Privacy Policy (Cayman Islands)

Last updated: 6-Oct-2025

Who we are (Data Controller)

(“Innov8ive”, “we”, “us”) operates innov8ive.ky and is the data controller for personal data collected via our website, checkout, and related services.

The Cayman Islands’ data protection supervisory authority is the Office of the Ombudsman. (Cayman Islands Ombudsman)

What this notice covers

This notice explains what personal data we collect, why we collect it, our lawful bases, how long we keep it, who we share it with, international transfers, your rights, cookies/analytics, and how to contact us or lodge a complaint. It’s written to meet the DPA’s transparency requirements (the “right to be informed”). (Cayman Islands Ombudsman)

Personal data we collect

  • Identity & contact: name, email, phone, billing/shipping address.

  • Order details: items purchased, order notes, delivery preferences.

  • Payment & fraud-prevention data: last four digits/card type (if shown by processor), transaction IDs, risk flags (processed by our payment provider).

  • Account data (optional): username, hashed password, purchase history.

  • Communications: support messages, returns info.

  • Technical data: IP address, device/browser data, cookies and similar technologies (see Cookies & analytics).

  • Marketing preferences: opt-ins/opt-outs for email or SMS.

Why we use your data (lawful bases)

  • To process and deliver your order (contract): take payment, arrange shipping, send confirmations and updates.

  • Customer service & returns (contract/legitimate interests).

  • Fraud prevention & site security (legitimate interests).

  • Legal/financial compliance (legal obligation): accounting, regulatory requirements.

  • Marketing with consent (consent/opt-in): you can withdraw any time.
    These purposes and bases align with the DPA’s principles of fair and lawful processing. (Cayman Islands Ombudsman)

Who we share data with (disclosures)

We share only what’s necessary with:

  • Payment processing: PayPal / Payment Plugins for PayPal (transaction processing, fraud screening).

  • Delivery & logistics: carriers/couriers to deliver your order.

  • Hosting & IT: web host, CDN, e-commerce/analytics providers supporting our site.

  • Professional services: accountants/auditors if legally required.
    If data is transferred overseas (e.g., to the US/EU by processors), we take steps expected under the DPA to ensure an adequate level of protection or appropriate safeguards.

How long we keep data (retention)

  • Orders & invoices: typically 7 years (tax/accounting).

  • Support messages: usually 12–24 months after resolution.

  • Accounts: while active; we delete or anonymize after inactivity per our retention schedule unless law requires longer.
    We keep data no longer than necessary for the purpose collected.

Your rights

Under the DPA, you can: access your data; correct inaccuracies; erase data (where applicable); restrict or object to processing; withdraw consent (for marketing); and lodge a complaint with the Ombudsman. We aim to respond within 30 days of verified requests. Contact: info@innov8ive.ky.

Cookies & analytics

We use cookies and similar technologies for core site functions (cart/checkout), preferences, performance, and (if opted-in) analytics/marketing. You can manage cookies via your browser and if implemented our cookie preferences tool. Provide off-site embedded content (e.g., videos) which may set their own cookies; their policies apply. (Providing clear cookie/analytics info supports the DPA’s transparency duty.)

Security

We implement appropriate technical and organizational measures proportionate to risks (e.g., TLS encryption in transit, role-based access, least-privilege, logging, and periodic reviews). The Ombudsman notes measures should be appropriate to the circumstances and risks, considering available technology and cost.

Personal data breaches

If a personal data breach occurs that is likely to prejudice your rights, we will notify the Office of the Ombudsman and affected individuals without undue delay and, in any case, within 5 days of becoming aware, including required details and mitigation steps.

Children

Our site is intended for adults of legal purchasing age. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us to delete it.

International transfers

Where our processors are outside the Cayman Islands, we assess the destination and apply appropriate safeguards consistent with DPA expectations on transfers/adequacy.

Marketing

With your consent, we may send product updates and offers. You can unsubscribe at any time via the link in our messages or by contacting us.

Updates to this notice

We may update this policy to reflect changes to our services, legal or regulatory requirements. We will post the new version with a revised “Last updated” date.

Contact us

Questions or requests about your data?
Email: info@innov8ive.ky • Phone: +1(345)929-6120

Complaints

If you are not satisfied with our response, you can contact the Office of the Ombudsman (Cayman Islands) for guidance or to lodge a complaint: ombudsman.ky.