Privacy Policy

Who we are

The platform is provided by ShipSmith Group. We act as the data controller for the account and marketplace data described below. Where a surveyor or customer processes data they receive through the platform for their own purposes (for example, a surveyor using your vessel details to carry out a survey), each party is an independent controller of that data.

Data we collect

• Account and profile data — name, email, phone number, password and authentication identifiers, role (customer or surveyor), and, for surveyors, professional details such as headline, experience, certificates of competency, qualifications, base port, languages and the survey types you offer. Authentication is handled by our identity provider (Clerk).
• Vessel and survey details — the vessel, port, dates, survey type and any special requirements you submit when requesting or quoting on a survey.
• Uploaded documents — files you attach to a request, quote, certificate upload or survey report (for example, photos, prior reports, class certificates or proof of credentials).
• Booking, payment and invoice data — quotes, bookings, schedules, invoices and transaction records. Card and bank details are handled by our payment processor; we do not store full payment-card numbers.
• Communications — messages exchanged between customers and surveyors through the platform, and support requests you send us.
• Usage and device data — log data, device and browser information, IP address, and cookies or similar technologies used for authentication, functionality and analytics. See our Cookie Policy for detail.

How we use your data

• To create and manage your account and verify surveyor credentials.
• To match survey requests with relevant surveyors and enable quoting, booking, scheduling, reporting and invoicing.
• To process payments and issue invoices and receipts.
• To operate, secure and improve the platform, prevent fraud and abuse, and provide customer support.
• To send service messages and, where permitted, relevant product updates (you can opt out of marketing at any time).
• To comply with legal, accounting and regulatory obligations.

How we share your data

We do not sell your personal data. We share it only as needed to run the marketplace:

• Between matched customers and surveyors — when you request a survey, relevant surveyors receive the details needed to quote; when you book, the chosen surveyor receives the information needed to carry out the survey, and you receive the surveyor's profile and contact details.
• Service providers — our authentication provider, payment processor, email and messaging providers, cloud hosting and storage, and analytics tools, each acting under contract and only on our instructions.
• Legal and safety — where required by law, to enforce our terms, or to protect the rights, safety and property of users and the public.
• Business transfers — in connection with a merger, acquisition or reorganisation, subject to this policy.

International transfers

BMS serves customers and surveyors globally, so your data may be processed in countries other than your own, including India where ShipSmith Group operates. Where we transfer data across borders, we use appropriate safeguards consistent with applicable law.

Storage, security and retention

We store data on reputable cloud infrastructure and apply technical and organisational measures — encryption in transit, access controls and least-privilege handling of uploaded documents — to protect it. No system is perfectly secure, so we cannot guarantee absolute security.

We retain personal data for as long as your account is active and as needed to provide the service, then for the periods required to meet legal, tax, accounting and dispute-resolution obligations. We delete or anonymise data when it is no longer required.

Your rights

Depending on where you live, you may have rights to access, correct, update, delete, restrict or object to certain processing of your personal data, to withdraw consent, and to data portability. We honour these requests in line with the India Digital Personal Data Protection (DPDP) Act, the EU/UK GDPR and other applicable laws.

• Access and correction — view and update most data directly in your account settings, or ask us to correct it.
• Deletion — request deletion of your account and associated personal data, subject to records we must retain by law.
• Consent and marketing — withdraw consent or unsubscribe from marketing at any time.
• Grievance and complaints — raise a concern with us; if unresolved, you may approach the relevant data-protection authority.

Children

The platform is intended for business and professional use and is not directed to children. We do not knowingly collect data from anyone under the age required by applicable law to enter into a contract.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with a revised "Last updated" date, and where appropriate we will notify you.

Contact us

For privacy questions or to exercise your rights, contact our team at [email protected]. Please include enough detail for us to locate your account and verify your identity.