Privacy Policy
1. Who we are
Caribbean Trade Network ("we", "us", "our") is operated by R&R Digital Platform Solutions Ltd., a company registered in Trinidad and Tobago, trading as the Caribbean Trade Network B2B marketplace.
We are the data controller for personal data we collect when you use our platform, subject to the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), the UK GDPR, and applicable Caribbean data-protection laws.
2. What personal data we collect
Account data: name, email address, password (hashed), company/organisation name, country, role, and billing/verification data.
Business & directory data: details you submit or that we source from public directories (business name, address, phone, website, category).
Transaction data: sourcing requests (RFQs), quotes, orders, escrow and payment records, and communications.
Technical data: IP address, browser/device type, pages visited, and cookies (see our Cookie Policy).
Advertising data: campaign settings and engagement metrics if you use or interact with our advertising platform.
3. Lawful bases for processing (Art. 6 GDPR)
We process personal data under the following legal bases:
Consent (Art. 6(1)(a)) — for marketing cookies, optional newsletters, and any special-category data.
Contract (Art. 6(1)(b)) — to provide the platform services, process orders, escrow and payments you request.
Legal obligation (Art. 6(1)(c)) — to comply with tax, anti-money-laundering and record-keeping laws.
Legitimate interests (Art. 6(1)(f)) — to operate, secure and improve the platform, prevent fraud, and to source public business-directory data.
4. How we use your data
To operate the marketplace: account management, search and matching, RFQs and quotes, orders, escrow settlement, and payments.
To verify businesses and publish source-backed profiles.
To display advertising and measure its performance on our platform.
To send service communications (not marketing) and, with consent, marketing.
To comply with legal obligations and protect rights and security.
5. Data sharing
We do not sell personal data. We share data only: (a) with counterparties to a transaction you initiate; (b) with payment/escrow and verification processors under contract; (c) with regulators or authorities where legally required; (d) with service providers processing on our behalf under a data-processing agreement.
6. International transfers
Your data may be transferred outside your country (including to the EU, UK, US, and other jurisdictions) to provide the service. We rely on adequacy decisions, Standard Contractual Clauses (Art. 46 GDPR), or other valid transfer mechanisms, and we ensure appropriate safeguards for every cross-border transfer.
7. Retention
We keep account data while your account is active and for a reasonable period after, transactional and financial records for the period required by law (typically 5–7 years), and technical logs for up to 24 months unless a longer legal duty applies. Directory and sourced data is retained until you successfully claim and request removal.
8. Your data-subject rights
Under the GDPR and UK GDPR you have the right to: access (Art.15), rectification (Art.16), erasure / "right to be forgotten" (Art.17), restriction of processing (Art.18), data portability (Art.20), and to object to processing (Art.21) including direct marketing.
You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
You also have the right to lodge a complaint with a supervisory authority.
9. AI features and the EU AI Act
Our platform uses artificial intelligence (e.g., the AI concierge, automated search/matching, and profile optimisation). Where we use high-risk AI systems in the sense of Regulation (EU) 2024/1689 (EU AI Act), we implement the required risk-management, transparency, human-oversight and logging measures.
Automated decisions that produce legal or similarly significant effects will include human review on request, and you may object to or request review of such decisions.
10. Cookies
We use strictly necessary, functional, analytics and (with your consent) advertising cookies. You can manage preferences via our cookie banner and your browser settings. See the Cookie Policy for details.
11. Children
Our services are for business users aged 18 and over. We do not knowingly collect data from children under 16 without verifiable parental consent, and we will delete such data on discovery.
12. Security
We use appropriate technical and organisational measures — encryption in transit and at rest, access controls, and audit logging — to protect personal data. No method of transmission is 100% secure, and you should safeguard your account credentials.
13. Data Protection Officer & contact
For any privacy request, to exercise your rights, or to contact our Data Protection Officer, email: privacy@kunjaldigital.com, or write to R&R Digital Platform Solutions Ltd., Trinidad and Tobago.
We will respond to verifiable requests within the timeframes required by applicable law (typically 30 days).
Last updated: August 2026. Operated by R&R Digital Platform Solutions Ltd.