Privacy Policy

Urban Development Corporation (UDC) Website Privacy Notice

Effective Date: April 7, 2025

The Urban Development Corporation (“UDC”), a statutory corporation established by virtue of the Urban Development Corporation Act, is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, disclose, and protect your personal data when you visit our website at www.udcja.com (the “Website”).

By accessing and using the Website, you consent to the practices described in this Privacy Notice. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

1. What Information We Collect

Personal Identification Information: This includes your name, email address, phone number, or any other details you provide through contact forms or email correspondence.
Technical Data: This includes IP address, browser type and version, time zone setting, browser plug-in types, operating system, and other technology on the devices you use to access this Website.
Usage Data: Information about how you use the Website, including pages visited, search queries, and other actions taken on the Website.
Cookies and Tracking Technologies: We use cookies and similar technologies to collect data on your browsing behaviour and preferences. Cookies help us enhance your experience and improve the Website’s performance. You can control cookies through your browser settings.

2. How We Use Your Information

We use your personal information for the following purposes and on the following legal bases:
To Improve Website Functionality: We use technical and usage data to understand how visitors interact with our Website and improve user experience.
[Legal Basis – Legitimate Interest]
To Respond to Inquiries: If you contact us through our Website, we will use your personal data (e.g., email address, phone number) to respond to your inquiries or requests.
[Legal Bases – Consent or Contractual Necessity]
To Comply with Legal Obligations: We may use your information to comply with legal and regulatory requirements.
[Legal Basis – Compliance with a Legal Obligation]
To Ensure Security and Prevent Fraud: We may use your information to detect and prevent fraudulent or malicious activity.
[Legal Basis – Legitimate Interest]

3. How We Protect Your Information

We are committed to ensuring the security of your personal information. We have implemented appropriate technical and organisational measures[1] to protect your data from unauthorised access, use, or disclosure. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Data Breach Response: In the event of a data breach, the UDC will:
– Notify affected users
– Take immediate action to eradicate the breach, mitigate risks and enhance security
– Inform the Office of the Information Commissioner (OIC) within seventy-two (72) hours of becoming aware of the breach

4. Sharing Your Information

Service Providers: We may share your information with trusted third-party service providers who assist us with operating our Website, conducting business, or providing services to you. These providers must agree to keep this information confidential.
Legal Compliance: We may disclose your personal information if required by law, in response to a legal process, or to protect the rights, property, or safety of UDC, its employees, or others.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Your Rights

As a visitor to the Website, you have certain rights concerning your personal data, including the right to:

Access: Request a copy of the personal data we hold about you.
Rectification: Request corrections to any inaccurate or incomplete personal data.
Erasure: Request the deletion of your personal data, subject to legal exceptions.
Restriction: Request that we limit the processing of your personal data in certain circumstances.
Objection: Object to our use of your personal data for direct marketing purposes.
Data Portability: Request a copy of your personal data in a structured, commonly used format, or request the transfer of your personal data to another data controller.
To exercise these rights, please contact our Chief Privacy Officer (CPO) via email at dataprotection@udcja.com or by phone at 876-656-8604.
We will respond to requests within 30 days, subject to identity verification requirements.

6. Cookies and Tracking Technologies

Our Website uses cookies to enhance your experience. Cookies are small text files placed on your device to store information such as your preferences and to help us analyse Website traffic.
You can control cookies through your browser settings. However, disabling cookies may affect Website functionality.
For more details, please refer to our Cookie Policy.

7. International Data Transfers

If we transfer personal data outside of Jamaica, we ensure that appropriate safeguards are in place to protect your privacy, such as Standard Contractual Clauses (SCCs) or other approved mechanisms.

8. Children’s Privacy

We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will ensure that the data is deleted.

9. Links to Other Websites

Our Website may contain links to third-party websites. This Privacy Notice applies only to our Website, and we are not responsible for the privacy practices of other sites. We encourage you to review their privacy policies before providing any personal data.

10. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required by law. Once personal data is no longer needed, we will securely delete or anonymise it.

11. Changes to This Privacy Notice

UDC reserves the right to update or modify this Privacy Notice at any time. Any changes will be posted on this page, and the effective date will be updated accordingly. We encourage you to review this Privacy Notice periodically for any updates or changes.

12. Contact Us

If you have any questions, concerns, or comments about this Privacy Notice, or if you wish to exercise your data protection rights, please contact our Chief Privacy Officer (CPO):
Email: dataprotection@udcja.com
Phone: 876-656-8604
Registered Mail: Chief Privacy Officer, Urban Development Corporation, 12 Ocean Boulevard, Kingston Mall, Kingston, Jamaica
Thank you for visiting the official website of the Urban Development Corporation. We are committed to protecting your privacy and ensuring a safe online experience.

Schedule A

List of Technical and Organisational Measures

Clause 3 – “How We Protect Your Information”

Technical Measures

These measures involve the use of technology to secure personal data. The following technical measures are implemented by the UDC to secure your personal data:

Encrypting data in transit using secure protocols (HTTPS).
Encrypting sensitive personal data at rest.
Implementing access controls based on roles and the principle of least privilege.
Using strong authentication methods, e.g. multi-factor authentication
Employing firewalls and intrusion detection systems to secure our network.
Regularly updating our software and systems with security patches.
Conducting vulnerability scanning and penetration testing.
Implementing regular data backups and having a data recovery plan.
Physically securing our data storage facilities.

Organisational Measures

These measures involve policies, procedures, and training to protect personal data. The following organisational measures are implemented by the UDC to secure your personal data:

Establishing comprehensive data protection policies and procedures.
Providing regular data protection training to our employees.
Assigning clear responsibilities for data protection.
Conducting due diligence on third-party service providers and implementing data processing agreements.
Developing and testing an incident response plan.
Implementing data retention and secure disposal policies.
Ensuring that data is processed only for the purposes for which it was collected.

[1] Technical and Organisational Measures are listed in Schedule A (page 4)