Website Privacy Policy

Who we are

GABCO Enterprises (“GABCO”, “we”, “us” or “our”) is an IT services and advisory firm in Grand Cayman. We are the data controller for personal data collected through gabcoenterprises.com.

This policy explains what we collect through the website, why, who we share it with and your rights under the Data Protection Act (2021 Revision) of the Cayman Islands (the “DPA”). If you are a client, our Customer Privacy Policy explains how we handle data while delivering services.

What we collect

Information you give us. When you use our contact form, book an appointment, email or call us, we collect what you choose to share: your name, organisation, work email, phone number, the service you are interested in, your message and, for bookings, the appointment time and your answers to the booking questions.

Online booking. Our “Schedule online” link takes you to Microsoft Bookings, a Microsoft website. Microsoft receives your IP address and browser details, may set cookies needed to run the booking page, and processes your booking on our behalf as part of our Microsoft 365 service.

Information collected automatically. Our hosting servers record basic technical information when you visit, such as your IP address, browser type, the pages requested and the date and time. This is used to run and secure the site.

Analytics, only with your consent. If you accept analytics cookies, we use Microsoft Clarity to understand how visitors use the site, such as which pages are viewed, how far people scroll, where they click and how quickly pages load. Clarity uses cookies and a pseudonymous identifier and can record session replays and heatmaps. If you do not accept, or your browser sends a Global Privacy Control signal, Clarity does not run. Your choice is saved in your browser, and you can change it on our Cookies settings page.

Fonts. Our pages load fonts from Google Fonts. To deliver them, your browser connects to Google, which receives your IP address and browser details.

What we do not collect. We do not use advertising cookies or tracking pixels. Please do not send sensitive personal data, such as health or financial account details, through the website.

How we use it and why

The DPA requires a lawful reason for each use of personal data. Ours are:

We do not sell personal data, we do not send marketing email without your consent, and we do not make decisions about you based solely on automated processing.

Who we share it with

We share personal data only where needed, with:

• Our website host, GoDaddy, which stores the site and its server logs
• FormSubmit, which delivers contact form messages to our inbox
• Microsoft Bookings, which runs our online appointment booking and stores the booking details you enter
• Microsoft 365, our email and productivity provider
• Google, which serves the fonts used on the site
• Microsoft Clarity, our analytics provider, only if you consent to analytics
• Professional advisers, such as accountants and lawyers, under a duty of confidentiality
• Authorities, where we are required to by law, regulation or court order

International transfers

Some of these providers store or process data outside the Cayman Islands, for example in the United States. Under the eighth data protection principle of the DPA, we transfer personal data abroad only where the destination provides adequate protection, appropriate safeguards are in place, or a permitted exception applies, such as a transfer needed to respond to your request.

How long we keep it

• Enquiries that do not lead to an engagement: up to 2 years from our last contact
• Client records: for the engagement and up to 7 years after it ends, for legal, tax and accounting purposes
• Clarity analytics data: kept by Microsoft for the period set out in its Clarity terms, then deleted
• Server logs: as set by our host, generally no more than 90 days

When data is no longer needed, we delete or anonymise it securely.

How we protect it

We use appropriate technical and organisational measures, including encryption in transit (HTTPS), multi factor authentication on our accounts, access limited to staff who need it, and security settings reviewed regularly. No system is completely secure, but we work to the standards we recommend to our clients.

Your rights

Under the DPA you have the right to:

• Be informed about how your data is used
• Access the personal data we hold about you
• Have inaccurate data corrected
• Ask us to stop or restrict processing, or to stop direct marketing
• Have your data erased in certain circumstances
• Not be subject to decisions based solely on automated processing
• Complain to the Ombudsman

To exercise a right, email info@gabcoenterprises.com. We may ask you to confirm your identity and will respond within 30 days, as the DPA requires.

Complaints

Please contact us first so we can try to put things right.

If you are not satisfied with our response, you can complain to the Office of the Ombudsman, which regulates data protection in the Cayman Islands, at ombudsman.ky.

Children

This website is intended for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.

Contact us

GABCO Enterprises
PO Box 1184, George Town, Grand Cayman KY1-1503, Cayman Islands

Email info@gabcoenterprises.com or call +1 345 769 4222.