Privacy Policy

Effective date: 13 September 2026

Last updated: 13 September 2026

VENTIST ("VENTIST," "we," "us," or "our") respects your privacy and is committed to handling personal data fairly, lawfully, transparently, and securely.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you:

• visit www.ventist.com or pages and galleries operated through that website;
• use VENTIST CrewBoard at www.ventist.app;
• register for or serve at a VENTIST event;
• participate in our training, creative, media, ministry, or community activities; or
• otherwise communicate or interact with VENTIST.

This Policy is intended to reflect the requirements of Jamaica's Data Protection Act, 2020 and, where applicable, other privacy laws governing our activities.

1. Who is responsible for your data

The data controller is:

The Imaji Nation, Branding and Innovation Ltd., trading as VENTIST

Address: 7 Barbados Avenue, Kingston, Jamaica

Privacy email: yorkali@theimajination.com

Questions, complaints, or requests concerning personal data should be sent to the privacy email above.

2. Personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data.

Information you provide

• Identity and contact information: such as your name, email address, telephone number, and account details.
• Crew and event information: such as events you join, previous or preferred crew role, assigned team or role, attendance or sign-in status, whether you drive, whether you may need transportation, and related coordination notes.
• Account information: such as your email address, display name, authentication credentials, account role, and password-reset information. Passwords are processed through our authentication provider and are not intended to be visible to VENTIST administrators in readable form.
• Applications and communications: information you provide when joining the movement, applying for training, asking a question, responding to a survey, or communicating with us.
• Media and creative content: photographs, video, audio, testimonials, captions, project submissions, portfolio material, and other content created by you or captured at an event.
• Consent and preference information: such as communication choices, media permissions, privacy requests, and withdrawals of consent.
• Other information you voluntarily provide: including information contained in messages, forms, or documents you submit.

Information collected automatically

When you use our websites or applications, we and our service providers may automatically collect:

• IP address and approximate location derived from it;
• device, operating system, and browser information;
• pages viewed, referring pages, links clicked, timestamps, and session activity;
• diagnostic, security, performance, and error information; and
• cookie identifiers and information stored in your browser or local storage.

CrewBoard may use browser storage to remember an event sign-in, retain limited sign-in details on the device, and maintain an authenticated session. Anyone with access to that device or browser profile may therefore be able to see remembered information.

Images captured at events

VENTIST documents public and private events through photography, video, audio, and livestreaming. These recordings may contain a person's image, voice, name, performance, or participation. Where required, we will provide an event notice or obtain permission appropriate to the circumstances. A privacy policy does not replace a model release, performer agreement, or event-specific media consent where one is legally or contractually required.

Sensitive personal data

Because VENTIST is a Christian creative community, information you voluntarily provide—or the context of an event—may reveal or suggest religious beliefs or affiliation. We will process such information only where necessary and where permitted by law, including with explicit consent when required. Please do not provide sensitive personal data that we have not requested.

3. How we collect personal data

We may collect personal data:

• directly from you through forms, account registration, event sign-in, email, messages, surveys, or in-person interactions;
• from VENTIST administrators, event coordinators, team leaders, photographers, videographers, or authorised volunteers;
• from churches, ministries, event organisers, clients, or partner organisations involved in an activity;
• through our websites, applications, cookies, analytics, logs, and security tools; and
• from public sources or social platforms when you interact with VENTIST publicly.

If another person gives us information about you, that person should have authority to do so and should direct you to this Policy where appropriate.

4. Why we use personal data

We may use personal data to:

• operate, maintain, secure, and improve our websites, galleries, CrewBoard, and related services;
• create and manage crew accounts;
• register people for events and coordinate roles, teams, call times, transport, attendance, and event operations;
• communicate about events, assignments, training, projects, opportunities, and administrative matters;
• deliver workshops, mentorship, creative services, ministry activities, and community programmes;
• publish and manage event galleries, stories, promotional content, and archives;
• respond to enquiries, feedback, complaints, and data-protection requests;
• understand website use, diagnose faults, prevent abuse, and improve performance;
• maintain records, enforce agreements, establish or defend legal claims, and comply with legal obligations; and
• send promotional or community updates where you have consented or where otherwise permitted by law.

We do not intend to use your personal data for a materially different purpose without first giving you appropriate notice and, where required, obtaining your consent.

5. Our grounds for processing

Depending on the activity and applicable law, we process personal data on one or more of the following grounds:

• Consent: you have freely and specifically agreed to the processing, and may withdraw that consent.
• Performance of an agreement: processing is necessary to provide a service, administer an event, or fulfil an arrangement with you.
• Legitimate interests: processing is reasonably necessary to operate and protect VENTIST, coordinate teams, document our work, communicate with participants, or improve our services, provided those interests do not override your rights.
• Legal obligation: processing is necessary to comply with law, regulation, court process, accounting obligations, or lawful requests.
• Protection of vital interests or other lawful grounds: processing is necessary to protect someone in an emergency or is otherwise authorised by applicable law.

Where we rely on consent, withdrawing it will not affect processing that was lawful before the withdrawal. Some services may no longer be available if the relevant data is necessary to provide them.

6. Public information and galleries

VENTIST galleries and public-facing content may display event photographs, videos, names, credits, testimonials, performances, or other information intended for publication. Public content can be viewed, copied, reshared, indexed by search engines, or stored by third parties beyond VENTIST's control.

Public CrewBoard rosters are designed to show limited information, such as a crew member's first name and last initial, alongside a team role. Administrators and authorised coordinators may have access to additional information needed to manage an event.

If you have a reasonable privacy or safety concern about content featuring you, contact us using the details in section 1. We will assess the request promptly, taking account of applicable law, legitimate archival or journalistic interests, contractual rights, and the rights of others.

7. Cookies, analytics, and browser storage

Our services may use cookies, pixels, logs, and browser storage for:

• essential functions, authentication, navigation, and security;
• remembering a crew sign-in or user preference;
• measuring site traffic, page performance, and engagement; and
• detecting faults, fraud, abuse, or unauthorised access.

You can control cookies through your browser and may clear local storage or sign out to remove locally stored session information. Blocking essential storage may prevent parts of the services from working properly.

Where applicable law requires prior consent for non-essential analytics or advertising technologies, we will request it before activating those technologies. VENTIST does not currently state that it uses personal data for third-party behavioural advertising. If that changes, this Policy and the site's consent controls should be updated before such use begins.

8. When we share personal data

We may disclose personal data to:

• authorised VENTIST staff, administrators, team leaders, contractors, and volunteers who need it for their duties;
• churches, ministries, clients, venues, event organisers, or partner organisations where necessary to deliver a programme or event and where the disclosure is lawful;
• service providers that support hosting, databases, authentication, storage, email, analytics, security, forms, galleries, and technical operations;
• professional advisers, auditors, insurers, and legal representatives;
• regulators, law-enforcement bodies, courts, or other authorities where disclosure is legally required or reasonably necessary to protect rights, safety, or security; and
• a successor organisation in connection with a merger, restructuring, transfer, or sale of all or part of VENTIST's operations, subject to appropriate safeguards.

Our current technical environment includes cloud database, authentication, and storage services supplied through Supabase, along with infrastructure or content services that may be provided by Google and the website platform's analytics and hosting providers. External gallery links and social platforms operate under their own privacy policies.

We do not sell or rent personal data. We do not give contact information to unrelated third parties for their own direct marketing without consent.

9. International transfers

Some service providers may process or store personal data outside Jamaica. Where personal data is transferred internationally, we will take reasonable steps to ensure that the transfer is lawful and that the recipient provides an adequate level of protection or appropriate contractual, organisational, or technical safeguards. Where required, we may rely on your informed consent or another lawful exception.

10. How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including operational, legal, accounting, security, dispute-resolution, and archival needs.

Unless a longer period is required or justified:

• routine event sign-in and crew coordination records should normally be reviewed for deletion or anonymisation within 24 months after the event;
• inactive crew account records should normally be reviewed within 12 months after account closure or deactivation;
• routine enquiries and related correspondence should normally be reviewed within 24 months after the matter is closed;
• analytics and technical logs should be kept for the shortest period reasonably required for security and service improvement; and
• selected photographs, videos, programmes, credits, and historical records may be retained longer as part of VENTIST's legitimate creative, ministry, or organisational archive.

Backups may retain deleted information for a limited period until they are securely overwritten. We may anonymise information so that it can no longer identify you and retain that anonymised information for research, planning, or reporting.

11. Security

We use reasonable technical and organisational measures designed to protect personal data from accidental loss, destruction, damage, unauthorised access, misuse, alteration, or disclosure. Measures may include access controls, authentication, encrypted transmission, provider due diligence, backups, staff guidance, and restricted administrative privileges.

No online service is completely secure. You are responsible for using a strong, unique password, protecting your devices and account credentials, and notifying us promptly if you suspect unauthorised access.

If a personal-data breach creates a risk to affected individuals, we will investigate, mitigate the harm, and notify the Office of the Information Commissioner and affected individuals where required by law.

12. Your rights

Subject to applicable law and any lawful exemptions, you may have the right to:

• be informed about the processing of your personal data;
• request access to your personal data and receive a copy;
• request correction of inaccurate or incomplete data;
• request deletion, restriction, or cessation of processing in applicable circumstances;
• withdraw consent at any time;
• object to direct marketing;
• object to certain processing based on your particular circumstances;
• request that your data be transmitted to another data controller where applicable;
• receive information about the logic used in solely automated decisions and request human review; and
• complain to the relevant regulator.

To exercise a right, contact us using the details in section 1 and describe your request clearly. We may ask for information reasonably necessary to verify your identity and protect your data from unauthorised disclosure. We aim to respond within the period required by law; under Jamaica's Data Protection Act, access requests are generally to be addressed within 30 days, subject to lawful extensions or exceptions.

You may also complain to Jamaica's Office of the Information Commissioner through www.oic.gov.jm. We encourage you to contact us first so that we have an opportunity to address the concern.

13. Direct communications

We may send necessary operational messages about accounts, event assignments, security, or service changes. These messages are not promotional and may be required to provide the service.

We will send promotional emails, texts, or community announcements only where permitted by law. You may withdraw consent or opt out at any time by using the unsubscribe method provided or contacting us. Opting out of promotional messages will not stop necessary operational communications.

14. Children and young people

Our public website is intended for a general audience, while some VENTIST programmes or events may involve young people. We do not knowingly create a CrewBoard account for, or collect personal data directly online from, a child who cannot legally provide valid consent without the permission of a parent or guardian.

Where a minor participates in an event, training programme, gallery, interview, or media production, VENTIST will seek parent or guardian authorisation when required and will apply safeguards appropriate to the child's age and the activity. Parents or guardians may contact us about a child's information using the details in section 1.

15. Third-party websites and platforms

Our services may link to external galleries, social networks, churches, event partners, payment services, or other third-party websites. VENTIST does not control those services and is not responsible for their privacy practices. Review the privacy policy of each third party before providing information to it.

16. Automated decision-making

VENTIST does not currently intend to make decisions producing legal or similarly significant effects about individuals solely through automated processing. If we introduce such processing, we will provide any notice and safeguards required by law.

17. Changes to this Policy

We may update this Privacy Policy to reflect changes in our services, technology, operations, or legal obligations. The updated version will be posted on our website with a revised effective date. If a change materially affects how we use personal data, we will provide additional notice or obtain consent where required.

18. Contact us

For privacy questions, complaints, consent withdrawals, or requests to access, correct, restrict, or delete personal data, contact:

The Imaji Nation, Branding and Innovation Ltd., trading as VENTIST

Privacy email: yorkali@theimajination.com

Address: 7 Barbados Avenue, Kingston, Jamaica