The Jamaica Customs Agency (referred to as ‘JCA’, ‘Agency’ or ‘us’) is committed to safeguarding the privacy and security of all personal data while fulfilling its mandate to facilitate trade, protect Jamaica’s borders, and optimize revenue collection. The JCA understands that it has an obligation to all stakeholders whose personal data, including sensitive personal data, is in its possession.
The JCA is a data controller. This means that we are responsible for how we maintain and use your personal data. We are required under data protection legislation to notify you of the information contained in this privacy notice.
This notice provides information about the collection, processing, and storage of personal data, including sensitive personal data, in the possession of the JCA in accordance with data protection legislation, including the Jamaica Data Protection Act (2020), and should be read in conjunction with the Agency’s Data Protection Policy and any individual privacy notices developed from time to time.
The kinds of Information We Hold About You
Personal data is any information, however stored, relating to a living individual or an individual who has been deceased for less than thirty years, who can be identified (either directly or indirectly) alone from that data or in combination with other data. Sensitive personal data refers to specific categories of personal data relating to a person’s genetic or biometric data; filiation, racial or ethnic origins; political opinions, philosophical beliefs, religious beliefs or any other beliefs of a similar nature; trade union membership; physical or mental health; sexual life; or the alleged commission of any offence by the data subject.
We process data about:
- · Employees
- · Relatives, Children, Dependents, and other Associates
- · Customers and Clients
- · Suppliers and Service Providers
- · Advisers, consultants, and other experts conducting business with us
- · Complainants and enquirers
- · Offenders and suspected offenders
- · Foreigners, passengers, and crew
- · Members of the public
We collect, maintain, and utilise certain categories of personal information about you, such as:
- · Name, title, aliases, addresses, telephone numbers, email addresses and other relevant contact details
- · Gender
- · Date of Birth
- · Nationality
- · Marital status and dependents
- · Tax Registration Number
- · Passport and/or driving license details
- · Banking information
- · Academic qualifications/history
- · Employment History
- · Previous Address History
- · Associated businesses
We may also collect, maintain, and utilise special categories of personal data of a more sensitive nature, such as:
- · Health (Medical) data
- · Biometric Data
- · Drug and Alcohol Related Data
- · Religion
- · Political Activity
- · Financial Background
- · Trade Union Membership
- · Information about criminal history, convictions, alleged commission of any offence
How Your Information is Collected
We may collect data directly from you in cases such as:
- · When you submit an Application for Employment with us
- · For Security Vetting/Clearance purposes
- · For Training and Development opportunities
- · For the Administration of Salary, Pension, Leave, and other Staff Benefits
- · For Appraisal, Appointment and Promotion Purposes
- · For the Detection, Prevention, and Investigation of Crime
- · For the Collection of Taxes on Importations and Exportations
- · For the Administration of Disciplinary Matters
- · Accident and Incident Reporting
- · For the Dispatch and Delivery of Correspondence
- · In the Processing of Approved Information Requests
- · When you sign up for Services provided by the Agency, such as access to the Automated System for Customs Data (ASYCUDA), and JA-Customs Connect (JCA Mobile App)
We may also collect your personal data indirectly from third parties such as:
- · Banks, Credit Unions, and other financial institutions
- · Government Ministries, Departments and Agencies within Jamaica
- · Tax Authorities
- · General Open Sources
- · Law Enforcement Entities
- · Previous Employers
- · References, Agents, and other representatives
How We Use Your Information
We may use your personal data when we are legally required to do so. Most commonly, we shall use your personal data where:
· There is a legitimate and legal obligation
· It is required for the personal data to be processed in the performance of a task or in our execution of duties as an Executive Agency within government
- · It is necessary in the detection, prevention, and investigation of criminal offences
- · We need to check the data we maintain about you is accurate and up to date
Data Sharing
Promoting a shared understanding and knowledge base, the JCA encourages the smooth flow of information and data exchange across its ecosystem. This is aimed at enhancing decision making processes and optimizing service delivery within established frameworks.
Personal data, including sensitive personal data, may be shared among authorized members of staff to process that data for the purpose for which it was collected.
We may share your personal data with third parties in relevant circumstances and where the laws permit. When we do share, it will be in relevant circumstances where:
- · It is required by law to share
- · When you have authorised us to do so
- · It is in the public interest to do so
- · It is necessary for our performance as an Executive Agency within government
Data Security
We prioritize the security of your personal data, implementing measures, including administrative and technical controls, to protect against unauthorized access, disclosure, alteration, or destruction. Third-party service providers process data on our instructions, ensuring a level of data protection comparable to the Agency’s standards.
Data Retention
We retain personal data only for the necessary duration, as required by the purpose for which it was collected or by legal requirements.
Your Responsibility to Inform Us of Changes
Data accuracy is crucial; please keep us informed of any changes to ensure the information we maintain about you remains accurate and up-to-date.
Your Data Subject Rights
- The Right to be Informed: Data subjects have the right to be informed about the collection and use of their personal data. This includes information about the collection, usage, storage, and disclosure of your personal data.
- The Right of Access: Confirm and access your personal data, including sensitive personal data.
- The Right to Rectification: Request corrections to your data.
- The Right to Erasure: Exercise the right to have your personal data erased in limited circumstances.
- The Right to Data Portability: Request your data in a portable format.
- The Right to Object: Discontinue processing personal data based on legitimate grounds.
- Rights in Relation to Automated Decision-Making: Understand and challenge automated decision-making.
Data Security
We treat the security of your personal data very seriously. We have put in place a high level of data measures to protect the security of your information. Our measures, which includes administrative and technical controls, are to protect against the risk of accidental or unlawful or illegitimate destruction, loss, alteration, unauthorized disclosure of, or access to, your personal data.
Our third-party service providers will only process your personal data on our instructions or with our agreement, and where they afford a level of data protection that is the same as or comparable to the Agency’s.
We have put in place measures to deal with any suspected data security breach and will notify you if your personal data is affected.
Data Retention
We shall retain your personal data for only as long as is necessary for the purpose(s) for which it was collected and processed or for which it is legally required.
Your Responsibility to Inform Us of Changes
Data accuracy is vital to us in processing activities. It is important that all personal data we maintain about you is accurate and up to date. If any personal data about you changes, you need to keep us informed.
