PRIVACY POLICY
How we handle your information.
The Versatile Group of Companies is based in Barbados and works with clients, consultants and suppliers around the world. This policy explains what we collect, why, who we share it with, and the rights you have — wherever you are.
Effective 25 August 2026
1Who we are
The Versatile Group of Companies (“Versatile Group”, “we”, “us”) is a group of construction, residential development, millwork and interior-materials companies headquartered in Barbados, with offices in Guyana and Saint Lucia. The group includes Versatile Construction Inc, Versatile Homes Inc, The Furniture Boutique and Casa Bella Lux.
For the purposes of the Barbados Data Protection Act, the EU and UK General Data Protection Regulation and comparable laws, the data controller is:
Versatile Group of Companies
St. Patrick's, Christ Church, Barbados BB17074
info@versatilegroupbb.com · +1 (246) 428-8077
This policy covers this website and the enquiry, marketing and client-management activities carried out through it. It does not cover third-party websites we link to, which have their own policies.
2What we collect
Information you give us
Through our contact form, project enquiry form and newsletter sign-up:
- Contact details — name, organisation, role or position, email address, telephone number and country.
- Project details — sector, project stage, location, estimated timeline, budget band and any brief you choose to write.
- Marketing preferences — whether you opted in to receive news and project updates, and the date and time you did so.
- Correspondence — the content of emails, calls, WhatsApp messages and meetings relating to your enquiry, and internal notes our team records about it.
Budget band and project brief are optional. You can submit an enquiry without them, and doing so does not affect how we handle it.
Information collected automatically
- Attribution data — the website that referred you, the page you first landed on, and any campaign tags (UTM parameters) in the link you followed. This is held in your browser’s session storage for the length of your visit and attached to an enquiry only if you submit one.
- Analytics data — pages viewed, approximate location, device and browser type, and how you arrived, collected through Google Analytics. See our Cookie Policy.
- Security data — a one-way salted hash of your IP address and your browser user-agent string, recorded when a form is submitted, so we can stop automated abuse. We do not store the IP address itself.
Information from other sources
Where a member of our team logs an enquiry that reached us by telephone, WhatsApp, at an industry event or by professional referral, we record the same categories of information described above, together with who referred you if that is relevant.
What we do not collect
We do not ask for and do not want special-category information — health, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, sex life or sexual orientation — and we do not knowingly collect information from anyone under 16. Please do not send us such information. If you do, we may delete it.
We do not collect payment card details through this website. Project payments are handled separately under the terms of the relevant contract.
3Why we use it, and our lawful basis
Where the EU or UK GDPR applies to you, we must have a lawful basis for using your information. Ours are set out below. Where the Barbados Data Protection Act applies, the equivalent conditions for processing apply.
| What we do | Why | Lawful basis |
|---|---|---|
| Respond to your enquiry and route it to the right team | You asked us to | Steps prior to entering a contract; legitimate interests |
| Deliver and administer a project | To perform our agreement with you | Performance of a contract |
| Keep a record of the conversation in our CRM | So nothing is lost between contacts and we can serve you properly | Legitimate interests |
| Send marketing by email or SMS | To share group news, services and project updates | Consent, or legitimate interests for existing clients |
| Measure how the website is used | To improve the site and understand which channels work | Consent, where required; otherwise legitimate interests |
| Show advertising, including remarketing | To reach people likely to be interested in our work | Consent |
| Prevent spam, fraud and misuse | To keep the site and our data secure | Legitimate interests; legal obligation |
| Keep accounting, tax and contractual records | Because the law requires it | Legal obligation |
| Establish, exercise or defend legal claims | To protect the group’s legal position | Legitimate interests; legal claims |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights and concluded it is not. You may object at any time — see Your rights — and we will stop unless we have compelling grounds to continue.
4Marketing, email, SMS and remarketing
We may contact you with news about the group, services, completed projects and invitations. How we do that, and how you stop it, is set out here.
We send marketing email only where you have opted in, or where you are an existing or former client and the message concerns similar services — the “soft opt-in” recognised in several jurisdictions. Every marketing email carries a working unsubscribe link, and we act on unsubscribes promptly. Unsubscribing from marketing does not stop service messages about a live project or enquiry.
SMS, WhatsApp and telephone
Where you give us a mobile number and consent, we may send project updates or occasional marketing by SMS or WhatsApp. Message and data rates set by your carrier may apply. You can stop messages at any time by replying STOP, or by contacting us. We do not sell or share mobile numbers with third parties for their own marketing.
Advertising and remarketing
We may run advertising on search engines and social platforms, including remarketing — showing our advertising to people who have previously visited this website. Where remarketing or advertising cookies and similar technologies are used, they are set only with your consent where consent is required in your jurisdiction, and you can withdraw it at any time through our Cookie Policy.
Remarketing audiences are based on website activity, not on the content of your enquiry. We do not use budget bands, project briefs or any commercially sensitive detail you send us to target advertising, and we do not sell your personal information.
Withdrawing consent
You can withdraw marketing consent at any time by using the unsubscribe link in any email, replying STOP to a message, or writing to info@versatilegroupbb.com. Withdrawal takes effect on the record itself and does not affect the lawfulness of anything done before it.
5Who we share it with
We do not sell your personal information, and we do not share it for other organisations’ own marketing. We share it only as follows.
- Within the group — between Versatile Construction Inc, Versatile Homes Inc, The Furniture Boutique and Casa Bella Lux, where your enquiry concerns more than one of them.
- Service providers acting on our instructions, listed below.
- Professional advisers — lawyers, accountants, insurers and auditors, where they need it to advise us.
- Project partners — architects, engineers, subcontractors and suppliers, where necessary to price or deliver your project, and only to the extent needed.
- Authorities — where we are required to by law, court order or regulator, or where necessary to establish, exercise or defend legal claims.
- A buyer — if any part of the group is sold or reorganised, information may transfer with the business, subject to this policy.
Our service providers
| Provider | What it does | Where |
|---|---|---|
| Supabase | Database, sign-in and file storage for enquiry records | United States |
| Vercel | Website hosting and delivery | United States, global edge network |
| Resend | Sending transactional and notification email | United States |
| Website analytics and the map on our contact page | United States, global |
Each is engaged under a written agreement requiring it to act only on our instructions and to keep the information secure. We review this list as our systems change.
6International transfers
We are based in Barbados and work with clients across the Caribbean, North America, the United Kingdom, Europe and beyond. Your information will therefore be transferred to, and stored in, countries other than your own — principally the United States, where our hosting and database providers operate.
Data-protection laws in those countries may differ from those where you live. Where we transfer personal information out of the EEA, the United Kingdom or another territory with transfer restrictions, we rely on an appropriate safeguard, which will normally be the European Commission’s Standard Contractual Clauses (or the UK International Data Transfer Addendum), together with additional technical measures including encryption in transit and at rest and strict access controls.
You may request a copy of the safeguards we rely on by writing to info@versatilegroupbb.com.
7How long we keep it
| Information | Kept for |
|---|---|
| Enquiries that did not proceed | Up to 3 years from last contact, then deleted or anonymised |
| Client and project records | For the life of the project and then as required for contractual, insurance, warranty and limitation purposes — typically 7 years, longer for construction defects liability |
| Marketing consent records | For as long as you are subscribed, and for 3 years afterwards as proof the consent was given and withdrawn |
| Accounting and tax records | As required by Barbados law |
| Website analytics | Up to 14 months |
| Security and audit logs | Up to 2 years |
Where we no longer need information but cannot delete it immediately — for example because it sits in a backup — we isolate it and delete it when the backup cycle allows.
8How we protect it
Enquiry records are held in the group’s own database rather than a third-party marketing platform. Practical measures include:
- Encryption in transit (HTTPS) and at rest.
- Access limited to named members of staff by role, enforced at the database level rather than only in the interface.
- Commercially sensitive fields, such as budget bands, restricted to decision-makers.
- An audit log recording sign-ins, changes, reassignments and exports, with IP addresses stored only as a one-way hash.
- Accounts deactivated promptly when someone leaves.
No system is perfectly secure, and no transmission over the internet can be guaranteed. We cannot warrant absolute security, but we will notify you and the relevant authority of a personal data breach where the law requires it.
9Your rights
Depending on where you live, you may have some or all of the following rights. We apply them to everyone who asks, wherever you are, unless doing so would conflict with a legal obligation.
- Access — a copy of the personal information we hold about you.
- Correction — to have inaccurate information put right.
- Deletion — to have information erased where we no longer need it.
- Restriction — to limit how we use it while a question is resolved.
- Objection — to object to processing based on legitimate interests, and to direct marketing at any time and without reason.
- Portability — to receive certain information in a machine-readable format.
- Withdraw consent — at any time, without affecting what was done before.
- Complain — to your data-protection authority.
If you are in California, you may also request disclosure of the categories of personal information collected, used and disclosed, request deletion or correction, and opt out of any “sale” or “sharing” of personal information. We do not sell personal information and do not share it for cross-context behavioural advertising in the sense those terms are used under the CCPA/CPRA. We will not discriminate against you for exercising any right.
How to ask. Write to info@versatilegroupbb.com or to the postal address in clause 1. We will respond within one month, or sooner where the law requires, and will tell you if we need longer. We may ask for information to confirm your identity — we would rather do that than send your data to the wrong person. An authorised agent may act for you with written authority.
If you are unhappy with our response you may complain to the Data Protection Commissioner in Barbados, or to the supervisory authority in your country. We would appreciate the chance to resolve it with you first.
10Automated decisions
Enquiries submitted through this website are routed automatically to a member of our team based on the enquiry type or project sector you select, so that the right person sees it quickly. This is a routing step only. It does not produce a legal or similarly significant effect, does not decide whether we work with you, and every enquiry is reviewed by a person.
11Changes to this policy
We may update this policy as our services, systems or legal obligations change. The effective date at the top shows when it last changed. Where a change materially affects your rights we will take reasonable steps to bring it to your attention, and where the law requires it we will ask for fresh consent.
12Contact us
For any question about this policy, or to exercise a right:
info@versatilegroupbb.com
+1 (246) 428-8077
Versatile Group of Companies, St. Patrick's, Christ Church, Barbados BB17074
See also our Cookie Policy, Terms of Use and our Barbados Data Protection Act notice.
