Privacy and data protection
How ePOH Jamaica Limited collects, uses and protects your personal data.
Version 3. Effective date: 22 October 2026. This notice is written to meet Jamaica’s Data Protection Act, 2020.
1. Who is responsible
ePOH Jamaica Limited, 20 Castle Drive, Stony Hill, St. Andrew, Jamaica, is the data controller for personal data collected through this website. Contact for privacy matters: privacy@epohjm.com, 1-876-336-ePOH (3764).
2. What we collect
- Contact details you give us in forms: name, business, email, phone or WhatsApp number.
- Order details: items ordered, delivery address, order and payment status. Card details are handled by our payment provider; we do not store your full card number.
- Support details: what you tell us in a ticket or message. Please do not send passwords.
- Publishing enquiries: details about you and your book. We do not ask for manuscripts at enquiry stage.
- Job applications: if you apply through the application form on our Careers page, the details you give us in that form, which we use only to consider your application and to contact you about it.
- Technical data: the necessary cookies described in our Cookie notice, and basic server logs kept by our hosting provider for security.
This website is for adults. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please tell us and we will delete it.
3. Why we use it, and our legal basis
| Purpose | Basis |
|---|---|
| Take, deliver and refund orders; provide services and support | To carry out our contract with you, or steps you ask for before a contract |
| Keep accounting and tax records | To meet our legal obligations |
| Keep our systems secure, prevent fraud, handle disputes | Our legitimate interests |
| Send you news, offers or catalogues | Your consent, which you can withdraw at any time |
We use your data only for these purposes and not in a way that is incompatible with them. We do not use your data for automated decisions that significantly affect you.
4. Who sees it
Our team, and service providers who help us deliver your order, take payment, send email, run our support desk or host our systems, only as needed and under their obligations to protect it. We do not sell your data. We may disclose data where the law requires it or to protect our legal rights. We do not name our suppliers on this page; contact us if you want to know the categories of recipients for your data.
5. Where data is held
Our systems and some service providers may store data outside Jamaica. Where that happens we take steps to make sure your data is given appropriate protection.
6. How long we keep it
| Data | Kept for |
|---|---|
| Orders, invoices and payment records | 7 years |
| Support tickets and messages | 3 years after closure |
| Enquiries that did not become orders | 2 years |
| Marketing list | Until you unsubscribe |
| Job applications | 12 months after the decision |
After these periods we delete or anonymise the data, unless the law requires us to keep it longer.
7. Your rights
Under the Data Protection Act, 2020 you may ask to see the personal data we hold about you and receive a copy, ask us to correct data that is wrong, ask us to stop using your data in certain ways, withdraw your consent where we rely on it, and object to direct marketing. Email us at the privacy contact above and we will respond within the time the law allows. We may need to confirm who you are first.
8. Security
We protect personal data with access controls, secure (HTTPS) connections and limited access for our team and providers. If a data breach is likely to affect you, we will notify you and the Information Commissioner as the law requires.
9. Complaints
Please contact us first at admin@epohjm.com. You may also complain to Jamaica’s Office of the Information Commissioner.
10. Changes
We will update this page when our practices change and show the date of the latest version above.