1. Who operates this pilot?
The site is currently using the temporary name “One Caribbean.” The legal business name and registration in St. Vincent and the Grenadines have not yet been finalized. A verified operator identity, postal/contact details, and monitored privacy contact must be added before public launch.
2. Information the pilot may process
- Accounts: email addresses, sign-in and account-session information handled through the authentication provider. Do not share your password with other users.
- Seller and business profiles: business name, country or location, category, descriptions, products, prices, optional public contact details, and uploaded photographs.
- Private enquiries: product-related messages between participating buyers and sellers.
- Technical information: device/browser and connection data that hosting, security and infrastructure providers may record as part of operating the service.
- Optional location: if you tap “Use my current location,” your browser may ask permission to determine your coordinates for a map search.
There is no marketplace checkout or recurring subscription payment collection in this pilot.
3. Why information is used
To authenticate accounts, receive and review business applications, display approved listings and photos, provide account dashboards, support seller/customer enquiries, and operate or secure the website. Exact legal bases for each purpose must be reviewed for the jurisdictions served.
4. What is visible to others?
Approved business information and any optional public contact details submitted for publication may appear on public pages. Do not include private home contact details unless you intend them to be displayed. Seller and customer messages are intended for conversation participants, not public display; their protection must be verified in the live database access rules.
5. Outside services and international transfers
This pilot uses Cloudflare Pages for hosting, Supabase for authentication and stored marketplace data, and Google Maps search links for hospitals and police stations. Third-party services operate under their own policies and may process data in more than one country. The operator must review provider contracts and international transfer requirements before public launch.
When you open a Google Maps result, the search text or coordinates used in the link are sent to Google Maps. The website does not intentionally save those coordinates in the marketplace database, but hosting logs and third-party processing still require verification.
6. Browser storage and cookies
Authentication features may store session-related information on your device. The installable website uses a service worker that can cache static assets and an offline page; it is designed not to cache private account pages. Verify third-party SDK behavior and any analytics or cookies before publishing a final cookie notice.
7. Your choices and requests
You may avoid location access by selecting a country manually. You can avoid publishing optional business contact details. A working privacy request and account-deletion contact is not yet available and must be established, with an appropriate response process, before the general public is invited to register.
8. Retention, security and changes
Retention schedules, deletion procedures, backups and live access controls are not yet fully documented or audited. The owner must confirm them before adopting a final privacy notice. Technical measures cannot guarantee absolute security. This draft should be replaced after legal and operational review.