Cayman Compliance Desk
Legal
Privacy Policy
This policy explains what personal information the Cayman Compliance Desk collects through caymandesk.com, why we collect it, and what we do with it. We have kept it short because the site itself collects very little.
In short: we collect only what you type into a form on this site. We do not use cookies, analytics, tracking pixels, or advertising, and we never sell your information.
On this page
1. Who this policy covers
This policy applies to the Cayman Compliance Desk website at caymandesk.com and to the regulations reference library at ditc.caymandesk.com. In this policy, "we", "us", and "our" mean the Cayman Compliance Desk.
It does not cover the services we provide to clients under an engagement. If you become a client, the handling of your data is governed by your engagement agreement with us, which takes precedence over this policy where the two differ.
2. Information we collect
Information you give us
We collect personal information only when you choose to submit it through a form on this site:
- Launch notification form. Your email address, and your name if you choose to provide it (the name field is optional).
- Compliance diagnostic form. Your name, email address, the name of the entity you are enquiring about, and any details you choose to include in the free-text field.
You control what goes into the free-text field. Please do not use it to send us sensitive personal information, account holder data, or confidential documents — email us and we will arrange a secure channel instead.
Information collected automatically
Our hosting provider, Cloudflare, records standard server log information when you visit — including your IP address, browser type, the pages requested, and the time of the request. This is used to deliver the site, keep it available, and protect it from abuse.
We also load our typefaces from Google Fonts. Your browser requests those font files directly from Google, which means your IP address is visible to Google as part of that request.
What we do not collect
This site sets no cookies. We use no analytics platform, no tracking pixels, no session recording, no advertising or remarketing tags, and no social media trackers. There is nothing to opt out of, which is why you will not find a cookie banner here.
3. How we use it
We use the information you submit only to:
- reply to your enquiry and provide the compliance diagnostic you requested;
- notify you when the portal goes live, if you asked to be notified;
- keep the site secure, available, and functioning correctly.
We rely on your consent for launch notifications — you asked us to contact you, and you can withdraw that at any time. For responding to enquiries and protecting the site, we rely on our legitimate interests in operating our business. We do not use your information for automated decision-making or profiling, and we do not send marketing unrelated to what you asked about.
4. Who we share it with
We do not sell your personal information, and we do not share it with advertisers. We use a small number of service providers to run the site and receive your messages:
- Cloudflare — hosting, content delivery, and security for this website.
- Discord — delivers an internal notification to our team when a form is submitted.
- Resend — delivers the resulting email notification to our desk.
- Google Fonts — serves the typefaces used on this site, as described above.
These providers process information on our behalf and are not permitted to use it for their own purposes. They operate infrastructure outside the Cayman Islands, including in the United States and the European Union, so your information may be transferred and stored in those locations.
We may also disclose information where we are required to by law, by a court, or by a regulator, or where it is necessary to establish or defend a legal claim.
5. How long we keep it
We keep enquiry and notification details only as long as we need them for the purpose you gave them to us — typically until we have dealt with your enquiry, or until you ask to be removed from the launch notification list. Correspondence may be retained for longer where we need it to meet a legal or regulatory record-keeping obligation. Server logs held by Cloudflare are retained on their standard schedule.
6. Your rights
Under the Cayman Islands Data Protection Act (2021 Revision), and under other data protection laws that may apply to you, you have the right to:
- ask what personal data we hold about you and request a copy of it;
- have inaccurate or incomplete data corrected;
- ask us to stop processing your data, or to erase it;
- withdraw consent to launch notifications at any time;
- complain to a supervisory authority.
To exercise any of these, email desk@caymandesk.com. We will respond within the period required by law. If you are not satisfied with our response, you can complain to the Office of the Ombudsman of the Cayman Islands, or to the data protection authority where you live.
7. Security
This site is served over HTTPS, and form submissions are transmitted encrypted. We limit access to enquiry details to the people who need it to respond to you. No method of transmission over the internet is completely secure, so please use the judgement described in section 2 about what you put in a web form.
8. Changes to this policy
We will update this policy when our practices change — for example, when the client portal launches, which will involve collecting more information than this site does today. The "last updated" date at the top shows when the current version took effect.
9. Contact us
For any question about this policy or about how we handle your information, email desk@caymandesk.com.
See also our Terms of Use.