Privacy Policy

Last updated: March 2026

TheForgeJA ("we", "us", or "the Platform") is committed to protecting your privacy in accordance with the Jamaica Data Protection Act (2020). This policy explains how we handle your personal data.

1. Lawful Basis for Processing

We process your personal data under the following JDPA-recognized lawful bases:

  • Consent: When you voluntarily register and accept our terms.
  • Contractual Necessity: To provide the educational and development services you have requested.
  • Legitimate Interest: To maintain the security of our platform and communicate essential service updates.

2. Information We Collect

We collect only the minimum data necessary to operate our services:

  • Identity Data: Name and email address provided during registration.
  • Educational Data: Attendance records, homework submissions, and course progress.
  • Communication Data: Logs of your interactions on our Q&A board and support requests.

3. Data Subject Rights

Under the JDPA, you have specific rights regarding your personal data:

  • Right of Access: You may request a copy of all personal data we hold about you.
  • Right to Rectification: You may request that we correct any inaccurate or incomplete data.
  • Right to Erasure: You may request the deletion of your account and associated data (subject to legal retention requirements).
  • Right to Withdraw Consent: You may withdraw your consent at any time, though this may result in account deactivation.

4. Data Security & Storage

We implement rigorous technical measures to protect your data, including encrypted password storage, CSRF protection, and secure session management. Your data is stored securely and is only accessible by authorized administrators.

5. Data Retention

We retain your personal data only for as long as your account is active or as required by law for financial and educational auditing. Inactive accounts may be archived or deleted after 2 years of non-use.

6. Third Parties & Transfers

We do not sell or trade your personal data. We do not transfer your data outside of Jamaica except where necessary for essential cloud services (e.g., SMTP email providers), ensuring such transfers meet JDPA adequacy standards.

7. Contact & Complaints

For any questions regarding these terms, contact us at [email protected].

You also have the right to lodge a complaint with the Office of the Information Commissioner (OIC) of Jamaica if you believe your data has been handled improperly.