Privacy & Data Protection Policy

1. Introduction & Commitment

Pelican Sky Technology Group Limited ("Pelican Sky", "we", "us", or "our") is a Jamaican technology engineering company headquartered in Portmore, St. Catherine, Jamaica (meetings by appointment). We take confidentiality, security, and individual privacy seriously. This Privacy Policy outlines how we collect, process, store, and protect personal data collected via our website forms, career applications, consultation inquiries, and client communications, in alignment with the Jamaican Data Protection Act (JDPA 2020).

2. Data We Collect Through Forms

When you interact with our platforms or fill out our online intake forms, we may collect the following categories of personal information:

• Client & Consultation Inquiries: Full name, professional/business email address, company or organization name, service of interest, project scope details, and optional telephone or WhatsApp contact number.
• Career & Remote Internship Applications: Full legal name, personal contact email, telephone/WhatsApp number, target role, portfolio/GitHub/LinkedIn URLs, technical skill inventories, personal background statement, and resume details.
• Technical Metadata: Browser user agent, timestamp of submission, IP address, referral URLs, and audit consent markers to prevent automated spam and preserve submission authenticity.

3. Personal Data Retention

We enforce transparent data lifecycle management and keep personal data only for as long as necessary for the purpose it was collected:

4. Third-Party Service Providers & International Data Transfers

To operate our website, safeguard user data, and deliver services efficiently, we engage vetted third-party service providers who process data on our behalf under strict confidentiality and security terms:

• Google Cloud & Firebase (Google LLC): Cloud infrastructure and database services (Cloud Firestore) for secure storage of form submissions and authentication.
• Google Analytics (Google LLC): Web analytics service used to understand site traffic and performance, loaded only after you grant explicit consent via our cookie banner.
• Cloudflare (Cloudflare, Inc.): Content delivery network (CDN), DNS resolution, DDoS mitigation, and Web Application Firewall (WAF) to protect the site and its visitors.
• Email Service Providers: Secure SMTP and transactional email routing to deliver consultation requests and candidate application notices.

5. Security Controls & Access Governance

We protect your personal data through technical, organizational, and physical safeguards:

• Write-Only Ingestion Rules: Website visitors are granted permission strictly to submit (create) records with validated schema constraints. Public read, list, update, and delete access is completely disabled. No visitor or unauthorized third party can inspect or enumerate submitted records.
• Encryption: Data is protected in transit using TLS (Transport Layer Security) and encrypted at rest using AES-256 through managed cloud encryption keys.
• Administrative Controls: Access to backend database consoles and form submissions is restricted to authorized company personnel using Multi-Factor Authentication (MFA) and least-privilege role boundaries.

6. Your Statutory Rights & Data Erasure

As an individual whose personal data is processed by Pelican Sky Technology Group Limited, you have specific rights under the Jamaican Data Protection Act (JDPA 2020), including:

• The right to be informed about how your data is collected and used.
• The right to request access to the personal data we hold about you.
• The right to request rectification of inaccurate, outdated, or incomplete data.
• The right to withdraw your consent and request erasure (deletion) of your personal data or submitted application.
• The right to object to or restrict processing for direct marketing purposes.

7. Non-Disclosure & Information Sharing

We do not sell, rent, monetize, or trade your personal data, business contact details, or candidate resumes to third-party advertisers or recruitment brokers. Information is shared only with our designated service providers (identified in Section 4) and internal personnel directly responsible for handling your inquiry or application.