Privacy Policy

Overview

This Privacy Policy sets out how we collect, use, store, and process your personal data in compliance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, or GDPR), as well as its retention and incorporation into UK law under the Data Protection Act 2018 (collectively referred to as the “GDPR”).

Data Controller Information

SeaSolveX Limited is the data controller responsible for your personal data. For any data protection inquiries or requests to exercise your legal rights, please contact us at:

What Data We Collect

We may collect, use, store, and transfer different kinds of personal data about you, categorised as follows:

• Identity Data: First name, last name, username, title, or similar identifier.
• Contact Data: Billing address, delivery address, email address and telephone numbers.
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Profile Data: Your inquiries, feedback, survey responses, and mediation case preferences.
• Mediation and Transaction Data: Details and documents regarding disputes, Disputed Position Statements (DPS), communications and financial transaction details necessary for providing our mediation services.

Lawful Basis for Processing Under the GDPR

In accordance with Article 6 of the GDPR (Lawfulness of processing), we will only process your personal data when a lawful basis applies. Depending on the context, we rely on the following legal grounds:

• Article 6(1)(a) – Consent: You have given clear consent for us to process your personal data for specific purposes (e.g., diagnostic tool responses, subscribing to updates or marketing communications).
• Article 6(1)(b) – Contractual Performance: Processing is necessary for the performance of a contract to which you are a party (such as using or engaging SeaSolveX Limited for maritime mediation services or entering the SeaSolveX readiness pathway).
• Article 6(1)(c) – Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject under English law.
• Article 6(1)(f) – Legitimate Interests: Processing is necessary for our legitimate business interests (such as managing our business, ensuring network security, and operating our dispute resolution platforms), provided your fundamental rights and freedoms do not override those interests.

Your Rights Under the GDPR

If you are a data subject protected under the GDPR, you hold specific rights pursuant to Articles 15 to 22 of the GDPR:

• Right of Access (Article 15): You have the right to request confirmation as to whether or not personal data concerning you is being processed and, where that is the case, access to the personal data.
• Right to Rectification (Article 16): You have the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.
• Right to Erasure / “Right to be Forgotten” (Article 17): You have the right to obtain the erasure of personal data concerning you without undue delay where certain grounds apply (e.g., the data is no longer necessary in relation to the purposes for which it was collected).
• Right to Restriction of Processing (Article 18): You have the right to restrict our processing of your data under specific circumstances.
• Right to Data Portability (Article 20): You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format.
• Right to Object (Article 21): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you based on legitimate interests.
• Right to Withdraw Consent (Article 7(3)): Where our processing is based on your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the details provided above. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

Data Security and International Transfers

We have implemented appropriate technical and organisational security measures in compliance with Article 32 of the GDPR to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure.

If and when we transfer personal data outside the UK or European Economic Area (EEA), we ensure a similar degree of protection is afforded to it by utilising specific legal mechanisms approved under the GDPR (such as the UK International Data Transfer Agreement or standard contractual clauses).