Privacy Policy

1. What Data We Collect

We collect the following categories of personal data:

• Account information — your full name, email address, phone or WhatsApp number, and parish when you create an account.
• Listing data — vehicle details, part descriptions, pricing, condition, and any other information you provide when creating a listing.
• Photos and media — images you upload with your listings.
• Business details — dealership name, BRA registration number, website, and trading name for dealer, mechanic, and parts store accounts seeking verified status.
• Reviews — text and star ratings you submit for mechanics or parts sellers.
• Browsing behaviour — pages visited, listings viewed, search queries, and interaction events (e.g. clicking “Contact Seller”), collected via PostHog analytics.
• Saved listings — vehicles, parts, and mechanics you save to your account.

We do not collect payment card details — all transactions between buyers and sellers occur off-platform.

2. How We Use Your Data

We use your personal data to:

• Create and manage your account and listings on the platform.
• Display your listings to prospective buyers and connect you with interested parties.
• Send transactional emails such as account confirmation, password reset, and listing status updates via Resend.
• Verify business registrations for dealer, mechanic, and parts store accounts.
• Moderate content and enforce our Terms of Service, including removing prohibited listings and suspending accounts that violate our policies.
• Analyse platform usage in aggregate to improve features, fix issues, and understand how users interact with the site.
• Respond to enquiries you send to hello@carhubbds.com.

We do not use your data for automated profiling or decision-making that produces legal or similarly significant effects.

3. Who We Share Your Data With

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We share data only with the following sub-processors, solely to operate the platform:

• Supabase — our database and authentication provider. Your account data, listing data, and saved items are stored in Supabase’s managed infrastructure.
• Supabase Storage — listing photos and uploaded documents are stored in Supabase’s cloud storage.
• PostHog — anonymous analytics and product analytics. PostHog collects browsing behaviour to help us understand platform usage. No personally identifiable information is intentionally sent to PostHog.
• Resend — transactional email delivery (account confirmation, password reset). Your email address is passed to Resend only to deliver emails you have requested.
• Vercel — our hosting provider. Network request logs may be retained by Vercel in accordance with their own privacy policy.

We may disclose your data to law enforcement or regulatory authorities if required by law or to protect the rights, safety, or property of CarHub Barbados or its users.

4. How Long We Keep Your Data

• Account data — retained while your account is active. When you delete your account, your profile, listings, saved items, and uploaded images are permanently deleted within 24 hours.
• Listings — active and sold listings remain on the platform until you delete them or delete your account.
• Reviews — retained until removed by you, the subject, or by our moderation team in accordance with our Terms of Service.
• Analytics data — PostHog event data is retained for up to 12 months before automatic deletion.
• Email logs — transactional email records are retained by Resend for up to 30 days.

5. Your Rights Under the Barbados Data Protection Act 2019

Under the Barbados Data Protection Act 2019 you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete personal data.
• Erasure — request deletion of your personal data. You can delete your account at any time via Account Settings, which triggers immediate deletion of all your data.
• Restriction — ask us to restrict how we process your data in certain circumstances.
• Object — object to processing of your data where we rely on legitimate interests.
• Data portability — request a copy of your data in a structured, machine-readable format.

To exercise any of these rights, contact us at hello@carhubbds.com. We will respond within 28 days.

6. Cookies

We use a minimal number of cookies necessary to operate the platform:

• Authentication cookies — Supabase sets a session cookie to keep you logged in. This cookie is strictly necessary and cannot be opted out of while using a logged-in account.
• Analytics cookies — PostHog sets cookies to track your session across page views for product analytics. These are used solely to improve the platform; no advertising profiles are built from this data.

We do not use advertising cookies, retargeting cookies, or sell cookie data to any third party.

7. Contact Us

For any questions, requests, or complaints regarding this policy or your personal data, please contact us at:

CarHub Barbados
hello@carhubbds.com

You also have the right to lodge a complaint with the Office of the Information Commissioner of Barbados if you believe your data protection rights have been violated.