Introduction

At Puff & Paint Jamaica, we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your information.

This policy applies to all personal data collected through our website at officialpuffandpaintja.com, through our booking platform, via email or social media, and in connection with attendance at any Puff & Paint Jamaica event, class, or experience.

By using our website or booking an event with us, you confirm that you have read and understood this Privacy Policy. Please read it carefully before providing us with your personal information.

Who We Are

Puff & Paint Jamaica is an adult creative experience business based in Ocho Rios, St. Ann, Jamaica. We offer guided themed painting sessions, corporate events, private classes, and transfer services across Jamaica, in a relaxed, cannabis-friendly atmosphere led by local artists and DJs.

For the purposes of the Data Protection Act, 2020 (Jamaica), Puff & Paint Jamaica is the Data Controller responsible for the personal information we hold about you.

• Business Name: Puff & Paint Jamaica
• Address: Great Pond, Back Street, Ocho Rios, St. Ann, Jamaica, W.I.
• Website: officialpuffandpaintja.com
• Email: info@officialpuffandpaintja.com

Data We Collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

Identity & Contact Information

• Full name
• Email address
• Phone number
• Age or date of birth (to verify the 18+ eligibility requirement)
• Type of government-issued photo ID presented at the event (we do not retain copies of ID documents)

Booking & Transaction Data

• Event selection, date, time, and location
• Number of tickets purchased and group size
• Special requests or accessibility requirements disclosed at the time of booking
• Payment method type and transaction reference (we do not store full card numbers)
• Booking confirmation numbers and reservation history
• Transfer pickup location and schedule details (for guests using our transfer service)

Communication Data

• Emails, messages, or enquiries sent to us
• Feedback, reviews, or testimonials you provide
• Social media interactions with our official accounts
• Newsletter subscription preferences

Health & Wellbeing Information (Limited)

Where you voluntarily disclose a health condition, allergy, or accessibility need that may affect your participation at an event, we will collect this information solely to accommodate your needs during the event. See Section 08 for our approach to sensitive data.

Technical & Website Usage Data

• IP address and approximate location
• Browser type, version, and device information
• Pages visited, time on site, and referring URLs
• Cookie identifiers and session data

Photography & Media

Images and video footage of attendees captured at our events, as described in our Terms and Conditions and further explained in Section 06 of this policy.

How We Collect Your Data

We collect personal data through the following means:

• Online bookings: When you purchase a ticket or make a reservation through our website or booking platform.
• Direct contact: When you email, message, or call us with an enquiry, booking request, or feedback.
• Event attendance: When you check in at a Puff & Paint Jamaica event, including age verification at the door.
• Newsletter sign-up: When you subscribe to our mailing list through our website or at an event.
• Social media: When you interact with our official Facebook, Instagram, TikTok, YouTube, or other social media pages.
• Photography at events: Images and video captured at our events by Puff & Paint Jamaica staff or contracted photographers.
• Automated technologies: Cookies and similar tracking technologies when you visit our website. See Section 12 for full details.

How We Use Your Data

We use the personal data we collect for the following purposes:

Legal Basis for Processing

Under the Data Protection Act, 2020 (Jamaica), we must have a lawful basis for processing your personal data. We rely on the following legal bases:

• Consent: For marketing emails and newsletters, event photography used in promotions, and non-essential cookies — where you have freely and expressly opted in. You may withdraw consent at any time.
• Performance of a contract: To process your event booking, manage your reservation, coordinate transfers, and deliver the services you have requested from us.
• Legal obligation: Where processing is required to comply with Jamaican law, tax obligations, or regulatory requirements.
• Legitimate interests: For fraud prevention, improving our services, communicating event updates to existing customers, and maintaining the security of our website and booking systems — where our interests are balanced against and do not override your rights.

Data Sharing & Disclosure

Puff & Paint Jamaica does not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

Service Providers & Processors

We work with trusted third-party service providers who process data on our behalf. These include:

• Payment processors: To securely handle ticket payments and transactions
• Booking platform providers: To manage reservations and confirmations (e.g., Fluent Booking)
• Email marketing platforms: To send newsletters and event updates to subscribers
• Transfer and transportation providers: To coordinate guest pickups and drop-offs
• Website and hosting providers: To maintain and operate officialpuffandpaintja.com

All third-party processors are required to handle your data securely, use it only for the purpose for which it was shared, and comply with applicable data protection obligations.

Photographers & Content Creators

Where we engage contracted photographers or videographers at our events, they may capture images or video in which you appear. This content is used by Puff & Paint Jamaica for promotional purposes in accordance with this policy and our Terms and Conditions.

Legal & Regulatory Disclosure

We may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so — for example, in response to a court order or lawful request from the Office of the Information Commissioner.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

Cannabis & Sensitive Data

Puff & Paint Jamaica operates a cannabis-friendly environment. We do not collect, record, or store information about whether individual attendees consume cannabis at our events. Attendance at our events does not constitute disclosure of cannabis use to Puff & Paint Jamaica for data processing purposes.

Health & Accessibility Data

Where you voluntarily disclose a health condition, allergy, medical requirement, or accessibility need to us — for example, to ensure we can accommodate you safely at an event — we treat this information as sensitive personal data and apply heightened protection:

• It is collected only with your explicit consent and only to the extent necessary to accommodate your needs
• It is used solely for the purpose for which it was disclosed — your safety and comfort at the event
• It is not retained beyond the event date unless you have separately agreed to ongoing accommodation for future bookings
• It is not shared with any third party except where directly necessary for your safety (e.g., an emergency services provider)

International Transfers of Personal Data

Puff & Paint Jamaica is based in Jamaica. However, because we use internationally hosted digital platforms — including payment gateways, booking systems, email marketing tools, and social media platforms — your personal data may be transferred to and processed in countries outside Jamaica.

In accordance with Standard 8 of the Data Protection Act, 2020, we only transfer personal data outside Jamaica where the receiving country or territory ensures an adequate level of protection for your rights, or where appropriate safeguards are in place such as:

• Contractual data protection clauses with the overseas recipient
• Transfer to jurisdictions with recognised data protection laws equivalent to Jamaica's standard
• Your explicit consent to the specific transfer
• Transfer necessary for the performance of your booking or event reservation

Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Our retention schedule is as follows:

When personal data is no longer required, it is securely deleted from our systems and any backups, or anonymised so that it can no longer identify you.

Your Rights

Under the Data Protection Act, 2020 (Jamaica), you have the following rights in relation to the personal data we hold about you:

How to Exercise Your Rights

To exercise any of the above rights, contact us in writing at info@officialpuffandpaintja.com. Please clearly state the nature of your request and provide sufficient information to identify you. We will respond within 30 days of receiving your request. We may need to verify your identity before acting on your request.

There is no charge for submitting a data rights request. However, if requests are manifestly unfounded or excessive, we reserve the right to charge a reasonable fee or decline to act in accordance with the Act.

Cookies & Tracking Technologies

Our website at officialpuffandpaintja.com uses cookies and similar technologies to provide essential functionality, improve your browsing experience, and understand how visitors interact with our site. A cookie is a small text file placed on your device when you visit a website.

Types of Cookies We Use

Managing Cookies

You may adjust your browser settings at any time to refuse, delete, or manage cookies. Most browsers allow you to block all cookies or to block third-party cookies only. Please note that disabling essential cookies may affect the functionality of our website, including the ability to complete a booking.

Where non-essential cookies require your consent, a cookie preference notice will be presented to you when you first visit our site.

Marketing Communications

Puff & Paint Jamaica sends newsletters, event announcements, promotional offers, and creative content updates to subscribers who have expressly opted in to receive our communications.

How We Market to You

• We will only send marketing emails or messages where you have given us your explicit, freely given consent to do so — for example, by subscribing to our newsletter on our website.
• We do not use contact information collected during the booking process to send unsolicited promotional content.
• Our marketing may include information about upcoming events, new locations, special offers, and creative content from our events.

Opting Out

You may unsubscribe from our marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email we send
• Emailing us directly at info@officialpuffandpaintja.com with your opt-out request

Opting out of marketing will not affect your ability to book events or receive service-related communications (such as booking confirmations and event reminders).

Social Media

We maintain active pages on Facebook, Instagram, TikTok, YouTube, and other social media platforms. If you interact with us on social media (by liking, commenting, sharing, or messaging), those platforms may collect and process your data in accordance with their own privacy policies, which are separate from this policy.

Children's Privacy

Puff & Paint Jamaica events are strictly for adults aged 18 years and over. Our website and services are not directed at or intended for use by children or minors. We do not knowingly collect personal data from anyone under the age of 18.

If we become aware that we have inadvertently collected personal data from a person under the age of 18, we will delete that data promptly and take steps to ensure it does not occur again.

If you believe we have collected personal data from a minor, please contact us immediately at info@officialpuffandpaintja.com.

Data Security

We take the security of your personal data seriously. In accordance with Standard 7 of the Data Protection Act, 2020 (Jamaica), we implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted through our website
• Secure payment processing through encrypted payment gateways — we do not store full card numbers on our systems
• Access controls limiting access to personal data to authorised personnel only, on a need-to-know basis
• Up-to-date software and security tools to protect our digital systems
• Staff awareness of data handling obligations and best practices

While we take all reasonable precautions, no method of electronic transmission or digital storage is completely secure. If you believe your personal data has been compromised in connection with our services, please contact us immediately.

Data Breaches

In the event of a personal data breach that poses a risk to your rights or freedoms, we will notify the Office of the Information Commissioner and, where required, affected individuals in accordance with our obligations under the Data Protection Act, 2020.

Third-Party Links

Our website may contain links to third-party websites, platforms, or services — including social media pages, booking partners, and tourism-related sites. These third-party sites have their own privacy policies, which are separate from and independent of this policy.

Puff & Paint Jamaica is not responsible for the privacy practices, content, or data handling of any third-party website. We encourage you to review the privacy policy of any external site you visit via a link from our website before submitting any personal information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or the services we offer. When we make significant changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify subscribers by email.

The most current version of this policy is always available at officialpuffandpaintja.com. We encourage you to review this policy periodically. Your continued use of our website or services after any changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the way we handle your personal data, we'd love to hear from you. Reach out to our team directly.