law requires this.
• To keep our systems and money safe, for example by keeping a record of refunds, voids, discounts and sign-ins, and by stopping abuse of the order form. This is in our legitimate interests and yours.

We do not sell your information, rent it out or use it for advertising. We will only send you marketing messages if you have agreed to them, and you can tell us to stop at any time.

4. Who we share it with

Only our staff who need it to serve you can see your information. We also use a small number of service providers to run this website:

• Supabase, which stores our database and handles wholesale sign-in (servers in the United States)
• Vercel, which hosts this website (servers in the United States and worldwide)
• Resend, which delivers sign-in code emails (servers in the United States)
• Cloudflare Turnstile, which checks that a pickup list is sent by a person and not a bot. It looks at technical details such as your IP address and browser for that check only (servers worldwide)

These providers process information only on our instructions and under their own security and privacy commitments. Because they are based outside Jamaica, your information is transferred to and stored in the United States. We use them because they protect data with strong security, including encryption.

If you choose to message us on WhatsApp, or we send you a WhatsApp message about your order, that message also goes through WhatsApp (Meta), under WhatsApp's own privacy policy. Tapping “Directions” opens Google Maps with our address only.

We may also share information if the law requires it, for example with tax authorities or the police acting under a legal power.

5. How long we keep it

• Website orders: your name, phone number, note and delivery address are removed automatically 2 years after the order
• Sales, refunds, payments and wholesale account records: for as long as Jamaican tax and business record-keeping rules require, normally 7 years
• Wholesale sign-in details: while your account is open, and removed when it is closed and the balance is settled
• Security records (such as staff sign-ins, refunds and voids): as long as our business records, normally 7 years

6. How we protect it

The website only works over an encrypted connection. Our database only accepts changes through checked actions, staff each use their own PIN, managers must approve refunds, voids, discounts and price changes, and important actions are logged. Card details never pass through our systems. No system is perfectly secure, but we work to keep your information safe and review our security regularly.

If a security breach puts your information at risk, we will tell the Information Commissioner and, where required, tell you, within the time the law sets (72 hours).

7. Your rights

Under the Data Protection Act you can:

• ask whether we hold information about you, and get a copy of it with an explanation of how we use it
• ask us to correct information that is wrong or incomplete
• ask us to stop using your information where that use is causing you unwarranted damage or distress, or is no longer needed
• tell us to stop sending you any marketing
• object to decisions made only by a computer that significantly affect you (we do not make any)

To use any of these rights, contact us (section 11). We may need to check who you are before we share anything. We will reply within 30 days. If you are not happy with our answer, you can complain to the Office of the Information Commissioner of Jamaica.

8. Children

This website is meant for adults placing orders. We do not knowingly collect information online from anyone under 18.

9. Staff of the depot

Staff names, PINs (stored only in scrambled form), shifts and the sales they ring up are kept to run the till and protect the cash drawer. Staff can ask the owner for a copy of what is held about them.

10. Changes to this policy

If we change how we use personal information, we will update this page and the date at the top. Big changes will also be shown on the website.

11. Contact us

• Email: info@hspeanutsdepot.com
• Phone or WhatsApp: 876-435-9713
• In person or by post: 16 Oxford Road, Kingston, Jamaica

See also our terms of use.