Privacy Policy

1.1 Abeng Media is the data controller for personal data processed through abeng.org and Abeng-operated account features described here, under the Data Protection Act 2020 (“DPA 2020”).

1.2 Contact for privacy: [email protected] (subject: Privacy Request). For details on who runs and operates Abeng, email us at the same address.

2.1 This Policy covers:

• guest browsing and RSS use;
• registered accounts and Inbox;
• support and rights requests;
• linking or cross-sign-in with companion products where you choose to connect them.

2.2 Third-party publishers, carriers (SMS), analytics providers, and companion products may process data under their own policies when you leave Abeng or use their services.

We do not require signup for public news reading. We collect only what each feature needs.

We process personal data on one or more of:

• Contract — to provide accounts, Inbox, and features you request (section 23, performance of contract);
• Legitimate interests — security, fraud prevention, service improvement, and journalistic aggregation, balanced against your rights;
• Consent — non-essential cookies, optional marketing, or other processing where consent is required;
• Legal obligation — compliance, court orders, and regulatory duties.

We maintain a processing record for accountability.

• provide and secure the Platform;
• authenticate users (including SMS OTP);
• deliver Inbox and saved preferences;
• attribute and personalise feeds (parish, topic, language);
• respond to corrections, complaints, and privacy requests;
• detect abuse and protect rights holders and users;
• comply with law and enforce Terms.

We do not sell personal data.

6.1 Article text from publishers may be processed by automated systems for summarisation, translation, tagging, and optional civic or legal context. That processing is directed at content, not at profiling you for automated decisions with legal effect.

6.2 Where we use AI on your submissions (e.g. support mail), we do so to respond and improve service quality, subject to this Policy.

We may share data with:

• hosting, email, SMS, and security providers under contract;
• professional advisers where required;
• authorities when law or court order requires;
• successors in a merger or reorganisation, subject to this Policy.

Processors must implement appropriate technical and organisational measures and process only on our instructions.

8.1 Data may be processed outside Jamaica (e.g. cloud hosting). Where Part VII of the DPA 2020 applies, we use appropriate safeguards (adequacy, standard contractual clauses, or other permitted mechanisms).

We keep data only as long as needed for the purposes above, including legal, accounting, and complaint records. Inbox and account data are deleted or anonymised within a reasonable period after account closure, unless law requires longer retention.

10.1 We use administrative, technical, and organisational measures appropriate to the risk. No system is completely secure.

10.2 If a personal data breach is likely to affect your rights, we will notify the Office of the Information Commissioner and affected individuals as required by section 27 of the DPA 2020, including where applicable within 72 hours of becoming aware of a notifiable breach.

Subject to exceptions in the Act, you may request:

Email [email protected] with “Privacy Request” and enough detail to verify your identity. We respond within 30 days, extendable to 60 days where complex.

You may complain to the Office of the Information Commissioner if unsatisfied: oic.gov.jm.

12.1 Essential cookies support login, security, and core functions.

12.2 Non-essential analytics or preference cookies, where used, rely on consent via the site banner or settings.

12.3 You may control cookies through browser settings; blocking some cookies may limit features.

The Platform is not directed at persons under 18. We do not knowingly collect children's personal data. Contact us to request deletion if you believe we have done so.

We may update this Policy. Material changes will be notified as in the Terms (registered email and/or on-site notice, 30 days where practicable). The effective date appears at the top.

Abeng Media — for all privacy questions, data subject access, erasure, complaints, or to ask who runs and operates Abeng:

[email protected]