Privacy Notice
1. Who I am
1.1 This notice explains how Javed E. Daniel, Attorney-at-Law, of Barbados ("I", "me") handles personal data collected through javeddaniel.com (the "Site"). I am the data controller for that data.
1.2 You can contact me about this notice or your personal data at javed.daniel@hotmail.com.
2. What this notice covers
2.1 This notice covers the Site only: visits to it, and messages sent to me through it or to the email address or WhatsApp number on it.
2.2 If I later act for you, the personal data processed in your matter will be dealt with under the terms of that engagement. Where the matter is conducted through a firm or chambers, that firm's or chambers' own privacy notice will also apply.
3. What I collect and how
3.1 Information you send me. If you email me, I receive your name, your email address, and whatever you write in your message. If you message me on WhatsApp, I receive your telephone number, your WhatsApp profile name if you have one, and whatever you write in your message. The "Send a Message" form on the Contact page submits your name, email address, telephone number if you give one, the practice area you select, and your message to Web3Forms, a form-processing service, which forwards it to me by email. Web3Forms processes this information on my behalf and not for its own purposes.
3.2 Technical information collected automatically. Like almost every website, the Site is served by a hosting provider, Cloudflare, whose servers automatically record basic technical information when a page is requested: your IP address, browser type, the page requested, the referring page, and the date and time. This is used to deliver the Site and keep it secure.
3.3 The Site uses Cloudflare Web Analytics to count visits and measure how quickly pages load. It does not use cookies or similar storage on your device, and does not track you across other websites. It records information such as the page viewed, the referring page, your browser type and your approximate location by country.
3.4 The Site does not use cookies, advertising trackers or social media plug-ins. It has no user accounts, takes no payments, and does not sign you up for a mailing list.
3.5 Please do not send health information, details of criminal matters or other sensitive personal data through email or WhatsApp before I have confirmed that I can act for you. If you do, I will use it only to consider and respond to your enquiry.
4. Why I use it and on what basis
4.1 I use information you send me to read and reply to your enquiry, to check whether I have a conflict of interest, and, if you ask me to act, to take the steps needed before an engagement is agreed. The basis for this is that you asked me to respond, and my legitimate interest in dealing with enquiries properly.
4.2 I use technical information to run the Site and keep it secure. The basis for this is my legitimate interest in operating a secure website, weighed against your interests. The information involved is minimal.
4.3 I do not use your personal data for marketing, and I do not sell it or share it for anyone else's marketing.
4.4 I do not make decisions about you by automated means.
5. Who I share it with
5.1 I share personal data only as follows:
- (a) with the service providers that run the Site, handle my email, and process the Contact page form: Cloudflare (hosting and website analytics), Microsoft (email), and Web3Forms (the Contact page form). They process the data on my behalf and not for their own purposes;
- (b) if you contact me on WhatsApp, with WhatsApp Ireland Limited, part of the Meta group, which operates the WhatsApp service and processes messages sent through it;
- (c) where your enquiry concerns a matter that would be handled through a firm or chambers I practise with, with that firm or chambers. I will tell you before I pass your enquiry on; and
- (d) where the law requires it, or where it is needed to establish, exercise or defend legal rights.
6. Transfers outside Barbados
6.1 Some of the service providers named above store data on servers outside Barbados, including in the United States. Where that happens, I rely on providers whose terms commit them to protecting personal data to a standard consistent with the Data Protection Act, 2019-29.
7. How long I keep it
7.1 Enquiries that do not lead to an engagement are deleted within 12 months of my last communication with you, unless I need them to deal with a complaint or legal claim.
7.2 Enquiries that lead to an engagement become part of the matter file and are kept for as long as my professional obligations and the relevant limitation periods require.
7.3 Server logs are kept by Cloudflare in the course of operating the Site. Cloudflare does not publish a single fixed retention period for standard request logs; they are kept only as long as needed for the operation and security of its network, then deleted.
8. Security
8.1 The Site is served only over an encrypted (HTTPS) connection. Access to messages and accounts is limited to me and protected by strong passwords and two-factor authentication. No method of transmission over the internet is completely secure, which is one reason to keep confidential details out of a first message.
9. Your rights
9.1 Under the Data Protection Act, 2019-29, you have the right, subject to the conditions and exceptions in the Act:
- (a) to be told whether I hold personal data about you, and to receive a copy of it;
- (b) to have inaccurate personal data corrected;
- (c) to have your personal data erased;
- (d) to object to processing that is causing, or is likely to cause, damage or distress to you or another person;
- (e) to prevent processing for direct marketing; and
- (f) to receive personal data you provided to me in a structured, commonly used format.
9.2 To exercise any of these rights, email javed.daniel@hotmail.com. I may need to confirm your identity before I act on a request. I will respond within the time the Act allows.
9.3 If you are unhappy with how I have handled your personal data, please contact me first so that I can try to put it right. You also have the right to complain to the Data Protection Commissioner of Barbados.
10. Children
10.1 The Site is not intended for anyone under 18. I do not knowingly collect personal data from children through it.
11. Changes to this notice
11.1 If I change how the Site handles personal data, I will update this notice and the date at the top before the change takes effect.