Privacy Policy

1. Who we are

Ad Hub is an online marketplace for outdoor, indoor and mobile advertising screens. Advertisers and agencies use it to find and book screens, and Media Owners/Vendors use it to list their screens and get booked. Ad Hub is operated by Digital Minefield in Jamaica.

For the purposes of the Data Protection Act, 2020 the data controller of the personal information described in this policy is Digital Minefield, of Kingston, Jamaica. Marc Robinson, the owner of Digital Minefield, is the contact for privacy matters. You can reach Marc Robinson at hello@adhubcaribbean.com.

2. What we collect

We collect only what we need to run the marketplace. Depending on how you use Ad Hub, that includes:

• Account details: your name, email address, phone number, business or agency name and a password (stored only in scrambled, hashed form).
• Business and payout details: for Media Owners/Vendors, bank account details so we can pay you, and your GCT registration status.
• Booking and payment records: orders, dates, amounts, invoices, receipts and which payment method you used. We do not store full card numbers; card and online payments are handled by our payment providers.
• Content you upload: advertising creatives (images and video), location photos and descriptions, messages and support tickets.
• Usage and device data: IP address, browser and device type, pages visited and error logs, used to keep the service secure and working.
• Security records: the IP address and browser details of sign-in attempts and other security events, including the email address typed on a failed sign-in, which may not be a registered account. We keep these for 90 days and then delete them.
• Your preferences: for example your light or dark theme choice and whether a menu is collapsed (see Cookies and browser storage below).

3. How we use your information

• To create and run your account, and to sign you in securely.
• To process bookings, collect payments, issue invoices and receipts, and pay Media Owners/Vendors.
• To show advertisers the screens they can book, and to show Media Owners/Vendors who has booked them.
• To check that uploaded advertising is suitable, including automated screening of images.
• To send service messages such as order confirmations, receipts, payment reminders and security notices.
• To give support, investigate disputes and issues reported on a screen, and keep an audit trail of important actions.
• To protect the platform from fraud, abuse and security incidents, and to meet our legal and tax obligations.
• To improve the service, using error logs and aggregated usage information.

Marketing emails are covered under Marketing emails below.

4. Who we share it with

We do not sell your personal information. We share it only as needed to run Ad Hub:

• Other users, as part of a booking. A Media Owner/Vendor sees the business name and contact details of the advertiser or agency that booked their screen, and the creative to be shown. Advertisers see the business details of the Media Owner/Vendor they book.
• Service providers who process data for us under their own security commitments. They are listed, with what each receives, under Service providers below.
• Professional advisers, regulators, courts or law enforcement where the law requires it or to protect our rights and users.
• A buyer or successor, if the business is ever sold or reorganised, who must keep protecting your information under this policy.

5. Payments

Online payments are completed on a secure payment page run by our payment provider, not on Ad Hub. We receive confirmation that a payment succeeded or failed, the amount and a reference, but never your full card number or security code. Bank transfers are reconciled against the account details shown at checkout.

6. Service providers

These providers handle information for us. We give each only what it needs for its job:

• Our bank: when you pay by card, you are sent to our bank's hosted card payment page and type your card details there. Ad Hub does not see or store them.
• PayPal: where PayPal is offered at checkout, you pay on PayPal. It receives the order amount and reference, and tells us whether the payment worked.
• Resend: delivers our emails. It receives your email address, your name where the email uses it, and the content of the message.
• Sightengine: when an advertiser uploads a banner image for an Ad Hub house ad campaign, and this check is switched on, the image is sent to Sightengine to be scored for adult or offensive content. A high score does not reject the upload by itself: it sends the image to a person at Ad Hub to review instead of approving it automatically. Other creatives are not sent to Sightengine.
• Sentry: receives error reports and a sample of performance traces from the website, which include technical details of the error, the page address and browser or device type. We have not turned on sending of user details to Sentry, and it is not used for advertising.
• OpenStreetMap: map images for screen locations are loaded from OpenStreetMap's servers, so your browser sends them your IP address and the map area you view. When a Media Owner/Vendor places a pin from an address, the address they type is also sent to OpenStreetMap's address search service.
• Vercel: hosts the website and runs it, so it handles requests to Ad Hub.
• Neon: hosts our database, which holds the information described in this policy.
• Amazon Web Services (S3): stores files you upload (see How we protect it).

Browser push notifications, if you turn them on, are delivered through your browser's own push service (for example Google, Apple or Mozilla).

7. Where your information is kept

Some of our service providers store or process information on servers outside Jamaica. When that happens we use providers with recognised security standards and appropriate contractual protections, so your information stays protected wherever it is handled.

8. How long we keep it

We keep your information for as long as your account is active and as long afterwards as we need it to meet tax, accounting and legal requirements, resolve disputes and enforce our terms. When information is no longer needed we delete it or anonymise it.

Orders, invoices, receipts, payouts and refunds are kept for 7 years. Security records (IP address, browser and failed sign-in details) are kept for 90 days.

9. Deleting your account

You can delete your own account in Settings. The account closes at once and you are signed out. We email you a link, and for 14 days you can use it to reopen the account. After the 14 days your name, email address, phone number, address and bank details are erased and nobody can sign in to the account again. If you gave a reason for leaving, the category you picked is kept for statistics, and any note you typed is erased. Your browser push notification subscriptions are removed. For agencies, the contact email, phone number and notes held about the agency's clients are erased as well.

You cannot delete an account while it has open bookings, unpaid invoices, refunds or payouts still to be settled, or open support tickets. The Settings page shows what is in the way. If you own a company account, deleting it also closes the sign-ins of the people on your team, and for a Media Owner/Vendor it sets your screens to inactive. Admin accounts cannot be deleted this way.

What we keep after deletion, and why:

• Orders, invoices, receipts, payouts and refunds are kept for 7 years, without your name where the law allows, because tax, accounting and payment records have to be kept.
• Content tied to bookings (creatives, proof-of-play files, reviews, and support tickets) stays for as long as those records or any dispute about them need it.
• Records of important actions on the platform (audit trail) stay so we can show what happened if there is a dispute or a security issue.

To ask about a deletion, email hello@adhubcaribbean.com.

10. Marketing emails

Advertisers and agencies may receive offers, promotions and announcements from us. You can opt out at any time with the unsubscribe link at the bottom of any such email, or in the marketing emails setting on your Profile page. Orders, payments, receipts, reminders and security notices are service emails and always continue, because you need them to use your account. Media Owners/Vendors do not receive marketing emails, so they have no marketing setting.

11. How we protect it

• Connections to Ad Hub are encrypted (HTTPS).
• Passwords are hashed, and access to administrative tools is restricted and logged.
• Uploaded files (such as photos and creatives) are stored with our cloud storage provider and served by web link. Anyone who has a file's link can open it, so only upload what you are happy for the people involved in a booking to see.
• We separate test and live data, and review security regularly.

No system is perfectly secure. If a breach affecting your personal information happens, we will tell you and the Information Commissioner as the law requires.

12. Your rights

Under the Data Protection Act, 2020 you have the right to:

• ask us for a copy of the personal information we hold about you;
• ask us to correct anything that is wrong or out of date;
• ask us to delete information we no longer need to keep, or to stop using it in certain ways;
• object to our use of your information, and withdraw consent you have given us;
• complain to the Office of the Information Commissioner if you believe your information has been handled unlawfully.

To use any of these rights, email hello@adhubcaribbean.com. To ask for a copy of your data, email the same address and we will reply within 30 days. We may need to confirm who you are first, and some records (such as invoices) we are required to keep.

13. Cookies and browser storage

Ad Hub uses a small number of cookies and browser storage that the site needs in order to work or to remember your choices. We do not use advertising cookies and do not track you around other websites.

• A secure sign-in session cookie that keeps you signed in.
• A theme cookie that remembers your light or dark choice (kept for a year).
• Your chosen currency, stored in your browser.
• For agencies, the client you are currently working on, stored in your browser.
• Interface state in your browser: whether the sidebar and menu groups are collapsed, tips or offers you have dismissed, and how you chose to split an upload across screens.
• A short-lived marker in your browser's session storage that stops a card payment form from being submitted twice.
• For Ad Hub staff only: when staff view the site as a user to give support, a secure cookie lasting up to 8 hours records that session, and the session is logged.

Browser storage stays on your device until you clear it. We also use error monitoring to find and fix problems (see Service providers above).

14. Children

Ad Hub is a business service and is not meant for anyone under 18. We do not knowingly collect information from children.

15. Changes to this policy

We may update this policy as Ad Hub grows, for example when we launch in more Caribbean countries. The date at the top shows when it last changed, and we will tell account holders about significant changes.

16. Contact us

Questions or requests about your privacy: email Marc Robinson, owner of Digital Minefield (Kingston, Jamaica), at hello@adhubcaribbean.com.