Privacy Policy

1. Who we are

This website is owned and operated by HEZR Solutions Limited ("HEZR", "we", "us", "our"), a company registered in Jamaica providing solar PV, electrical, air-conditioning, plumbing, and engineering services.

For the purposes of the Jamaican Data Protection Act, 2020 ("DPA") and, where applicable, the EU General Data Protection Regulation ("GDPR"), HEZR Solutions Limited is the data controller of the personal data described in this policy.

2. Scope of this policy

This policy applies to personal data we collect through this website (hezrsol.com), through our quote-request form, by telephone, email, or WhatsApp, and in the course of providing our services. It does not apply to third-party websites we link to, which have their own policies.

3. The personal data we collect

We do not intentionally collect special-category / sensitive personal data through this website. Please do not send us such data unless we specifically request it for a service.

4. How and why we use your data

Under the DPA and GDPR we must have a lawful basis for each use of your data:

5. WhatsApp and Meta communications

We use WhatsApp (a service of Meta Platforms, Inc.) to reply to enquiries and communicate with customers who contact us or opt in. When you message us on WhatsApp, or tick the WhatsApp opt-in on our quote form, you agree to receive messages from HEZR Solutions related to your enquiry or service.

• We send business messages only to people who have contacted us first or given consent. You can opt out at any time by replying STOP or telling us in any message.
• Your WhatsApp messages are delivered and processed by Meta under WhatsApp's Privacy Policy. We do not control Meta's own processing of your data.
• We handle all transactions and communications in line with the WhatsApp Business & Commerce Policy and the Meta Commerce Policy.

6. Who we share data with

We do not sell your personal data. We share it only as needed to run our business, with:

• Service providers (processors) acting on our instructions — for example our website host and content-delivery provider, email provider, and messaging platform (WhatsApp/Meta).
• Professional and regulatory bodies where required for licensing, inspection (e.g. GER), tax, or legal compliance.
• Authorities where we are legally obliged to disclose, or to protect our rights, property, or safety.

We require our processors to protect your data and use it only for the purposes we specify.

7. International data transfers

Some of our providers (including Meta/WhatsApp and our hosting provider) process data on servers outside Jamaica, including in the United States and the European Union. The DPA restricts transfers of personal data outside Jamaica unless adequate protection or appropriate safeguards are in place. Where we transfer your data internationally, we rely on safeguards such as the providers' own data-protection commitments and contractual protections. If you are in the EU/EEA, transfers outside the EEA are made under appropriate GDPR safeguards (such as Standard Contractual Clauses).

8. How long we keep your data

We keep enquiry data only as long as needed to respond and, if you become a customer, for the life of our relationship plus the period required for warranty, tax, and legal record-keeping. We then securely delete or anonymise it. We can tell you the retention period for a specific record on request.

9. How we protect your data

This website is served over encrypted HTTPS. We apply reasonable technical and organisational measures — access controls, reputable providers, and staff awareness — to protect personal data against loss, misuse, and unauthorised access, as required by the DPA's security standard. No method of transmission is perfectly secure, but we work to safeguard your information.

10. Your rights

Subject to the DPA (and the GDPR where it applies to you), you have the right to:

• Be informed about how your data is used (this policy);
• Request access to the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your data where there is no overriding reason to keep it;
• Object to or request restriction of certain processing;
• Withdraw consent at any time (including WhatsApp/marketing opt-ins);
• Request portability of data you provided (GDPR);
• Lodge a complaint with a supervisory authority.

To exercise any right, contact us at info@hezrsol.com. We respond within the timeframes required by law and may need to verify your identity first. There is normally no charge.

11. Cookies & analytics

This website uses only the cookies strictly necessary for it to function. We do not use tracking cookies, analytics platforms, or advertising pixels.

12. Children

Our services and website are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows the latest version. Material changes will be highlighted on this page.

14. Contact & complaints

Questions or requests about your data? Contact HEZR Solutions Limited at info@hezrsol.com or (876) 287-1468.

If you are not satisfied with our response, you may complain to the Office of the Information Commissioner (Jamaica) — the authority that oversees the Data Protection Act, 2020. If you are in the EU/EEA, you may also complain to your local data-protection authority.