Privacy Policy
Who we are
We are a nonprofit foundation based in the Cayman Islands, dedicated to providing social assistance programs, scholarships, and educational support to individuals and communities in need.
For the purposes of the Cayman Islands Data Protection Act (2021 Revision), Jewel Hydes acts as the Data Controller, determining the purposes and means of processing personal data
We are committed to protecting your privacy and handling personal data lawfully, fairly, and transparently, following the Cayman Data Protection Act and its Regulations.
What is our role?
As Data Controller, we determine why and how your personal data is collected, used, shared, and retained in connection with:
- Applications for social assistance
- Scholarship and grant programs
- Beneficiary management
- Donor relations
- Website and application interactions
We may also act as Data Processor only in cases where we process personal data on behalf of partner organizations under their instructions. When acting as Processor, we comply strictly with those instructions and applicable legal requirements
What information do we collect about you?
We may collect:
Applicants, beneficiaries, and potential applicants
- Name, surname, date of birth, gender
- Contact information (email, phone, address)
- Education records, academic certificates
- Financial and socioeconomic data required to assess eligibility
- Supporting documents submitted for grant or assistance evaluation
- Device details (operating system, logs, usage data)—non-identifiable alone.
Donors and partners
- Name, business information, contact information
- Donation records, agreements, or funding documentation
- Payment information when applicable
Website visitors
- Technical and usage data collected through browsing activity
- Basic device or application data
How and why do we collect your information?
We collect personal data:
- Directly from you (forms, applications, email communication)
- Through documents you submit to support your application
- From third-party service providers assisting with identity verification or program administration
- From usage logs of our website or application
We ensure that all data collected is adequate, relevant, and not excessive for the intended purposes.
What do we use your information for?
We use your personal data to:
Applicants & beneficiaries
- Evaluate eligibility for grants, scholarships, or social assistance
- Process and manage your application
- Communicate program updates and decisions
- Ensure program fairness, transparency, and accountability
- Investigate misuse or suspicious activity when necessary
Donors and partners
- Manage donor relationships
- Provide reports and transparency obligations
- Maintain partnership agreements
General purposes
- Improve our services and security
- Comply with legal or regulatory requirements
Who do we share your information with?
We only disclose your personal data to third parties when necessary, including:
- Professional advisers (legal, accounting)
- Third-party service providers (identity verification, hosting, IT services)
- Program evaluators or committee members under confidentiality obligations
- Government authorities when legally required
We ensure all third parties:
- Process data only under our instructions
- Implement adequate security measures
- Maintain confidentiality
- Notify us of data breaches
We do not sell your personal data.
International Data Transfers
Your data may be transferred outside the Cayman Islands or the EEA when necessary to support our operations. Any transfer is carried out using:
- Adequacy decisions
- Contractual safeguards
- Appropriate data protection mechanisms
How long do we retain your personal data?
We retain your data only as long as necessary for the purposes collected, including:
- Duration of our relationship with you
- Required legal retention periods (e.g., funding audits, compliance)
- Up to four years after the relationship ends, unless law requires longer
Automated decisionmaking
We do not make decisions based solely on automated processing.
How do we keep your information safe?
We use technical and organizational security measures, such as:
- Encryption at rest and in transit
- Cloud security controls
- Firewall protections
- Logical data segmentation
While we take robust measures, no transmission over the internet is completely secure. Any transmission is at your own risk.
Thirdparty sites and services
Our website may link to external sites. We are not responsible for their privacy or data protection practices. Please review their policies.
Your rights under the Cayman Islands DPA
You have the right to:
- Request information about whether we hold your data
- Access your personal data
- Request correction of inaccurate data
- Request erasure
- Object to processing
- Restrict processing
- Data portability
- Object to automated processing
- File a complaint with the Cayman Islands Ombudsman
Further detail: https://ombudsman.ky/data-protection
To exercise your rights, contact us email: JHydes@caymaniansfirst.com or by writing to us at Jewel Hydes, P.O. BOX 31910, 20 Genesis Close, George Town, Grand Cayman, Cayman Islands.
We try to respond to all legitimate enquiries within 30 days. Occasionally it may take us longer if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated
Definitions
Any terms not defined in this Privacy have the meanings given to such terms in the Data Protection Legislation.
Changes to this Privacy Notice
We may update this Notice periodically. Updates will be posted on our website.
Contacting us
If you have any questions, comments and requests regarding this Privacy Policy or our processing of your personal data an you should address all correspondence at JHydes@caymaniansfirst.com or by writing to us at Jewel Hydes, P.O. BOX 31910, 20 Genesis Close, George Town, Grand Cayman, Cayman Islands.
Media
Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
Suggested text: If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Suggested text: Visitor comments may be checked through an automated spam detection service.
Who we are
Suggested text: Our website address is: https://agitated-carver.68-221-26-132.plesk.page.
Comments
Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
Suggested text: If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Suggested text: Visitor comments may be checked through an automated spam detection service.