Privacy Policy

CPJ Fresh Market Online Grocery Store

Effective Date: 03 June 2026

Last Updated: 03 June 2026

1. Introduction

1.1 This Privacy Policy explains how Caribbean Producers St. Lucia Ltd ("CPJ Fresh Market", "we", "us", or "our") collects, uses, shares, and protects your personal information when you visit or place an order through our online store at shop.cpjsaintlucia.com (the "Site").

1.2 We are committed to handling your personal information responsibly and in accordance with the Data Protection Act of Saint Lucia (Cap. 8:18) and applicable data protection principles, including purpose limitation, accountability, data security, and fairness and transparency.

1.3 By using the Site, you acknowledge that you have read and understood this Policy. Please read it together with our Terms & Conditions.

2. Who We Are (Data Controller)

2.1 For the purposes of applicable data protection law, the data controller is:

Caribbean Producers St. Lucia Ltd — CPJ Fresh Market

Address: Cul-de-Sac, Castries, St. Lucia

Email: [INSERT PRIVACY / SUPPORT EMAIL]

Phone: [INSERT SUPPORT PHONE]

2.2 If you have questions about this Policy or how we handle your data, contact us using the details above. [INSERT DATA PROTECTION OFFICER NAME/CONTACT, IF APPOINTED.]

3. Information We Collect

We collect the following categories of personal information:

3.1 Information you provide directly:

Identity and contact details: name, delivery and billing address, email address, telephone number.
Order information: items purchased, order history, substitution preferences, special instructions.
Account information (if you register): username and password.
Communications: messages, feedback, and correspondence you send to our customer service team.
Age verification information where required for age-restricted products.

3.2 Payment information:

Card payments are processed securely by our payment provider, First Atlantic Commerce (FAC). We do not collect or store your full card number on our servers. We may retain limited transaction details (such as a payment reference, the last four digits of the card, and authorization status) for order management and fraud prevention.

3.3 Information collected automatically:

Device and usage data: IP address, browser type, operating system, pages viewed, time spent, referring URLs, and similar diagnostic data.
Cookies and similar technologies (see Section 8).

3.4 Information from third parties:

Analytics and advertising partners (Google, Meta) may provide aggregated or pseudonymized data about how you interact with our Site and advertising.

4. How We Use Your Information

We use your personal information for the following purposes:

Purpose	Examples
Fulfilling your orders	Processing payments, picking, delivery or collection, contacting you about substitutions, issuing receipts
Customer service	Responding to queries, handling complaints, processing refunds and returns
Account management	Creating and maintaining your account, authentication
Age verification	Confirming eligibility to purchase age-restricted items
Improving our Site and services	Analytics, understanding shopping patterns, fixing errors, developing features
Marketing	Sending promotional emails and SMS where you have opted in (see Section 6)
Security and fraud prevention	Detecting, preventing, and investigating fraudulent or unauthorized activity
Legal compliance	Meeting our obligations under applicable law, including tax and accounting requirements

5. Legal Basis for Processing

We process your personal information where:

it is necessary to perform our contract with you (e.g., to fulfil and deliver your order);
you have given consent (e.g., for marketing communications or non-essential cookies);
it is necessary for our legitimate interests (e.g., improving services, securing the Site, preventing fraud), provided these are not overridden by your rights; or
it is necessary to comply with a legal obligation.

6. Marketing Communications

6.1 We will only send you marketing emails or SMS messages where you have opted in to receive them.

6.2 Every marketing email includes an unsubscribe link, and you can opt out of SMS marketing by following the instructions in the message or contacting us. You may also update your preferences at any time via your account or by emailing [INSERT EMAIL].

6.3 Opting out of marketing does not affect transactional messages we need to send you about your orders (such as order confirmations, substitution requests, and delivery updates).

7. How We Share Your Information

7.1 We do not sell your personal information. We share it only as necessary with:

Payment processor — First Atlantic Commerce (FAC), to process card payments securely.
Delivery and logistics personnel — our distribution team and any third-party couriers, to deliver your order.
Technology and service providers — hosting, IT support, and the WordPress/WooCommerce platform that runs our Site, who process data on our behalf under appropriate confidentiality and security obligations.
Analytics providers — Google (Google Analytics) and Meta (Facebook Pixel), as described in Section 8.
Professional advisers and authorities — where required by law, court order, or to protect our legal rights, prevent fraud, or ensure safety.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to confidentiality.

7.2 Where service providers are located outside Saint Lucia, we take reasonable steps to ensure your information is protected by appropriate safeguards.

8. Cookies & Tracking Technologies

8.1 We use cookies and similar technologies to operate the Site, remember your cart and preferences, analyze traffic, and support marketing.

8.2 We use:

Essential cookies — required for the Site to function (e.g., shopping cart, checkout, login). These cannot be disabled.
Analytics cookies — Google Analytics, to understand how visitors use the Site and improve it.
Marketing/advertising cookies — Meta (Facebook) Pixel, to measure and improve the relevance of advertising.

8.3 You can control non-essential cookies through our cookie banner [INSERT IF APPLICABLE] and through your browser settings. Disabling certain cookies may affect Site functionality.

8.4 For more on how these partners process data, see Google's Privacy Policy and Meta's Privacy Policy.

9. Data Retention

9.1 We retain personal information only for as long as necessary to fulfil the purposes described in this Policy, including to satisfy any legal, accounting, or reporting requirements.

9.2 Order and transaction records are typically retained for [INSERT PERIOD — e.g. 7 years] to meet tax and accounting obligations. Account information is retained while your account is active. Marketing preferences are retained until you opt out.

9.3 When information is no longer needed, we securely delete or anonymize it.

10. Data Security

10.1 We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, misuse, or alteration. These include encryption of data in transit (HTTPS/SSL), access controls, and use of a PCI-DSS compliant payment processor.

10.2 No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security, and you provide information at your own risk.

11. Your Rights

11.1 Subject to applicable law, you have the right to:

Access the personal information we hold about you;
Request correction of inaccurate or incomplete information;
Request erasure of your information in certain circumstances;
Object to or request restriction of processing in certain circumstances;
Withdraw consent at any time where processing is based on consent (e.g., marketing);
Object to processing of your personal data for direct marketing purposes.

11.2 To exercise any of these rights, contact us at [INSERT EMAIL]. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.

11.3 Some of these rights derive from provisions of the Saint Lucia Data Protection Act that are being brought into force in stages. We honour these rights as a matter of good practice regardless of commencement status.

11.4 If you have a concern about how we handle your data, you may contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Data Protection Commissioner of Saint Lucia.

12. Children's Privacy

12.1 The Site is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected such information, we will delete it.

13. Third-Party Links

13.1 The Site may contain links to third-party websites or services. We are not responsible for their privacy practices, and this Policy does not apply to them. We encourage you to review their privacy policies.

14. Changes to This Policy

14.1 We may update this Policy from time to time. We will post the updated version on the Site with a revised "Last Updated" date. Material changes may be communicated to you directly where appropriate. Your continued use of the Site after changes are posted constitutes acceptance.

15. Contact Us

For any questions, requests, or complaints regarding this Privacy Policy or your personal information: