How we handle personal data
We only collect personal data that is necessary to complete the verifications requested. If you're the subject of a verification, you control who sees your data, and you can exercise your data rights at any time.
Collection, retention and deletion
What we collect
ID images (front and back), selfies with liveness detection, utility bills, payslips, employer letters, reference contact details, and consent records.
How long we keep it
Active verification data: 7 years from verification date (Jamaica DPA compliance). Consent logs and audit trails: 10 years. Deleted data cannot be recovered.
When we delete it
Retention clocks start when verification completes. Automated deletion runs monthly. Clients can request early deletion if legally permissible.
Your rights under Jamaica's Data Protection Act
You have the right to know what data we hold, request corrections, and ask for deletion where legally allowed. Contact our Data Protection Officer at dpo@cleared.id to exercise these rights.
Right to access
Request a copy of your data held by Cleared®. We typically respond much faster, but our guarantee is that we will respond within 30 days.
Right to correction
If your data is inaccurate, request correction. We update records and notify any organisations that received the old data.
Right to deletion
Request deletion where no legal or contractual obligation requires retention. We confirm deletion and update audit logs within 14 days.
Legal basis for processing
We process your data under consent (you approve sharing before an organisation can request results), contract (to deliver the verification service), or legal obligation (to comply with Jamaica's anti-money laundering, employment, or regulatory requirements). If you withdraw consent, we stop processing immediately unless another legal basis applies.