DriveClear Jamaica Privacy Statement

This statement applies to people who visit the DriveClear website, run a traffic-ticket check, create an account, use the client portal, request a DriveClear service, subscribe to Monitoring, use or participate in a company/fleet workspace, communicate with DriveClear, or otherwise provide personal data in connection with the service.

For the DriveClear service, DriveClear Jamaica acts as the data controller for the personal data it determines how and why to process.

Depending on the service you use, DriveClear may process:

• identity and contact information, including name, email address, telephone number, address, and date of birth;
• TRN, driver-licence number, licence control number, original issue date, and other driver identifiers needed for an authorized lookup;
• traffic-ticket, offence, fine, court, warrant-investigation, and case-status information;
• documents you upload, such as ticket documents, driver-licence images, court notices, and payment evidence;
• quotes, invoices, payment records, receipts, settlement evidence, and refund records;
• communications, customer-service requests, service instructions, and attorney/court coordination records;
• account-security information, including verification state, password credential hashes, session records, consent records, and security/audit metadata;
• technical information such as IP-derived security data, browser information, Turnstile verification information, and application logs; and
• marketing and communication preference information where you separately choose to receive optional email or SMS updates; and
• company/fleet information such as organization name, business contact details, driver roster information, internal driver references, authorization attestations, fleet check requests, and fleet compliance/service status.

DriveClear uses the driver identifiers submitted for an authorized traffic-ticket lookup to query the applicable traffic-ticket source. Where secure operational storage is configured, DriveClear may retain the driver-licence number or TRN, licence control number, and original licence issue date in encrypted form so those details are available if the customer asks DriveClear to continue with ticket-resolution work.

These encrypted identifiers are not shown in ordinary customer lists, lead queues, or routine staff dashboards. Access is limited to authorized operational staff when the information is needed for a specific service task, such as preparing a controlled field work order for police-record retrieval or court/cashier administration. Access to the printable operational view is logged.

DriveClear may also retain the ticket records returned by a check, the fact that an authorized lookup occurred, and the audit/security record associated with the check.

If you separately activate DriveClear Monitoring, DriveClear may need to retain the credentials required to perform future authorized checks. Those credentials are handled under the Monitoring security controls and are intended to be stored in encrypted form rather than ordinary readable text.

Monitoring is a separate paid service authorization and can be stopped. Automatic 24-hour checks and Monitoring deadline/change reminders are performed only while the Monitoring subscription is ACTIVE. Without an ACTIVE subscription, a customer may manually run a fresh check from the portal, but DriveClear does not automatically rerun the check or generate Monitoring reminders.

Ending Monitoring does not require DriveClear to delete case, financial, consent, security, or other records that must still be retained for another legitimate purpose.

Where an organization uses DriveClear to manage a fleet, DriveClear may process information about the organization, its authorized account users, participating drivers, driver roster status, check requests, and resulting administrative compliance records.

The organization is responsible for ensuring that it has an appropriate lawful basis and authority to provide participating drivers' information and request DriveClear services for them. DriveClear may require additional authorization before performing a lookup and will not treat an organization account alone as proof that every requested lookup is authorized.

DriveClear processes personal data for purposes that include:

• creating, verifying, securing, and supporting customer accounts;
• performing authorized traffic-ticket checks and maintaining returned ticket records;
• providing administrative case, warrant-investigation, payment, court-coordination, Monitoring, and company/fleet management services;
• preparing and administering quotes, invoices, payments, receipts, refunds, and financial records;
• communicating service progress, security notices, requests for information, and other account messages;
• preventing fraud, misuse, unauthorized access, and security incidents;
• maintaining audit trails, resolving disputes, and demonstrating customer instructions or consent;
• complying with legal, regulatory, accounting, court, or lawful government requirements; and
• sending marketing only where the customer has made a separate marketing choice.

The applicable basis depends on the activity. DriveClear may process data because it is necessary to take steps you request or perform an agreed service, because you have given a specific consent where consent is appropriate, because processing is reasonably necessary for legitimate security or operational interests, or because DriveClear must comply with a legal obligation.

Optional direct-marketing and service-option outreach consent is kept separate from the processing reasonably required to run the free check or provide another DriveClear service. Where you opt in, DriveClear records the permitted channel or channels (phone call, email and/or SMS), the consent version, source, and relevant contact details. You may later withdraw or change a channel preference.

DriveClear may disclose only the information reasonably needed for the relevant purpose to:

• traffic-ticket information sources used for an authorized lookup;
• courts, government bodies, or public authorities involved in the customer's traffic matter where disclosure is authorized or legally required;
• independent attorneys or law firms where the customer has requested or authorized legal/court coordination;
• payment or financial-service providers used for approved payment functions, including WiPay for hosted online-payment processing where applicable;
• technology providers supporting hosting, storage, security, email, or other application operations; and
• professional advisers, auditors, insurers, or authorities where reasonably necessary for legal, security, accounting, or compliance purposes.

DriveClear does not sell customer personal data to advertisers.

DriveClear uses third-party technology providers, including Cloudflare for application infrastructure, EmailBump for transactional email, and WiPay for hosted online-payment processing where a customer chooses an eligible online checkout. Some service providers may process or store information outside Jamaica.

Where personal data is transferred or processed outside Jamaica, DriveClear will use the transfer only where permitted and will apply contractual, technical, organizational, or other safeguards appropriate to the service and applicable law.

DriveClear aims to collect only data reasonably needed for the stated service, security, accounting, compliance, or support purpose. Customers should keep their information accurate and notify DriveClear when relevant information changes.

DriveClear does not intend to retain personal data indefinitely. Retention depends on the type of record and why it is needed.

• Lookup credentials: where retained for authorized operational or Monitoring use, stored in encrypted form and kept only while reasonably necessary for the service, secure follow-up, dispute/audit needs, or another lawful retention purpose.
• Account, case, quote, invoice, payment, consent, audit, and dispute records: generally retained for up to seven years after the later of case closure, last financial activity, or account/service termination where needed for accounting, disputes, security, or legal records, unless a longer or shorter period is required or justified.
• Marketing preference records: retained while the preference is active and as needed afterward to remember an opt-out or demonstrate the preference history.
• Security logs: retained for the period reasonably needed for security monitoring, incident response, abuse prevention, and audit.
• Monitoring credentials: retained only while reasonably necessary to operate an authorized Monitoring service and to complete secure termination or deletion processes.

Records may be retained longer where required for litigation, fraud investigation, law-enforcement preservation, a regulatory requirement, or another lawful reason. When information is no longer required, DriveClear will delete, securely dispose of, or de-identify it as appropriate.

DriveClear uses access controls, authenticated customer and staff sessions, private document storage, audit records, encrypted or hashed credentials where appropriate, traffic filtering, and other technical and organizational measures designed to protect customer information.

No internet service can promise absolute security. If DriveClear becomes aware of a personal-data security incident, it will investigate and make notifications required by applicable law.

Subject to applicable law and any lawful exceptions, you may have rights to be informed about processing, request access to personal data, request correction, request restriction of certain processing, withdraw a consent where processing depends on consent, request transmission of data where applicable, and object to certain solely automated decisions.

Account holders can start a request using the secure Privacy Rights Request form. DriveClear may need to verify identity and may request additional information before acting on a request.

DriveClear may use software rules to categorize records, flag a ticket for staff review, calculate quoted amounts from configured fee rules, or prioritize operational work. DriveClear does not intend to make a legal decision about guilt, warrant status, court outcome, or legal rights solely by automated processing.

Service communications are part of operating the account and the services you request. Electronic communications are governed by the E‑Sign Disclosure. Optional phone-call, email and SMS outreach remains a separate choice and can be managed after signup from Communication Preferences.

DriveClear may update this statement to reflect changes in law, technology, providers, or service operations. Material changes that require a new customer acceptance will be issued under a new legal-package version.

You may first raise a privacy concern with DriveClear through the secure customer request process. You may also have the right to make a complaint to Jamaica's Office of the Information Commissioner regarding the processing of personal data.