Legal

Privacy Policy

This policy explains what personal information NTech Ltd. collects when you visit ntechbahamas.com, when you use the NTech IoT Connect platform at connect.ntechbahamas.com, or when our connected devices send data on your behalf — and what we do with that information.

Effective date

14 May 2026

Version

1.0

Governing law

Commonwealth of The Bahamas

1. Who we are

NTech Ltd. (also trading as NTech, NTech Bahamas, and NTech Automation Systems — collectively "NTech", "we", "us", "our") is a Bahamian technology company founded in 2019 that designs, deploys, and operates LoRaWAN sensor networks, smart meters, and the NTech IoT Connect cloud software.

For the purposes of this policy, NTech is the data controller for personal information collected through ntechbahamas.com, IoT Connect, and our notification systems, except where we act as a data processor on behalf of an enterprise customer (for example, when one of our utility clients owns the underlying meter data and uses NTech only to host and transmit it). Where NTech acts as a processor, the data controller's own privacy policy governs how the data is used; this policy still describes how we secure and handle that data on the controller's behalf.

2. Information we collect

We only collect the information we need to operate our website, provide the IoT Connect service, deliver notifications you have asked for, and meet our legal and contractual obligations.

2.1 Information you give us directly

• Contact details — name, company, role, email address, mailing address, and phone number, when you submit a contact form, request a quote, sign a proposal, or open an IoT Connect account.
• Account credentials — username and a hashed password (we never store passwords in plain text) for IoT Connect logins.
• Recipient phone numbers for notifications — the mobile number(s) you (or an authorised account administrator) enter to receive billing summaries and device alerts via WhatsApp or SMS.
• Billing details — invoicing address, tax identifiers, and (where applicable) credit-card or bank-payment information collected by our regulated payment processor on our behalf. NTech does not store full card numbers on its own systems.
• Communications — the content of emails, WhatsApp messages, support tickets, and call notes you send us.

2.2 Information our devices and software collect automatically

• Sensor telemetry — readings produced by NTech-managed devices on your premises (e.g. tank levels, water and electricity consumption, temperature, humidity, GPS location of mobile assets, gateway uptime). This data is associated with the device serial number and the customer account that owns the device.
• Network metadata — LoRaWAN signal strength (RSSI / SNR), data rate, gateway identifiers, and timestamps used to operate and troubleshoot the network.
• IoT Connect activity — your login times, the devices and dashboards you view, and configuration changes you make (kept as an audit log so account administrators can investigate disputes).
• Website usage — IP address, browser type and version, referring URL, pages viewed, and approximate location derived from IP, collected through standard web server logs and the cookies described in section 7.

2.3 Information from third parties

• Delivery receipts and engagement events from our messaging partner (Sent.dm) telling us whether a WhatsApp or SMS notification was queued, delivered, read, or failed for a given recipient.
• Payment confirmation, dispute, and chargeback notifications from our payment processor.
• Where you have signed a proposal as the representative of an enterprise customer, the contact details that customer supplies us in connection with the engagement.

3. How we use your information

We use the information described above only for the following purposes:

• To deliver the IoT Connect service — ingest sensor data, render dashboards, run alert rules, and operate the underlying LoRaWAN network.
• To send the notifications you have asked for — monthly billing summaries, real-time device alerts, service notices, and one-time passcodes (see section 4).
• To bill for our services — generate invoices, take payment, issue receipts, and pursue overdue accounts.
• To respond to your enquiries and support requests — including troubleshooting devices, restoring access, and processing change requests.
• To improve our products and operations — analyse aggregated, de-identified usage patterns to plan capacity, improve dashboards, and prioritise new features.
• To meet legal, tax, and regulatory obligations — including book-keeping, anti-fraud checks, and responding to lawful requests from Bahamian authorities.
• To protect our network and customers — detect and block abuse, unauthorised access, denial-of-service activity, and other security threats.

Our lawful bases for processing are: contract performance (operating the service you have signed up for), consent (notifications, optional cookies), legitimate interest (security, fraud prevention, product improvement), and legal obligation (tax, accounting, lawful requests).

4. WhatsApp & SMS notifications

NTech sends transactional and service messages to phone numbers that have been provided to us with explicit consent. We use Sent.dm as our messaging gateway; Sent.dm in turn relies on WhatsApp Business Platform (Meta) and local SMS carriers to deliver the messages.

4.1 How a number is added to our notification list

1. You enter the number during account onboarding in IoT Connect and tick a checkbox confirming you consent to receive automated messages from NTech relating to that account.
2. You list the number on a signed installation order, work order, or proposal, with a clear note that the number will receive device alerts and billing notifications.
3. You reply START, YES, SUBSCRIBE, JOIN, or OPTIN to a previous NTech message, which resubscribes a number that had been removed.

4.2 What recipients receive

• Monthly billing summaries (one message on or about the 1st of each month) showing usage totals and amount due, with a link to view or pay the invoice.
• Real-time device alerts when a sensor crosses a customer-configured threshold (tank low/high, leak detected, gateway offline, EV-charger fault, temperature excursion, mains-power loss, etc.). Frequency depends on your own threshold configuration.
• Service notices about scheduled maintenance, firmware updates, and platform changes that affect your devices.
• One-time passcodes and account-verification codes when you request them from a login or onboarding screen.

4.3 What we will not use your number for

• We will not sell, rent, or share your phone number with third-party marketers.
• We will not use your number for unsolicited promotional or marketing messages from NTech.
• Mobile information (phone numbers, opt-in status, message content) is not shared with third parties or affiliates for marketing or promotional purposes. This restriction is independent of any other consent you may have given for non-mobile communications such as email newsletters.

4.4 Stopping or pausing notifications

You can opt out at any time, free of charge, by replying STOP, UNSUBSCRIBE, or CANCEL to any NTech message. We will send one final confirmation message and then stop sending notifications to that number until it is resubscribed.

For help, reply HELP to any NTech message, email [email protected], or call +1 (242) 816-0298.

Message frequency varies. Standard messaging and data rates may apply (carrier dependent). NTech does not charge for the messages themselves.

5. Sharing & service providers

NTech does not sell personal information. We share it only with the following categories of recipient, and only to the extent necessary for them to perform their function for us:

Each provider is bound by a written agreement to handle the data only on our instructions, to protect it with appropriate security measures, and to delete or return it when we end the relationship.

6. International transfers

NTech is based in The Bahamas, but several of the providers listed in section 5 are headquartered overseas (Sent.dm in the United States, Datacake in Germany, Make.com in the European Union, Zoho in the United States and India, WhatsApp Business Platform in the United States, and so on). Operating the IoT Connect service therefore involves transferring some personal information outside The Bahamas.

Where this is the case, we rely on the recipient's published privacy framework (for example, GDPR-aligned data processing addenda for EU-hosted providers, and Standard Contractual Clauses where appropriate) to ensure that your information receives a comparable level of protection to that required under the Bahamas Data Protection (Privacy of Personal Information) Act, 2003.

7. Cookies & analytics

ntechbahamas.com uses a small number of cookies and similar technologies:

• Strictly necessary cookies — remember your colour-mode (dark/light) preference and keep your session active when you submit the contact form. These cannot be turned off.
• Performance cookies — aggregate, anonymous statistics about how visitors use the site so we can fix broken pages and improve content. Set only where the law permits or where you have consented.

We do not currently use third-party advertising or cross-site tracking cookies on this website. If that ever changes, this policy will be updated and (where required by law) we will request your consent before any such cookies are set.

You can clear or block cookies in your browser settings. Doing so may break parts of the site that depend on strictly-necessary cookies (for example, the contact form's spam protection).

8. Data retention

• Sensor telemetry: retained for the life of the customer's IoT Connect subscription, plus a 12-month grace period for historical reporting after termination.
• Account and contact records: retained while the account is active and for up to 7 years after termination to satisfy Bahamian accounting and tax obligations.
• Invoices and payment records: retained for at least 7 years.
• Notification opt-out records: retained indefinitely so that a number that has unsubscribed is never re-contacted in error.
• Web server logs: retained for 90 days, then automatically purged.
• Support tickets and email correspondence: retained for 3 years from the last contact.

9. Security

We protect your information with technical and organisational measures appropriate to the risk, including:

• HTTPS encryption in transit on ntechbahamas.com, IoT Connect, and all integrations between platform components.
• Encryption at rest for hosted databases and backups operated by our infrastructure providers.
• Role-based access control inside IoT Connect, with least-privilege defaults for staff.
• API keys and credentials stored in secret vaults (never in source control).
• Audit logging of administrator actions for forensic review.
• Documented incident-response procedures for suspected data breaches.

No system is perfectly secure. If we become aware of a personal-information breach that is likely to result in material harm to affected individuals, we will notify those individuals and any relevant authority without undue delay, in line with applicable law.

10. Your rights

Subject to The Bahamas Data Protection (Privacy of Personal Information) Act, 2003 and any other applicable law, you have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or out of date.
• Delete information that we no longer have a lawful reason to keep (subject to retention requirements set out in section 8).
• Withdraw consent for any processing that relies on your consent — including stopping notifications at any time as described in section 4.4.
• Object to processing that we carry out on the basis of legitimate interest.
• Lodge a complaint with the Office of the Data Protection Commissioner of The Bahamas if you believe we are not handling your information lawfully.

To exercise any of these rights, email [email protected]. We will respond within 30 days and may need to verify your identity before acting on your request.

11. Children's privacy

IoT Connect is a business-to-business service intended for use by adults acting on behalf of an organisation. We do not knowingly collect personal information from anyone under 18. If you believe a minor has supplied us with personal information, please contact us and we will delete it.

12. Third-party links

Our website and notifications occasionally link to third-party sites (for example, supplier datasheets, payment gateways, or social media). NTech is not responsible for the privacy practices of those sites; please review their own privacy notices before submitting personal information to them.

13. Changes to this policy

We may update this policy from time to time to reflect changes to our service, our partners, or applicable law. The current version, effective date, and version number are shown at the top of this page. If a change is significant we will give registered IoT Connect account holders reasonable advance notice by email or in-app notice before the new policy takes effect.

14. How to contact us

If you have a question about this policy, want to exercise any of the rights described in section 10, or believe your information has been mishandled, please get in touch:

This policy works alongside our Terms & Conditions. Together they govern your use of ntechbahamas.com and the NTech IoT Connect service.