📄 1. Introduction

At Marine One (Pvt) Ltd (“the Company,” “we,” “us,” or “our”), we understand that in the global maritime industry, the confidentiality of your commercial operations, vessel movements, and personnel data is just as critical as the physical security of your ships.

This Privacy & Data Protection Policy outlines how we collect, process, safeguard, and disclose your information when you access our website (marinelanka.com), communicate with our operations desk, or engage our port agency and maritime logistics services.

By accessing our website or utilizing our services, you acknowledge and consent to the stringent data practices described in this policy. We operate in full compliance with the Sri Lanka Personal Data Protection Act (PDPA) No. 9 of 2022 and align our digital security practices with international frameworks, including the GDPR, to serve our global maritime principals.

🗂️ 2. Information We Collect

To facilitate seamless port operations and provide a highly functional digital experience, we collect specific categories of data. We strictly limit collection to what is operationally or legally necessary.

• Identity & Corporate Data: Names, job titles, company names, vessel names, and IMO numbers provided during inquiries or account setups.
• Contact Data: Email addresses, phone numbers, WhatsApp contact details, and corporate billing addresses.
• Operational & Personnel Data (Service Provision): When executing crew changes, security embarkations, or port clearances, we may securely process crew lists, passport details, seaman books, and medical declarations strictly for submission to local immigration and port health authorities.
• Technical & Usage Data: IP addresses, browser types, time zone settings, geographic location, and usage patterns automatically collected via cookies when you interact with our web platform.

⚙️ 3. How We Use Your Information

We process your data based on legitimate business interests, the fulfillment of maritime agency contracts, and strict compliance with national and international maritime laws. Your data is used to:

• Execute Port Operations: To coordinate ship spares clearance, crew logistics, bunkering, and protective agency services directly with local port authorities.
• Financial Processing: To generate accurate Proforma Disbursement Accounts (PDAs), process payments, and maintain transparent financial ledgers.
• Client Communication & Support: To provide 24/7 operational updates, respond to urgent technical inquiries, and issue voyage tracking alerts.
• Security & Fraud Prevention: To monitor our digital platforms for unauthorized access, fraudulent activity, and to ensure the cybersecurity of our communications.
• Marketing (With Consent): To send relevant industry updates, regulatory changes at Sri Lankan ports, or service expansions. You may opt out of these communications at any time.

🤝 4. How We Share Your Information

Marine One will never sell, rent, or trade your commercial or personal data. We operate under strict confidentiality agreements. Information is only shared in the following limited, highly vetted circumstances:

• Government & Port Authorities: We are legally obligated to share necessary vessel, cargo, and crew data with the Sri Lanka Ports Authority (SLPA), Sri Lanka Customs, Immigration, and the Ministry of Defense to secure your legal clearances and permits.
• Vetted Service Providers: We may share restricted data with trusted third-party vendors (e.g., secure payment gateways, cloud hosting providers, or our licensed launch boat operators) who are bound by strict non-disclosure agreements (NDAs) to assist in service delivery.
• Legal & Regulatory Compliance: We may disclose information if required by applicable law, international maritime court orders, or verified government regulations.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your protected information may be transferred strictly as a continued business asset under the same privacy guarantees.

⏳ 5. Data Retention

We do not hold your data indefinitely. Marine One retains personal and commercial information only for as long as necessary to fulfill the operational purposes outlined in this policy, or as mandated by statutory maritime and tax laws (e.g., customs audit requirements or financial archiving).

Once the retention period expires, your data is securely and permanently deleted or irreversibly anonymized.

⚖️ 6. Your Global Privacy Rights

Under applicable data protection frameworks (including the Sri Lanka PDPA and aligned international standards), you possess robust rights regarding your data:

• Right to Access: You may request a comprehensive copy of the personal or corporate data we hold regarding your fleet or personnel.
• Right to Rectification: You may request immediate correction of any inaccurate or incomplete data in our systems.
• Right to Erasure (Right to be Forgotten): You may request the deletion of your data, provided there is no overriding legal or maritime regulatory requirement for us to retain it.
• Right to Object: You may object to the processing of your data for specific purposes, including direct marketing.
• Right to Withdraw Consent: Where operations rely on your consent, you may withdraw it at any time, without affecting the lawfulness of processing conducted prior to your withdrawal.

To exercise any of these rights, please contact our Data Protection Officer at info@marinelanka.lk.

🔒 7. Data Security Infrastructure

The confidentiality of your vessel movements and crew data is a critical security imperative. Marine One implements enterprise-grade technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

This includes encrypted communication channels, secure cloud infrastructure, restricted internal access protocols (Role-Based Access Control), and continuous network monitoring. However, no digital transmission is entirely infallible; while we guarantee maximum effort and industry-standard security, we advise principals to utilize secure channels when transmitting highly sensitive personnel documents.

🔄 8. Changes to This Policy

As international data protection laws and maritime regulations evolve, Marine One reserves the right to update this Privacy Policy. Any modifications will be published directly on this page with an updated “Effective Date.” We encourage our global partners and principals to review this page periodically.