Yaad Box

Privacy notice

Version 2026-10. Yaad Box is the data controller for the personal data described here, processed under the Data Protection Act, 2020 (Jamaica).

What we collect

  • Account details: your name, email, mobile number, collection branch and parish.
  • Your Taxpayer Registration Number (TRN), if you give it, for customs clearance.
  • Package details from our US forwarders: tracking numbers, store, contents description, weight and declared value, and store invoices you upload.
  • Payments and invoices, delivery addresses, proof of delivery (signature or photo) and the name of whoever collected a package.
  • Messages you send us and technical records such as sign-in times and IP addresses, used for security.

Why we use it

  • To provide the service you signed up for: give you a US address, match and track your packages, clear them through customs, bill you and hand them over.
  • To meet legal obligations, including customs declarations to the Jamaica Customs Agency and tax records.
  • To keep your account and packages secure and prevent fraud.
  • To send you deals, only if you opted in. You can opt out at any time.

Who we share it with

  • Our US freight forwarders receive your name and mailbox number on parcels addressed to you — that's how they know who the package is for.
  • Licensed customs brokers and the Jamaica Customs Agency receive what's needed to clear packages above the duty-free limit, including your TRN.
  • Service providers who process data on our instructions: payment processing, email, SMS and WhatsApp delivery, and cloud hosting. Some are located outside Jamaica; we use providers with appropriate safeguards.
  • We never sell your personal data.

How we protect it

Your TRN is encrypted at rest and visible only to staff who need it for customs; every time it is viewed, that is logged. Staff access is limited by role, every staff action is recorded in an audit log, and files are stored privately.

How long we keep it

We keep package, invoice and payment records for seven years to meet tax and customs record-keeping requirements. Other account data is kept while your account is open and deleted or anonymised after you close it, unless the law requires us to keep it.

Your rights

  • See the personal data we hold about you — download a copy any time from Account → Privacy.
  • Ask us to correct inaccurate data.
  • Ask us to delete your data, subject to records we must keep by law.
  • Withdraw marketing consent at any time.
  • Complain to the Information Commissioner if you believe we have mishandled your data.