Legal
Privacy notice
How Shipways Marine Corp. handles personal data, under Republic Act 10173 (the Data Privacy Act of 2012) and the issuances of the National Privacy Commission.
Last updated: not yet reviewed
Who we are
Shipways Marine Corp. is the Personal Information Controller for the data described here. Our registered office is at Unit 1, Example Building, Makati City, Metro Manila.
Our Data Protection Officer is Jane L. Doe, reachable at dpo@shipwaysmarine.com. You can contact the DPO directly about anything in this notice, including to exercise any of the rights set out below.
What this site currently collects
The public register itself contains no personal data about you. Browsing it requires no account, sets no advertising or tracking cookie, and does not build a profile of you.
We collect personal data in exactly one situation: when you send us a form.
- your name;
- your work email address, and your phone number if you give one;
- your company and position, if you give them;
- the message you write;
- a one-way cryptographic hash of your IP address, used only to enforce a rate limit on the form. We do not store the address itself.
Why we use it, and on what basis
We use it to reply to you and to correct the register. That is the whole of it. Our lawful basis is our legitimate interest in maintaining an accurate public record of the shipbuilding industry and in responding to people who contact us — an interest we have assessed against your rights and consider proportionate given the limited data involved and its business context.
We do not use it for marketing. We will not add you to a mailing list. If we ever want to, we will ask you separately and specifically, and you will be able to say no without losing anything else.
Business contact details on yard profiles
Some yard profiles publish a contact name, work email or phone number. These are business contact details, published with the yard’s agreement so that owners can reach it. If you are named on a profile and would rather not be, tell us and we will remove it — we do not require the yard’s permission to take your name down.
Who else sees it
Our hosting and database providers process this data on our instructions, under contract, and for no purpose of their own. Personal data of Philippine data subjects is stored in the Singapore region (asia-southeast1) and is not transferred outside that region without a documented lawful basis.
We do not sell personal data, and we do not share it with any yard or any other third party except where we are required to by law.
How long we keep it
Form submissions are kept for 24 months from the date we close the matter, then deleted. We keep them that long because a correction to the register often needs to be traced back to who reported it and what they said.
Your rights
Under the Data Privacy Act you have the right to:
- be informed about how your data is processed — this notice;
- access the data we hold about you;
- have inaccurate data corrected;
- object to processing, and to withdraw any consent you have given;
- have your data erased or blocked, where the grounds in the Act apply;
- receive a copy of your data in a portable format;
- be indemnified for damage caused by inaccurate or unlawfully obtained data;
- lodge a complaint with the National Privacy Commission if you are not satisfied with how we have handled a request.
Write to the DPO to exercise any of these. We aim to respond substantively within 15 working days. We will not charge you and we will not ask you to explain why.
Security
We apply the organisational, physical and technical measures required by NPC Circular 2023-06. In practice: data is encrypted in transit and at rest, access is restricted to the people who need it and reviewed regularly, and every action on personal data is logged.
If a breach occurs that is likely to put your rights at risk, we will notify the National Privacy Commission and the people affected within 72 hours of knowing about it, as the law requires.
Cookies and analytics
This site sets no cookies. We use no advertising network, no social media pixel, and no analytics product that identifies you. If we introduce analytics we will choose a cookieless one; if that ever proves impossible, we will ask for your consent first rather than assume it.
Changes to this notice
We will publish any change here with a new date. Where a change materially affects how we use data you have already given us, we will contact you about it rather than rely on you noticing.