Privacy policy
What we collect through this website, why, where it’s stored and the choices you have.
Last updated
Who we are
Indie & Cooperatives (“Indie & Co.”, “we”, “us”) is a digital marketing agency in Trinidad and Tobago. We provide website design, SEO, advertising and related services. This policy covers this website, its forms, the free website check and the Business Portal used by our team and referral partners.
What we collect
Information you give us
- Free audit and enquiry form: your name, business name, phone/WhatsApp number, and optionally your email, website address, industry, budget range, timeline, preferred contact method, the partner who referred you and any message you write.
- Partner applications: your name, WhatsApp number, email address, how you plan to refer clients and any notes.
- Business Portal accounts: for approved partners, your name, email, WhatsApp number, optional photo and a password (stored only as a one-way hash), plus records of referrals and commissions.
Information collected automatically
- Abuse protection: to stop spam and password-guessing, we keep a temporary, one-way hashed identifier derived from your connection’s IP address with a counter. It cannot be turned back into your IP address and is deleted automatically, normally within 24 hours.
- Server logs: our host, Cloudflare, processes technical request data (such as IP address, browser type and the page requested) to deliver and secure the site.
- Analytics: only if we have turned it on and you choose “Allow analytics”. See Cookies.
We don’t collect payment card details on this website.
The free website check
When you use the website check, we fetch the public home page of the address you enter and analyse it. We do not store the address or the results on our servers. Your browser keeps the score for the current tab so we can pre-fill the audit form if you choose to request one.
How we use it
- To reply to your enquiry, prepare your audit or quote and deliver services you ask for;
- To review partner applications, run the partner programme and calculate commissions;
- To operate and secure the Business Portal;
- To prevent spam, fraud and abuse of our forms;
- To meet legal, tax and accounting obligations.
We don’t sell, rent or trade personal information, and we don’t use it for automated decision-making.
Consent and legal basis
Our forms ask for your consent before we contact you. You can withdraw consent at any time by emailing us; we’ll stop contacting you about that request. We also process information where it’s needed to perform a contract with you, to keep the site secure (our legitimate interest), or where the law requires it.
Who we share it with
We use a small number of service providers who process data on our behalf under their own security and privacy commitments:
| Provider | What for |
|---|---|
| Cloudflare (Workers, D1 database, R2 storage, optional Web Analytics) | Hosting the website, storing form submissions, portal data, uploaded images and encrypted daily backups. |
| Google Fonts | Delivering the typefaces used on this site. Your browser requests font files from Google, which receives your IP address. |
| WhatsApp (Meta) | Only if you choose to message us on WhatsApp, under Meta’s own terms. |
Cloudflare and Google may process data outside Trinidad & Tobago, including in the United States. We may also disclose information if required by law.
Storage and security
Data is encrypted in transit (HTTPS) and at rest by Cloudflare. Portal sign-in is checked on our server; passwords are stored only as salted PBKDF2 hashes, sessions use secure, HttpOnly cookies, sign-in attempts are rate-limited, and partners can see only the enquiries credited to them (business name, service, date and status, without contact details). No method of storage or transmission is completely secure, but we take reasonable, industry-standard steps to protect your information.
How long we keep it
- Enquiries that don’t become clients: up to 24 months, then deleted.
- Client records: for the length of the relationship and up to 7 years afterwards for accounting and tax purposes.
- Partner records: for the length of the partnership and up to 7 years afterwards for commission records.
- Abuse-protection counters: normally under 24 hours.
- Database backups: kept for 30 days, then deleted automatically.
Your choices and rights
You can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct anything inaccurate;
- delete your information, unless we must keep it by law;
- stop contacting you.
Email [email protected]. We’ll confirm your identity and respond within 30 days.
Trinidad and Tobago’s Data Protection Act, 2011 is only partly in force. We follow its general privacy principles as good practice and will update this policy as further provisions take effect.
Children
Our services are for businesses. We don’t knowingly collect information from anyone under 18. If you believe a child has sent us information, contact us and we’ll delete it.
Changes to this policy
We’ll update this page when our practices change and show the date at the top. Significant changes will be highlighted on this page.
Contact
- Email: [email protected]
- Phone / WhatsApp: +1 (868) 776-4699
- Location: Trinidad & Tobago
See also our terms and cookie policy.