Privacy policy

Who we are

AYawd is operated by Stream Events Jamaica Ltd. ([registered office address], Kingston, Jamaica). We are the data controller for the personal data described in this policy and are registered with the Office of the Information Commissioner in Jamaica (registration number [registration number]). Our Data Protection Officer is [name of Data Protection Officer], reachable at support@ayawd.com.

This policy explains how we handle personal data under the Jamaica Data Protection Act, 2020 and, for patrons in the United Kingdom and the European Union, the UK GDPR and the EU General Data Protection Regulation (GDPR).

What we collect

Your account. Your email address, your password (stored only as a one-way hash we cannot read), display name, username and country, plus anything you choose to add to your profile: picture, banner, bio, pronouns, location, links, favourite genres and theme. We also keep your settings, such as captions, data saver, currency and email choices.

Purchases. The plans, tickets, passes and add-ons you buy, prices, currency, promo codes, the payment provider (Stripe or PayPal) and its reference, and the dates. We never receive or store your full card number or security code.

Viewing. What you watch and how far you got, your list, the artists and channels you follow, show reminders, daily viewing time on the free plan, and playback sessions (title, time, device type, IP address and approximate country). Playback sessions let us enforce screen limits, trace watermarked recordings and fix streaming problems.

Chat. Messages you send, reports you make or receive, and any moderation actions on your account.

Security and devices. The devices you sign in with (browser and operating system), IP addresses, approximate country, sign-in times, failed sign-in attempts and, if you use two-step sign-in, an encrypted secret and hashed recovery codes.

Bot protection. When sign-up or sign-in needs a security check, Cloudflare Turnstile processes browser and device signals to tell people from bots.

Messages with us. Emails you send to support and the emails we send you.

How we use it, and our legal bases

Under the Jamaica Data Protection Act, 2020 we follow its data protection standards: we process data fairly and lawfully, for specific purposes, keep only what we need, keep it accurate, keep it no longer than necessary, respect your rights, keep it secure, and only transfer it abroad with adequate protection.

Watermarks and personal salutations

Paid streams display your name, your email address and a session code as a moving watermark, and greet you by name. Anyone who can see your screen can see them. The session code links back to the playback session record so that recordings shared without permission can be traced. We use this only to protect the shows and the people who make them.

Who we share it with

• Service providers who run parts of AYawd for us under contract: cloud hosting and storage, the video delivery network, email delivery, Cloudflare (security checks), and Stripe and PayPal (payments). They may only use your data to provide their service to us.
• Artists, promoters and venues receive viewing figures and statistics that do not identify you.
• Other patrons see your public profile and your chat messages. If you choose to share your watch activity, your recently watched titles appear on your profile.
• Authorities and rights holders when the law requires it, or to protect our rights, our patrons or the public, for example in cases of fraud or leaked recordings.
• A buyer or successor if our business is sold or reorganised, under the same protections.

We do not sell your personal data.

International transfers

Some of our providers process data outside Jamaica, for example in the United States or the European Union. When data leaves Jamaica, the United Kingdom or the European Union, we make sure it stays protected, using safeguards such as adequacy decisions and standard contractual clauses, as the Jamaica Data Protection Act and the GDPR require.

How long we keep it

• Account and profile data: while your account is open.
• When you delete your account: your profile, pictures, list, follows, reminders, viewing progress and sign-in sessions are erased straight away. Your chat messages remain in replays but show as "Deleted patron". Playback records are kept without anything that identifies you.
• Orders and payment records: for as long as tax and accounting law requires (usually [seven] years), without your profile.
• Security logs: for up to [12 months], unless needed for an investigation.
• Backups: deleted data leaves our backups within [35 days].

Your rights

You have the right to:

• access your personal data and get a copy of it;
• correct data that is wrong or incomplete;
• delete your data (the right to erasure);
• take your data with you in a portable format;
• object to or restrict some uses of your data, including stopping direct marketing at any time;
• not be subject to decisions made only by automated means that significantly affect you;
• withdraw consent where we rely on it, without affecting what we did before; and
• complain to a regulator.

The quickest way to use them:

• Download your data: Account, Privacy, Download my data. You get a file with your account, purchases, viewing, list, follows, reminders and sign-in history.
• Delete your account: Account, Privacy, Delete my account.
• Correct your details: Account, Profile.
• Stop marketing emails: Account, Preferences, or the unsubscribe link in any email.
• Anything else: email support@ayawd.com. We may ask you to confirm your identity, and we reply within 30 days.

Children

AYawd is not for children under 13. If we learn that a child under 13 has created an account, we will delete it. If you are a parent or guardian and think this has happened, email support@ayawd.com.

Security

We protect your data with encryption in transit, one-way hashing for passwords, encryption for two-step sign-in secrets, access controls and audit logs for staff, and regular security reviews. If a breach puts your data at risk, we will notify the Information Commissioner within 72 hours and tell you when the law requires it.

Cookies

We use a small number of cookies and similar technologies, mostly to keep you signed in. See the Cookie policy.

Changes to this policy

We will update this policy when our practices change. If the changes are significant, we will tell you by email or on the site before they apply.

Contact and complaints

Email support@ayawd.com or write to the Data Protection Officer, Stream Events Jamaica Ltd., [registered office address], Kingston, Jamaica.

If you are not happy with our answer, you can complain to the Office of the Information Commissioner in Jamaica. In the United Kingdom you can contact the Information Commissioner's Office (ICO), and in the European Union the data protection authority in your country.