PRIVACY POLICY

1. Acceptance

We have created this Privacy Policy (the “Policy”) because we value our users’ privacy. The Policy describes the types of information we may collect from you, or that you may provide, when you access nextship.net (the “Site”). This Policy does not apply to information collected by any third party, including through any external website that may link to or be accessible from the Site. Please check directly with each such third party to avoid unfair surprises and misunderstandings.

Your use of this Site constitutes your acceptance of this Privacy Policy. If you do not agree with this Privacy Policy, you may not use our Site. This Policy may change from time to time, and the date of the last update is indicated at the top of this page. Your continued use of this Site after we revise this Policy is deemed to be acceptance of the revisions, so please check this page from time to time for updates.

Data Controller: NextShip LLC (incorporated in the USA), registered address 7901 4th St N STE 300, St. Petersburg, Florida 33702, USA, Tel: +1 (321) 524-2931.

2. The data we collect about you

We may collect several types of data from and about the users of our Site, including the following:

a) Personal Data: First Name, Last Name, Email, Phone number, Professional and educational details, CV, identity documents (such as passport, Seaman book, visas and other IDs), Payment Details, login, password.

b) Information provided voluntarily: Information you voluntarily provide when you contact us for any reason, upload or otherwise send us. We collect this information:

c) Directly from you when you provide it to us.

d) Automatically as you navigate through the Site.

Data collected automatically may include log files and usage data such as your IP address, device identifiers, browser type and version, operating system, referring/exit pages, pages viewed, dates and times of requests, approximate location derived from IP address, and error/ diagnostic data. We may also collect cookie identifiers and similar technical identifiers in accordance with your cookie preferences.

Identity documents

If you choose to provide identity documents (such as passport, Seaman book, visas or other IDs), we process them to operate the platform, support recruitment and hiring workflows, verify information you provide and help prevent fraud and misuse. Access to such documents is limited and we apply appropriate technical and organizational measures to protect them.

Where we process a photo or scan of your document, it is used only for automated extraction of relevant details. We do not store the document photo permanently. We retain only the extracted details and information about the validity of the document (for example, whether it appears valid and its expiry date), as needed to provide the service.

For EU/EEA users, our legal basis for this processing is the performance of a contract (contract necessity).

Special Categories of Data

NextShip does not collect, process, or store special categories of personal data, including medical or health-related information, through the platform.

Medical certificates or health documents should be provided directly to employers outside of the platform when required.

If you believe you have provided special category data to us, please contact us so we can review and, where appropriate, delete it.

3. How we use your personal data

We use information that we collect about you or that you provide to us, including any personal data:

a) To provide the services you requested.

b) To notify you about changes to our Site or any services we offer or provide through it.

c) To carry out our obligations and enforce our rights.

d) In any other way we may describe when you provide the information.

Legal basis for processing (EU/EEA users)

For users in the EU/EEA, we process personal data only when we have a valid legal basis under Article 6 GDPR. Depending on the context, this may include: (a) performance of a contract (to provide our services and manage your account); (b) compliance with a legal obligation; (c) our legitimate interests (for example, to secure and improve the Site, prevent fraud, and operate our business), where such interests are not overridden by your rights; and/or (d) your consent (for example, for non-essential cookies and similar technologies).

Data retention

We keep your personal data only for as long as necessary for the purposes described in this Policy, including to provide the services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the type of data, the purpose of processing, and applicable legal requirements.

We may delete or anonymize user accounts and profiles after 12 months of inactivity (no login), unless we need to retain certain information for longer to comply with legal obligations, resolve disputes, enforce our agreements, or for security and fraud prevention purposes.

Purposes, legal bases and retention summary (EU/EEA users)

4. Disclosure of your personal data

We do not sell any of your personal data to 3rd parties. We may disclose personal data that we collect or you provide as described in this Policy:

a) To fulfill the purpose for which you provide it.

b) To contractors, service providers and other third parties we use to support our business.

These recipients may include, depending on the services you use: infrastructure and hosting providers, analytics providers, communication and customer support providers, payment processors, and other service providers acting on our instructions.

Our key service providers may include Vultr (hosting and backend infrastructure), Amazon Web Services (storage and email services), Stripe (payment processing), and Google (analytics technologies).

c) To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of the Site's assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal information about our Site users is among the assets transferred.

d) We may, without restriction, disclose aggregated information about our users and information that does not identify any individual.

e) For any other purpose disclosed by us when you provide the information.

We may also disclose your personal information:

f) To comply with any court order, law or legal process, including to respond to any government or regulatory request.

g) If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Site, our customers or others.

5. Cookie Policy

Cookies are small text files which a website may put on your computer or mobile device when you first visit a site or page. The cookie will help our Site, or another website, to recognize your device the next time you visit. For example, cookies can help us to remember your username and preferences, analyze how well our website is performing, or even allow us to recommend content we believe will be most relevant to you.

We may use cookies for the following reasons and purposes:

At this time, we use essential cookies and analytics cookies. We do not use marketing cookies.

a) To provide the service you have asked for. Some cookies are essential so you can navigate through the website and use its features. Without these cookies, we would not be able to provide the services you’ve requested. For example, some cookies allow us to identify subscribers and ensure they can access the subscription only pages. If a subscriber opts to disable these cookies, the user will not be able to access all of the content that a subscription entitles them to. These cookies do not gather information about you that could be used for marketing or remembering where you have been on the internet. Essential cookies keep you logged in during your visit.

b) To improve your browsing experience. These cookies allow the website to remember choices you make, such as your language or region and they provide improved features. These cookies will help remembering your preferences and settings, including marketing preferences, remembering if you have filled in certain forms, so you are not asked to do it again, remembering if you have been to the Site before and restricting the number of times you are shown a particular advertisement. We might also use these cookies to highlight Site services that we think will be of interest to you based on your usage of the website.

c) Analytics. To improve your experience on our Site, we like to keep track of popular pages and links and the ones which are less frequently used to help us keep our Site relevant and up to date. It is also very useful to be able to identify trends of how users navigate (find their way through) our Site and if they get error messages from web pages. This group of cookies, often called “analytics cookies” are used to gather this information. These cookies do not collect information that identifies you. The information collected is anonymous and is grouped with the information from everyone else’s cookies. We can then see the overall patterns of usage rather than the activity of an individual user.

Typical analytics cookies we may use include (examples):

a) _ga (Google Analytics): up to 2 years.

b) _ga_* (Google Analytics): up to 2 years.

c) _gid (Google Analytics): up to 24 hours.

d) _gat (Google Analytics): up to 1 minute.

d) Marketing cookies. At this time, we do not use marketing cookies and we do not set advertising cookies on the Site.

Most browsers allow you to turn off cookies. To do this, look at the “help” menu on your browser. Switching off cookies may restrict your use of the Site and/or delay or affect the way in which it operates.

You can also change your cookie preferences at any time by opening Cookie settings (available in the Site footer).

6. Data security

Personal data you provide to us is stored on a password protected server accessible only by the administrator. We use SSL. However, we cannot guarantee the security of your personal data during the process of transmission to our Site because any transmission of information over the Internet has its inherent risks. Any transmission of personal data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Site. You are responsible for keeping your login credentials, if any, confidential.

7. Children’s privacy

Our Site is not intendent for children under the age of 13. We do not knowingly collect any personal data about children under the age of 13. If we obtain actual knowledge that we have collected personal data about a child under the age of 13, that information will be immediately deleted from our database.

If a parent believes that his or her child has submitted personal information to us, he or she can contact us via e-mail. We will promptly delete the information upon learning that it relates to a child under the age of 13. Please note that it is possible some of this information may remain archived in web logs and back-up archives after we delete the information from our active database.

8. International transfer

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction.

Where required by applicable law, we rely on appropriate safeguards for international transfers, such as Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms.

9. EU users’ rights.

This section of our Privacy Policy applies to the users of our platform in the EU. We would like to inform you about your GDPR rights and how we safeguard them.

a) Your GDPR rights to be informed, to access, rectify, erase or restrict the processing of your personal information. You have the right to obtain free information about what personal data we have obtained about you, where it is stored, for how long, for what purposes it is used, to whom it was disclosed. You have the right to have us, without undue delay, rectify inaccurate personal data concerning you. That means you can request we change your personal data in our records, or have your incomplete personal data completed. You have the “right to be forgotten,” i.e. to have us delete your personal information, without undue delay, if the data is no longer necessary in relation to the purposes for which it was collected. However, GDPR gives us the right to refuse erasure if we can demonstrate compelling legitimate grounds for keeping your information.

b) GDPR gives you the right to restrict processing if any of the following applies:

If you contest the accuracy of your personal data, we will restrict processing it for a period enabling us to verify its accuracy.

The processing is unlawful and you oppose its erasure and request instead the restriction of its use.

We no longer need your personal data for the purposes of processing, but you require us to restrict processing for the establishment, exercise or defence of legal claims.

You have objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether our legitimate grounds override yours.

c) Right to data portability. Upon request, we will provide you your personal data in our possession, in a structured, commonly used and machine-readable format. You have the right to transmit that data to another controller if doing so does not adversely affect the rights and freedoms of others.

d) Right to object. You can object, on grounds relating to your particular situation, at any time, to processing of your personal data, if based on point (e) or (f) of Article 6(1) of the GDPR. We will then have to stop processing, unless we can demonstrate compelling legitimate grounds for the processing. If you object to the processing for direct marketing purposes, we will have to stop processing for these purposes.

e) Right to withdraw consent. GDPR grants you the right to withdraw your earlier given consent, if any, to processing of your personal data at any time.

f) Rights related to automated decision making. As a responsible business, we do not rely on any automated decision making, such as profiling.

You also have the right to lodge a complaint with a supervisory authority in the EU/EEA if you believe that our processing of your personal data violates applicable law.

10. Accessing and correcting your personal information

Please send us an e-mail to help@nextship.net to request access to, correct or delete any personal data that you have provided to us or to ask questions about this Privacy Policy. We reserve the right to refuse a request if we believe it would violate any law or cause the information to be incorrect. You can edit or delete your own information in your account settings.