Card Crafters Limited · Established 2024 · Republic of Trinidad & Tobago. This policy outlines our data handling practices across digital gift cards, streaming subscriptions and personal shopping concierge services, and utility bill settlement once it opens.
Effective date: October 24, 2024 · Last revised: October 2026
1. Who We Are
Card Crafters Limited ("Card Crafters", "we", "us", or "our") is a digital services startup incorporated under the laws of the Republic of Trinidad & Tobago. We provide an online platform enabling customers in Trinidad & Tobago and the wider Caribbean to purchase digital gift cards, manage customer-owned streaming credit, facilitate local utility bill settlements, and access personal shopping concierge services paid conveniently in Trinidad & Tobago Dollars (TTD).
2. Information We Collect
We collect only the information necessary to provide, secure, and deliver the specific services you request:
Account & Contact Details: Name, email address, WhatsApp or telephone number, and communication preferences.
Order-Specific Information:
Digital Gift Cards: Selected storefront region (e.g. US, Canada, UK) and recipient email/WhatsApp delivery address.
Streaming Credit: Registered account email/region for compatible customer-owned gift card application. We never ask for or store your personal streaming passwords or OTP verification codes.
Bill Payments: Utility provider name (T&TEC, WASA, Flow, Digicel, bmobile) and associated customer account/meter numbers.
Personal Shopping: Product URLs, specifications (size, color, model), declared values, and physical delivery address in Trinidad & Tobago.
Payment Verification Data: Bank transfer screenshots, transaction reference numbers, and timestamps submitted to verify local settlements. We do not store your private banking login credentials.
Technical & Security Data: IP address, device type, browser information, and non-identifying telemetry used exclusively for fraud detection, bot mitigation, and site reliability.
3. What We Never Collect
Card Crafters upholds strict data minimization. We do not collect, request, or retain:
Your online banking passwords, PINs, or security tokens.
Your third-party streaming, gaming, or email account passwords.
Full payment card numbers on our local databases (card transactions are processed directly by certified, PCI-compliant payment gateways).
4. How We Use Your Data
Your personal data is processed strictly for legitimate operational purposes:
Fulfillment: Delivering digital codes, crediting customer accounts, submitting utility payments, or purchasing and dispatching concierge shopping goods.
Direct Communication: Sending order confirmations, receipt proofs, delivery notifications, and status updates via WhatsApp and email.
Fraud Mitigation & AML Compliance: Verifying high-value or unusual transactions against anti-fraud screening protocols and regulatory compliance standards in Trinidad & Tobago.
Legal & Tax Obligations: Maintaining statutory accounting, invoice, and reconciliation records in accordance with Trinidadian corporate laws.
5. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data to any marketing third parties. Data is shared solely with vetted partners required to execute your transactions:
Utility & Service Providers: Transmitting your account number and bill amount to entities such as T&TEC, WASA, Flow, Digicel, or bmobile solely to settle your bill.
Logistics & Shipping Couriers: Providing delivery name, phone number, and physical street address to freight forwarding and local courier services for personal shopping packages.
Payment Processors & Financial Institutions: Bank transfer verification through our local banking partners (e.g. First Citizens) and certified digital wallet processors (e.g. EndCash).
Legal Authorities: Only when strictly required by a court order, lawful subpoena, or applicable Trinidad & Tobago financial regulatory investigation.
6. Third-Party Brand Trademarks
All brand names, logos, registered trademarks, and product names (including Netflix, PlayStation, Xbox, Steam, Amazon, Apple, Flow, T&TEC, WASA, etc.) displayed on this website are the property of their respective owners. Their display serves solely to identify the goods and services facilitated by Card Crafters. Card Crafters Limited is an independent service provider and is not directly affiliated with, sponsored by, or endorsed by these brand owners unless expressly stated.
7. Data Retention & Security
We implement industry-standard encryption (TLS/HTTPS), role-based access control, and secure cloud storage to protect your personal details against unauthorized access, loss, or alteration. Order records, transaction timestamps, and payment proofs are retained for the statutory period required under Trinidad & Tobago tax regulations (typically 6 years), after which they are securely archived or purged.
8. Cookies and Analytics
We use privacy-preserving, first-party performance analytics (Vercel Web Analytics and Speed Insights) to evaluate aggregate site traffic and diagnose technical bottlenecks. These tools do not profile your browsing history across third-party websites and do not install persistent cross-site tracking cookies.
9. Your Privacy Rights
As a valued customer, you have the right to:
Request a copy of the personal information Card Crafters holds about you.
Request correction of any incomplete, inaccurate, or outdated information.
Request erasure of your personal data where retention is not required by tax, financial, or anti-fraud legal mandates.
Opt out of any non-essential service announcements.
10. Contact Our Privacy Team
To exercise your rights or if you have any questions or feedback regarding this Privacy Policy, please reach out directly:
