Privacy Policy

CayMarket is an online marketplace for the Cayman Islands. For the purposes of the Cayman Islands Data Protection Act, CayMarket is the data controller for the personal data described here. If you have a question about your data, or want to exercise the rights in section 9, contact us through the contact page.

We only store what the platform needs to work:

• Your account — your name, email address, an optional phone number, and a hashed version of your password. We never store the password itself.
• Listings — the details and photos you post, which are public by design, plus a view counter per listing.
• Messages — conversations between users in the in-app chat, visible only to the two people in the conversation.
• Favourites and saved searches — so your shortlist and alerts work across devices.
• Reports — when you report a listing, we store the reason and link it to your account so the same person can't report a listing twice.
• Notifications — in-app alerts about enquiries and messages.
• Verification requests — if you apply for the verified badge, we store the evidence you choose to submit with the request.

• running the marketplace: showing listings, delivering chat messages and alerts, and letting you contact other users (to provide the service you asked for);
• keeping it safe: reviewing reports, hiding reported listings, verifying users, and preventing fraud and abuse (our legitimate interest in a trustworthy platform);
• simple statistics: listing view counts power the demand insights and the public market report, always as counts, never as a profile of you;
• contacting you about your account, your listings and your messages.

• We never sell your data, to anyone, ever.
• We show only first-party advertising for local businesses; we do not use third-party ad networks or cross-site tracking.
• We do not publish your email or phone number. Users contact each other through the in-app chat; you decide what you share in a conversation.

CayMarket keeps you signed in with a single session cookie. We do not set third-party or cross-site tracking cookies and we do not use advertising trackers. Sign out and the session cookie is gone.

Listings, listing photos and a user's public profile (name and verified badge) are visible to everyone, that's the point of a marketplace. Everything else is private to your account: your messages are visible only to you and the person you're talking to, and your favourites, saved searches and notifications are visible only to you.

We would disclose data to authorities only where Cayman Islands law requires us to.

When a listing is posted, we store a salted one-way hash (SHA-256) of the poster's IP address and browser identifier alongside it. We never store the raw IP address or raw browser string, and a hash cannot be reversed to recover them, its only use is letting our moderators tell when multiple suspicious listings come from the same source.

These hashes exist solely to support fraud investigations. They live and die with the listing: delete the listing and they go with it.

Passwords are stored only as a salted one-way hash, never in readable form. The whole site is served over an encrypted (HTTPS) connection, your data is held on our own secured servers, and access is limited to what is needed to run and moderate the platform. No system is perfectly secure, so we also ask you to use a strong password and keep it to yourself.

Under the Cayman Islands Data Protection Act you have the right to ask us to:

• confirm what personal data we hold about you and give you a copy;
• correct data that is wrong or incomplete;
• delete your data and close your account;
• stop or restrict certain uses of your data.

To exercise any of these, contact us from the email address registered to your account so we know it is really you. If you are not satisfied with how we handle your data, you can complain to the Office of the Ombudsman of the Cayman Islands.

We keep your data while your account exists. You can delete your own listings at any time, which removes them from the site. If you want your account and its data removed, see the contact page, account requests are handled through the email address registered to your account, so we know it's really you asking.

Your data is stored on secured servers used to run CayMarket. Where any data is processed outside the Cayman Islands, we take reasonable steps to keep it protected to the standard this policy describes.

If this policy changes, we'll update this page and the date at the top. We'll never quietly start doing something this page says we don't do.