Privacy Notice

Our promise to you

Sagicor’s Sigma Run is hosted by the Sagicor Foundation, the charitable arm of Sagicor Group Jamaica.  The Sagicor Group has more than 180 years of experience and responsibility providing financial and insurance services across the Caribbean.  Sagicor is dedicated to earning and retaining your trust in everything we do.

We are guided by our company Values embodied in our S.C.R.I.P.T. (Service, Communication, Respect, Integrity, Performance and Teamwork) and so whatever your relationship with our brand and our businesses is, we make the following promises to protect your personal data.

As your trust is important to us:

  • We will treat your data confidentially.
  • We will only share your data with third parties where it is needed to provide the services you have asked for or to comply with the law.
  • We will never sell your data.
  • We will always ensure that decisions taken based on your data are made fairly.
  • We will always ensure that you have the opportunity to discuss any decisions taken involving your data directly with a team member.
  • We will never use your data to take advantage of you.
  • We will always communicate with you in simple language about what we are doing with your data and why we need it.
  • We will only share your information within the Sagicor Group where it is necessary to provide you with the advice, products and services you have asked for, or to comply with a legal requirement.

 

Our Client Experience mantra “only when our clients win, we win, guides all our interactions with your data. Thank you for your confidence and trust.

About this Privacy Notice

The Sagicor Foundation (a part of Sagicor Group Jamaica) is a data controller for personal information related to the Sigma Run. This document explains what personal data we collect and why, how and where we use it and for how long we keep it. It explains your rights over your personal data. In here you can find the address for the Sagicor Foundation and the contact details for our Data Protection Officer.

Please note:

 

Data Protection Law

The data protection law in Jamaica is the Data Protection Act (JDPA) of 2020. If you are a resident of another country, separate data protection laws may also apply. 

The JDPA defines sensitive personal data as information on a person’s:

  • genetic data or biometric data;
  • filiation, or racial or ethnic origin;
  • political opinions, philosophical beliefs;
  • religious beliefs or other beliefs of a similar nature;
  • membership in any trade union;
  • physical or mental health or condition;
  • sex life;
  • the alleged commission of any offence by the data subject or any proceedings for any offence alleged to have been committed by the data subject.

If you are resident in Jamaica or we process your data there, you have the following additional rights under the JDPA:

  • You have the right to prevent decisions being made about you by solely automated means. However, some kinds of decision can be exempted from this right by ministerial order.
  • The protection of your personal data continues for 30 years following your death. This means that your estate can continue to exercise your rights and we will continue to protect your data during that time.
  • If you seek to exercise your right to correction of your personal data and we are unable to confirm your revised information, you may require us to retain a record of your version of the data alongside ours.

Details of data processing

The types of information which may be collected are listed below. The information that we collect, and process varies depending on the context. Each section below lists the categories that we may collect for the purposes listed. The categories are as follows:

Category

Examples of data collected

Browser data

Collected upon visiting the website.

Details provided by your computer or phone when using an app or internet browser including IP address and technical information about your device.

CCTV

Collected if physically visiting a Sagicor Group Jamaica location.

Video recordings collected by cameras installed at our premises which may capture public areas surrounding our buildings as well as interior space.

Contact and demographic information

Collected for all runners and legal guardians, as well as volunteers.

Your name, address, contact information such as telephone number, email address, social media details; your date of birth, marital status and gender. This also may include details of your family, dependents and relations, which may include minors. We will also collect your signature or other authorisation in various contexts.

Cookies

Collected, if not declined, upon visiting the website.

Small files placed on your computer or phone by us or third parties which are used to store information as part of delivering our website, app or services and to identify you during and between sessions.

Employment information

Collected only if registering through a Sagicor employee team.

Your employment status, the name and details of your employer, your job title, any unique identifying number or code provided by your employer.

Financial information

Collected for individual payment through Running Events Jamaica, or Corporate/ Team payments through Sagicor Group Jamaica, or donations.

Card payment information

Bank account details

Filiation information

Collected through runner registration, legal guardian information, and volunteer registration.

Details of your familial relationships to other people.

Government-issued identification

Collected during race pack pickup, or runner verification if needed.

Identity card or driver’s licence details or passport details.

Health information

Collected if voluntarily disclosed during registration or pre- run.

Your health records, details of health conditions and family medical history.

The examples given above are not an inclusive list; please contact us if you would like a complete list of the data we may hold about you.

 

 

Your rights

Your personal data belongs to you. Personal data is any information about you that is held in a way that allows you to be identified.  We use it to plan, administer, execute and market the Sigma Run to you, to obey the law and to improve our services.  Your specific rights are as follows:

 

“Transparency”

You have the right to a detailed explanation of what data we have about you, how and where we use it, how long we keep it and with whom it is shared.

 

“Access”

You have the right to a copy of the data we hold about you. We will not charge you for providing this information in electronic form; we may charge for providing it on paper to reflect the costs and environmental impact of doing so. We may ask you to prove your identity before we release your data to you. If you want the data for a specific reason, you can help us by letting us know. Please be aware that no-one can force you to get a copy of your data and no-one should ask you to share it with them.

 

“Correction”

You have the right to have your data corrected. If you believe we have incomplete or incorrect information about you, please let us know. We may ask you to provide your identity and to provide evidence supporting the changes you would like made.

 

“Erasure and the right to be forgotten”

You have the right to have your data erased if we no longer need it. Note that in many cases we need to retain data about you in order to honour our obligations to you, because we are required to by law, or to protect your and our interests.

 

“Automated decision making”

The Sagicor Foundation does not make any decisions through purely automated means.

 

“Objection to processing on the basis of legitimate interest”

You have the right to object to processing of your data where we use it to help us improve our services. This is known as processing on the basis of our legitimate interests. We are required carefully to consider and respond to your objection and show that we have taken care to protect you when doing such processing; you may also require that we do not process your data while we are considering your objection.

 

“Restriction of processing”

You have the right, in certain other circumstances, to require us to stop processing your data. These circumstances are:

  • Where we disagree about the accuracy of the information we hold about you and while we are verifying that information.
  • Where we no longer require personal data that we hold about you and would normally erase it, but you wish us to retain it without otherwise processing it, for instance where you believe that you may need the information for your own purposes in a legal claim.
  • You believe that the processing of your data may cause you substantial harm or distress and that our processing is not justified in accordance with the law.

 

“Direct marketing”

You have the right to opt out of direct marketing.  You will need to tell us the email addresses, phone numbers and other relevant details, and you will understand that we will need to keep these details so that we can be sure not to add you back to marketing lists in error. You also, of course, have the right to opt back into marketing at any time.

 

“Data portability”

In some circumstances you have the right to ask us to transfer your data to another service provider directly. This can only be done where it is technically possible both for us and for the other service provider; we and they will let you know when this is the case.

 

“Withdrawal of consent”

Most of our processing of your data is performed for one of three reasons:

  • a contract between you and us, or in order to enter into such a contract;
  • to comply with legal obligations placed on us by the government and our regulators; or
  • to help us improve our services by better understanding participants and their needs.

However, in some cases we will ask you for your consent to processing. Where we have done so, you have the right to withdraw your consent at any time and we will stop processing. We will explain the consequences of withdrawing consent at the time we ask for it and when you ask to withdraw it.

If you would like to know more about our processing of your data or would like to exercise any of your rights in relation to Sagicor Group Jamaica, you can email us at dpo@sagicor.com.

 

Lawful basis for Processing

The controller will process personal data through one of the following bases:

Performance of a contract, consent, legitimate interest, or legal obligation.  The legal basis for processing will depend upon how you interact with us:

Runner

  • Consent for marketing
  • Performance of a contract (depending upon the stage of runner registration)
  • Contractual obligations to host the race
  • Legitimate interest in all other cases

Legal guardians of runners and emergency contacts

  • Consent for marketing
  • Performance of a contract

Spectators

  • Legal obligations in relation to safety, public health and security
  • Consent applies for corporate spectators listed on registration forms
  • Legitimate interest in all other cases

Third Party Suppliers and Partners

  • Performance of a contract
  • Legitimate interest in all other cases

Volunteers and support staff

  • Consent (if no contract is in place)
  • Contract if a formal agreement is in place

 

Retention of data

We will keep at least some of your personal data for a period of 24 months (if you are a runner or legal guardian) from your last interaction with us or, until you withdraw your consent. Emergency contact information will be deleted 30 days after the race. We retain this data to comply with our contractual obligations, our legitimate interests and to provide for legal claims.

 

Transfers of data to other countries

We transfer your personal data to other countries in a number of circumstances:

To the United States of America for the purposes of IT service provision and data resilience. Our primary data centre is located in the United States, as is our recovery facility. These transfers, which include third party service providers, are protected by binding agreements that include standard contractual clauses setting out the obligations of the sending and receiving parties and the safeguards, including specific technological measures, that must be applied. If you would like more information on our internal transfers and safeguards as they apply to you, please contact us.

To other countries as required to enable the use of technology and service partners. We conduct careful due diligence on all data sharing partners and ensure that appropriate protections are in place to keep your personal data secure. If you would like a list of the partners and countries with whom your data have been shared, please contact us.

Complaints

If you are not satisfied with Sagicor’s response to any enquiry or complaint you make to us, you have the right to complain to the Office of the Information Commissioner of Jamaica, whose contact details are as follows:

Office of the Information Commissioner

The Masonic Building (2nd Floor)

45-47 Barbados Avenue

Kingston 5

Jamaica

Tel: +1 (876) 920-4390

Email: info@oic.gov.jm 

This privacy notice was last updated on 1 February 2024. It is updated frequently, so please visit https://sagicorsigmarun.com/privacy-policy/

Sigma Blogs