Privacy Policy

Jamaica National Heritage Trust

Last Updated: March 2026

The Jamaica National Heritage Trust (JNHT) respects your right to privacy and is committed to protecting your privacy in accordance with the legal requirements of the Data Protection Act, 2020 (DPA). This policy outlines how information is collected and used when you use our online platforms and visit our physical locations. It also clarifies how we protect your personal data and your related rights.

JNHT Employees and Vendors should refer to the Employee Privacy Policy and Vendor Privacy Policy respectively for more detailed information on how their personal information is treated by the JNHT.

Who is JNHT?

The Jamaica National Heritage Trust is a statutory body under the Ministry of Culture, Gender, Entertainment and Sport, responsible for the preservation, protection, and development of Jamaica's material cultural heritage. Established in 1958 (originally the Jamaica National Trust Commission) and enacted in 1985, it manages over 300 heritage sites, monuments, and protected objects.

Types of Personal Data Processed

The JNHT may process personal identifiable information about employees, clients, vendors, and third-party service providers, including but not limited to:

Full name and signatures

Residential, mailing and work addresses

Contact information (telephone, email, mailing address)

National ID information (e.g. passport, driver's licence)

Personal Identifying Numbers (TRN, NIS, etc.)

Demographic details (age, gender, marital status, etc.)

Payment and financial information (bank account, debit and credit card information, etc.)

Education (certifications, schools attended, etc.)

Employment information (history, references, qualifications, etc.)

Pictures and videos taken by security cameras at our physical office locations

Pictures and videos provided to us, requested by us, or taken by us

Consumer generated feedback

Marketing and consumer feedback

Sensitive information (health records, disability, workplace adjustments)

Online information (IP addresses, social media usernames, etc.)

When is Your Information Collected?

When you visit our heritage sites

Submission of enquiries by email, social media, forms and telephone

Completing and submitting digital or physical forms

Engagement with our social media platforms

Applications for licences, leases and permits

Research projects

When you decide to partner with us

When you become a vendor

Submission of an employment application

How is Your Personal Data Processed?

Recruiting, onboarding and supporting employees

To enable the procurement of goods and services

To disseminate information to the public

To contact or communicate with you

Administration of licences, leases and permits

Entering into and execution of contracts

Improving and developing new services

Personal data will only be processed for the specific purposes for which it was originally collected. If we need to use your data for a different purpose, we will inform you beforehand and obtain your consent. Where consent is not required due to legal provisions, we will inform you of the lawful basis that allows for the new type of processing.

Internet and Electronic Data

Automatically Collected Information

The website operates on a legacy PHP-based site with a separately managed news section. As is standard with most web hosting environments, certain technical information may be automatically logged when visitors access the site.

This may include:

IP address — as part of standard server logging

Internet domain — may be captured as part of standard server log entries

Browser type and version — typically recorded through standard HTTP request headers

Operating system — usually inferred from browser user-agent data

Date and time of access — as part of standard server logging

Pages visited (URLs) — page requests are recorded in server logs

Referring website URL — may be captured if transmitted by the visitor's browser

Access, Storage, and Use of Collected Information

Any automatically collected technical information is typically logged at the server level for operational, security, and performance monitoring purposes, and processed in aggregate form through analytics tools to understand general website usage trends.

This information is used for maintaining website functionality and availability, monitoring performance and security, and understanding general traffic patterns to support site improvements. JNHT does not use this information for individual profiling or targeted marketing purposes.

Data Transfer Standard

Server log data and analytics data may be processed or stored by the cloud infrastructure provider and analytics service provider in accordance with their respective service agreements. There is no intentional or routine transfer of raw, visitor-level data beyond what is operationally necessary for hosting, maintenance, and analytics functionality.

The website may use the following types of cookies:

Essential / functional cookies — Necessary for basic website operation and functionality

Analytics cookies — Associated with Google Analytics, used to collect aggregate usage data such as page views, session duration, and general traffic patterns

Session cookies (WordPress) — Not used for public visitor tracking beyond standard functionality

No additional tracking technologies or third-party advertising cookies are intentionally deployed.

Web Measurement and Customisation Technologies

The website uses Google Analytics to measure general traffic patterns and website usage. These tools collect data such as page views, session duration, general geographic region, and device/browser type — used in aggregate to understand visitor trends. Data collected through Google Analytics is subject to Google's own data processing terms and privacy policies.

Third-Party Access

The website relies on the following categories of third-party service providers: a cloud infrastructure provider (provides the underlying server infrastructure) and an analytics provider (Google Analytics — collects and processes aggregate website usage data). JNHT does not otherwise provide direct third-party access to website visitor data. No visitor data is sold or shared for marketing or advertising purposes.

Retention of Your Personal Data

JNHT will retain your personal identifiable information only for as long as necessary for the purposes set out in this Policy and in compliance with our legal obligations and the Data Protection Act, 2020.

Security Measures

Only authorised JNHT employees and contractors in fulfilment of official duties have access to your personal data and are required to adhere to established protocols and standards of confidentiality and non-disclosure.

We require that external parties given access to your personal data have the requisite adequate level of security in place, and that your personal data is processed only as instructed by the JNHT.

We ensure the security of physical areas where we hold hard copies of information and of the digital platforms where we store online data. We also perform regular secured backups of the information we host online to prevent loss.

We periodically test our security procedures to ensure personnel and technical compliance and employ safeguards and penetration tests to identify and prevent unauthorised access to the information in our systems.

Your Data Privacy Rights

In compliance with the Data Protection Act, 2020, you have the following rights:

Summary of Your Rights Under the DPA 2020

Access Your Data

Right to be informed whether and to what extent we process your data, and to obtain a copy of that information.

Request Correction

If personal information is incomplete or incorrect, you have the right to request completion or correction at any time.

Object / Restrict Processing

Right to object to the processing of your personal data in certain situations.

Request Deletion

Right to request that JNHT erases your personal data under certain circumstances.

Data Transfer (Portability)

Right to request that JNHT transfers your personal data to you or another organisation.

Give / Withdraw Consent

Right to consent to processing, and to withdraw that consent at any time without affecting the lawfulness of prior processing.

Decline Automated Decisions

Right to object to decisions based exclusively on the automated processing of your personal data.

Complain to the DPO

Right to seek assistance from our Data Protection Officer for any issues regarding these rights.

Please note that some rights above may be restricted as they can only be exercised in specific circumstances. If we are unable to fulfil a request, we will write to you to explain the reason for refusal.

Violation of Privacy Policy

If there has been a breach to our systems which compromises your personal data, the JNHT aims to notify you without undue delay of first becoming aware of the breach.

If you become aware of a material breach of yours or someone else's personal information, please report it to the Data Protection Officer at the earliest opportunity.

Changes to This Policy

The JNHT reserves the right to reasonably update this policy to reflect any changes in how we process your personal data. The "Last Updated" section will reflect the date that the updated version of the policy became effective. You are responsible for revisiting this website and reviewing the policy for any updates.

Acceptance of Our Policy

By using this website, you signify your acceptance of our Privacy Policy, and that you adhere to any terms and conditions indicated therein.

Jamaica National Heritage Trust | Preserving Jamaica's Heritage