Policy

Privacy and mail-handling policy

Last updated 26 October 2026

The Business Loft holds other people’s correspondence and routes their business calls. This page says what we collect, who we share it with, how we handle your mail, and how to reach us about any of it.

Who we are

The Business Loft, Lot 43 Croal Street, Stabroek, Georgetown, Guyana. Email support@bizloftgy.com, phone (+592) 225-1164, mobile or WhatsApp (+592) 739-7855.

What we collect, and why

  • When you start a plan: your name, business name, email, mobile number, postal address and a password you choose. We need these to open your mailbox account, tell you when mail arrives and bill you.
  • Identification: one photo ID and one proof of address. We are required to know who holds an address with us, and we keep these for as long as the law requires after your plan ends.
  • When you apply for the Business Registration package: your name and contact details, and the documents you upload — the completed Business Registration Application Form (with the particulars the Business Names (Registration) Act requires, such as your nationality, residence, date of birth, ID and TIN numbers), your signed letter of authorisation, and scans of your ID or passport and TIN certificate. We use these only to file your registration with the Deeds and Commercial Registries Authority, to apply for your GRA and NIS compliance certificates, to contact you about them, and to meet our own identification duties.
  • When you apply to incorporate a company: the proposed company name and business, and for each shareholder, director and company secretary named: full name, address, role, shareholding and a scan of their ID or passport, plus your contact details. We use these only to prepare and file the incorporation and to meet our identification duties. Please make sure everyone you name has agreed to their details being shared with us.
  • When you book the meeting room: your name, contact details, booking times and any set-up notes, so the room is ready and reception can greet your guests.
  • Your mail and calls: a log of each item received (sender, date, type), scans you ask for, and messages taken on your line.
  • Technical data: our hosting provider keeps short-lived server logs (such as IP address and time of request) to keep the site secure. We also measure how this website is used and how our advertising performs, which involves cookies — see Cookies, analytics and advertising below.

Who we share it with

We use a small number of service providers, each only for the job described:

  • SphereMail — runs the online mailbox account where you see your mail, upload documents and pay for your plan. You sign up for a plan directly on the SphereMail portal.
  • OfficeRnD — runs our meeting-room booking page and checkout.
  • Card payment processors used by SphereMail and OfficeRnD. Card numbers are entered on their secure pages; they never pass through this website and we never see them in full.
  • Netlify — hosts this website.
  • Google — registration and incorporation applications and the documents you upload are stored in our private Google account (Google Sheets and Google Drive), which only authorised Business Loft staff can open. The website itself keeps no copy.
  • Our partner attorney-at-law — company incorporation is offered through our partnership with an external attorney-at-law, who receives your incorporation details and documents to prepare and file them.
  • Deeds and Commercial Registries Authority (DCRA) — receives your registration or incorporation particulars when we file them. The Guyana Revenue Authority (GRA) and National Insurance Scheme (NIS) receive the details and documents needed for your compliance certificate applications, as the law requires.
  • Google and Meta (Facebook) — receive information about visits to this website through the measurement tools described under Cookies, analytics and advertising. This covers pages viewed on this site only. Your mail, your documents and your account details are never sent to them.

We don’t sell your information and we don’t use your mobile number for marketing. We disclose information to authorities only where the law requires it.

Cookies, analytics and advertising

This website sets no cookies of its own. It does load two measurement tools, which set cookies in your browser:

  • Google Analytics, loaded through Google Tag Manager — tells us how many people visit, which pages they read, and which search or advert brought them here. It sets cookies whose names begin _ga, which recognise a returning browser for up to two years.
  • Meta Pixel — measures how our Facebook and Instagram advertising performs and lets us show adverts to people who have already visited this site. It sets the _fbp cookie, and _fbc if you arrive by clicking one of our adverts, and it tells Meta that the visit happened.

These are analytics and advertising tools. They are not needed for the site to work, and blocking them costs you nothing here: you can refuse or delete these cookies in your browser settings, or turn on your browser’s tracking protection, and every page, form and booking link will still work normally. We don’t use these tools to identify you by name, and nothing you send us as a client — your mail, your uploaded documents, your account details — is shared with them.

How we handle your mail

  • Every item is logged and kept secure the day it arrives, and you are notified the same day.
  • We do not open your mail unless you have asked us to scan it.
  • Mail is released only to you, or to someone you have named in writing, against photo identification.
  • On Virtual Office Plus, letters from the Deeds Registry, GRA or NIS are flagged and escalated to you within four working hours.
  • When a plan ends, we hold any remaining mail for 30 days for collection or forwarding at cost, then return it to sender.

How long we keep it

Account and billing records: for the life of your plan and as long afterwards as tax and anti-money-laundering rules require. Mail logs and scans: for the life of your plan plus twelve months. Business registration and incorporation applications and documents: for as long as you are a client and as long afterwards as anti-money-laundering and record-keeping rules require; if we don’t file your application, we delete them within six months. Meeting-room bookings: two years. Server logs: a few weeks.

Your choices

You can ask for a copy of the information we hold about you, ask us to correct it, or ask us to delete what we are not required to keep. Email support@bizloftgy.com and we will reply within 30 days.

Security

This site is served only over HTTPS. Plan passwords are created on the SphereMail portal and never pass through this website. Staff access to your records and your mail is limited to the people who need it to serve you.

Changes

If we change this policy in a way that matters, we will tell current clients by email before the change takes effect.