Privacy Policy

1 About DehSuh & this policy

DehSuh ("DehSuh", "we", "us") operates an online marketplace for advertising and booking vehicles, equipment and spaces. We are based in Jamaica and our users are in Jamaica and elsewhere. This policy covers our website, mobile experience, emails and related services (the "Service").

We handle personal information in line with Jamaica's Data Protection Act, 2020. Where the data-protection laws of your own country also apply (for example the EU or UK GDPR, or U.S. state privacy laws), we aim to honour the rights they give you.

2 What DehSuh is — and isn't

A booking deposit is a part-payment toward a booking, not a security deposit. The balance and any security arrangement are handled directly between customer and lister, outside DehSuh, so we don't receive information about them unless you send it to us.

3 Information we collect

Your account

• Name, email address, phone number and password (stored only in hashed form).
• Optional profile photo, and preferences such as the currency you view prices in.

Lister verification

To become a lister you may provide:

• Government-issued ID (front and back).
• For businesses: business name and address, registration documents, tax type, Tax Registration Number (TRN) and tax documents.

These documents are sensitive. We use them only to verify identity and eligibility, prevent fraud and meet legal obligations, restrict who can see them, and never display them publicly.

Listings

Descriptions, photos, prices, availability and schedules, location (an address or map point), and booking deposit rules.

Booking requests and bookings

• The listing, the date, time or date range you request, guest or quantity details, your message, and your contact details.
• The booking's status (pending, accepted, declined, rescheduled, cancelled), any rescheduled times, and when it was received.

Booking deposits, checkout and cart

• The items in your cart, the timed hold on your dates, the deposit amount for each listing, and a reference number.
• How you paid (card or PayPal) and the payment status (pending, paid, expired, refunded).
• From our payment processors: an order or transaction reference, the amount captured, the payment status and the time. For cards this may include the card brand and last four digits, but never the full card number or security code.
• The IP address and device or browser details used to pay, to help verify payments and respond to disputes.

Payout details (listers)

• Bank account: bank name, branch, account type, account holder name and account number. The account number is stored encrypted and shown only with all but the last few digits hidden.
• PayPal: the email address of your PayPal account.
• Payout records: the bookings included, deposit and processing-fee amounts, the payout amount, the method, status, reference, and any reason a payout was declined.

Plans and subscriptions

• The plan, price, period, renewal setting and status.
• For card payments: a reference to your card held by our processor (a token, not the card number) if you save a card for renewal, plus the card brand and last four digits.
• For bank transfers: the proof of payment you upload.

Reviews and messages to us

Reviews and ratings you post, and anything you send us when you contact support, request a refund, or raise a dispute.

Information collected automatically

• IP address, device and browser type, and approximate location derived from your IP.
• Pages viewed, searches, listings opened, and security logs such as sign-ins and failed requests.
• Information from cookies (Section 9).

4 How we use information

• To create and run your account, and let you switch between customer and lister.
• To verify listers and review documents.
• To publish listings and run search, maps and currency display.
• To deliver booking requests to listers and let both sides accept, decline or reschedule.
• To hold dates during checkout, take and verify booking deposit payments with our processors, and confirm bookings.
• To calculate processing fees and payouts, process payout requests, and send payouts to the lister's bank or PayPal.
• To take plan payments, renew plans you've set to renew, and send reminders.
• To handle refunds, cancellations, chargebacks and disputes.
• To detect and prevent fraud, abuse and security problems.
• To send service emails (Section 8) and, if you agree, marketing you can opt out of.
• To understand how the Service is used and improve it.
• To meet legal, tax and accounting obligations and enforce our Terms.

We don't make decisions that have legal or similarly significant effects on you based solely on automated processing. Account, verification and payout decisions are reviewed by a person.

5 Our legal bases

• Performing our agreement with you: running your account, bookings, payments, plans and payouts.
• Your consent: for optional marketing, and for saving a card for renewal. You can withdraw it at any time.
• Legitimate interests: keeping the Service secure, preventing payment fraud, resolving disputes and improving the Service, balanced against your rights.
• Legal obligations: keeping financial, tax and verification records, and responding to lawful requests.

6 Who we share it with

We do not sell your personal information or share it for third-party advertising.

• Between customer and lister. When you send a booking request or pay a deposit, the lister sees your name, contact details, the dates or times requested, your message, the deposit paid and how you paid. Customers see the lister's public listing and contact options, and the lister's details on their booking confirmation.
• Payment processors. Dime and PayPal receive what they need to process payments, verify them and handle disputes.
• Payout channels. Your bank or PayPal details are used to send your payouts through the relevant bank or PayPal.
• Other service providers. Hosting, email delivery, maps and analytics providers who act on our instructions.
• DehSuh staff. Only staff who need it, for example to review verification documents or process payouts.
• Legal, safety and disputes. Authorities, courts, or payment processors and card issuers when required by law, to respond to a chargeback, to enforce our Terms, or to protect people from harm or fraud.
• Business transfers. As part of a merger, acquisition or sale of assets, subject to this policy.

7 What's public

Listing title, description, photos, prices, general location, business or display name, chosen contact options and deposit requirements are public and may be indexed by search engines. Reviews show with your display name.

Booking requests, payments, payout details and verification documents are never public. They're visible only to you, the other party to the booking where relevant, and authorised DehSuh staff. Once you share contact details with another user, we can't control how they use them.

8 Emails & notifications

We send service emails that you can't opt out of while you have an account, because they're part of the Service. These include:

• Booking requests, acceptances, declines, reschedules and reminders.
• Payment receipts and booking confirmations, including the payment method and reference.
• For listers: new bookings, deposits received, fees, payout requests, and payouts sent or declined.
• Plan payments, pending or failed payments, renewal reminders and expiry notices.
• Security and account notices.

Marketing emails are optional, and every one includes a way to unsubscribe.

9 Cookies & sessions

• Essential: keep you signed in, protect forms against forgery, keep your cart and checkout hold working, and secure payment pages. The Service doesn't work without them.
• Preferences: remember choices such as your currency.
• Analytics: help us understand usage and fix problems.

You can block or delete cookies in your browser, but parts of the Service, including checkout, may stop working.

10 Service providers

Each provider handles your information under its own privacy policy as well as our instructions. We aren't responsible for the practices of third-party sites you visit from DehSuh.

11 How long we keep data

12 How we protect data

• Passwords are hashed, and connections to the Service are encrypted (HTTPS).
• Bank account numbers are encrypted in our database, masked on screen and kept out of logs.
• Card details are entered on our processor's secure form and never touch our servers.
• Every payment is verified directly with the processor on our server before a booking or plan is confirmed.
• Access to verification documents, payment records and payout details is limited to staff who need it.

No system is completely secure, so we can't guarantee absolute security. If a breach affects your personal information, we'll notify you and the Information Commissioner where the law requires. Please keep your password private.

13 Your privacy rights

Subject to the law, you can ask us to:

• Give you access to the personal information we hold about you.
• Correct information that's wrong or incomplete. You can update most details, including payout details, in your profile.
• Delete your information where we don't need to keep it.
• Stop or restrict certain processing, or stop direct marketing.
• Withdraw consent, for example to a saved card or marketing.
• Give you a copy of certain information in a portable format.

Contact us (Section 17) to make a request. We may need to verify your identity. Records we must keep for tax, accounting or dispute reasons may not be deleted straight away. You can also complain to Jamaica's Office of the Information Commissioner, or to the data-protection authority where you live.

14 Children

The Service is for adults. You must be 18 or older to create an account, send a booking request, pay, list or receive payouts. We don't knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we'll remove it.

15 International transfers

DehSuh is run from Jamaica, and the servers that host the Service are in the United States. Our providers, including our payment processors, may process information in other countries. Those countries' laws may differ from yours, and authorities there may be able to request access to information. We take steps to keep your information protected in line with this policy wherever it's processed, and where the law requires a specific safeguard for transfers, we rely on one.

16 Changes to this policy

We may update this policy. We'll change the "Last updated" date and, for significant changes, notify you by email or on the Service. Continuing to use the Service after a change takes effect means you accept the updated policy.