Privacy Policy

1. Who We Are

Whyte Law (“the Firm”, “we”, “us”, or “our”) is a law firm registered and operating in Jamaica. We provide legal services to clients and operate a secure online portal to facilitate the delivery of those services. This Privacy Policy explains how we collect, use, store, and protect personal information in connection with the Portal.

2. Information We Collect

We collect the following categories of personal information:

• Identity data: full name, government-issued identification numbers (TRN, passport, national ID) provided in connection with your matter;
• Contact data: email address, telephone number, postal address;
• Matter data: information relating to your legal matter, including property details, transaction values, counterparty information, and correspondence;
• Financial data: payment records, billing statements, and fund receipts relating to your matter;
• Usage data: login timestamps, pages visited within the Portal, and device information used for security purposes (two-factor authentication, trusted device records);
• Communications: messages sent through the Portal messaging system.

3. How We Use Your Information

We use your personal information to:

• Provide and administer legal services to you;
• Operate and maintain your Portal account;
• Send matter updates, document requests, and billing notifications;
• Comply with our obligations under Jamaican anti-money laundering legislation, including the Proceeds of Crime Act and relevant guidance from the Financial Intelligence Unit;
• Maintain records as required by the Legal Profession Act of Jamaica and related regulations;
• Improve the security and functionality of the Portal.

4. Legal Basis for Processing

We process your personal information on the following bases: performance of a legal services contract to which you are a party; compliance with legal obligations under Jamaican law; our legitimate interests in operating a secure and efficient practice management system; and, where applicable, your consent.

5. Sharing of Information

We do not sell or rent your personal information. We may share it with:

• Third parties directly involved in your matter (e.g., the counterparty’s attorneys, financial institutions, the National Land Agency, Tax Administration Jamaica, the Stamp Office);
• Regulatory bodies where disclosure is required by law;
• Our technology service providers (including our portal infrastructure provider, Supabase Inc.) who process data on our behalf under data processing agreements and are bound by confidentiality obligations.

6. Data Retention

We retain client files and associated personal data for a minimum of 12 years following the closure of your matter, in accordance with professional obligations and applicable limitation periods under Jamaican law. Device trust records used for two-factor authentication are retained for 30 days and then automatically deleted.

7. Security

We implement appropriate technical and organisational measures to protect your personal information, including 256-bit SSL encryption for data in transit, role-based access controls, two-factor authentication on all Portal accounts, and regular security reviews. No method of electronic transmission or storage is entirely secure, and we cannot guarantee absolute security.

8. Your Rights

Subject to applicable Jamaican law, you have the right to request access to, correction of, or deletion of your personal data held by us, and to raise concerns about how your data is processed. To exercise any of these rights, please contact us using the details below.

9. Cookies and Tracking

The Portal uses session cookies that are strictly necessary for authentication and security. We do not use advertising cookies or third-party tracking technologies. Device trust cookies are stored locally to support the trusted-device feature and expire after 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by an updated “Last updated” date at the top of this page. Continued use of the Portal following any update constitutes your acknowledgment of the revised policy.

11. Contact Us

For questions, concerns, or to exercise your data rights, please contact us at: