How Attesta uses your data.

For renters: government ID, TRN, a selfie, and proof of income. For landlords: title or rates bill and a property tax receipt. For realtors & PMs: licence and proof of standing. Each is processed on the basis of your explicit consent plus performing the service you signed up for. We record a lawful basis per processing activity.

Counterparties (landlords, realtors, PMs) receive verification outcomes only, never documents. Trained Attesta reviewers access documents briefly to verify them. We use a small set of trusted processors under written agreements; you can request the current list from our Data Protection Officer.

Your payslips, bank statements and ownership documents are deleted automatically after review (typically within 7 days), enforced by an automatic disposal job. Fraud-prevention retention: to help prevent rental and real-estate fraud and to assist lawful investigations, we keep a sealed copy of your identity verification records (your government ID and proof of address) for twelve months after they would otherwise be deleted. This sealed copy is held separately from the active service, with restricted access and a record of every access, and it is deleted automatically at the end of that period. Your selfie / facial image is biometric data kept on the same fraud-prevention basis for a bounded period, up to 24 months from upload, after which it is automatically erased. It is never shown to landlords. Your Passport outcome lasts until its expiry date, then is deleted or anonymised.

Some providers are located outside Jamaica. We apply written data-processing agreements and transfer safeguards, and can provide the location of each provider on request.

Access, portability, rectification, erasure, objection and restriction, exercise any of them, identity-checked, from Your data & rights. You can also object to a solely-automated outcome and ask for a human review. When you delete your account we erase your live data; as described above, a limited sealed copy of your identity records is kept for the bounded period for fraud prevention and to meet legal obligations, then automatically deleted.

Our Data Protection Officer is Micah Brown, reachable at dpo@attestajm.com; for general data queries, email dpo@attestajm.com. You have the right to complain to the Office of the Information Commissioner (Jamaica).