How we handle personal data

• Accounts: your name, email address and a hashed form of your password (never the password itself), and the companies and roles you belong to.
• Seafarer profiles: date of birth, nationality, phone, department and rank; the documents you upload (passport or seaman’s book, certificates, medical and others) with their numbers and expiry dates; your sea service; and the date and version of the consent you gave to be listed.
• Company records: what a company enters in its own workspace, such as its crew, employees, vessels, suppliers, orders and accounts.
• Crew requests: the company and contact details sent with an “I need crew” request.
• Payments: the amount, currency, reference and the confirmation we receive from our payment provider. Card and bank details are entered on the payment provider’s secure page; we never see or store them.
• Security records: who did what and when (for example approvals, payments and who opened a seafarer’s profile), and, for a short time, a scrambled form of the network address and email used for sign-in, to stop repeated guessing.

To provide the service you signed up for: running a company’s workspace, listing seafarers so that companies can offer them work, supplying crew to vessel operators, taking payments, and keeping the platform secure. Seafarers are listed only after agreeing to it.

• A company’s records are visible only to that company’s own people, according to their roles. The database itself keeps each company’s data apart.
• A listed seafarer’s details, sea service and the list of documents held can be seen by companies on Gulfdeck. Document files are shared only with companies the seafarer has applied to. Every opening is recorded and shown to the seafarer.
• OML staff who run the platform check seafarers’ documents and handle payments; what they open is recorded too.
• Trusted service providers who run parts of the service for us, such as hosting, payments and email, only on our instructions.

We count visits to the website with Vercel Web Analytics, which uses no cookies and does not identify you.

The On board page keeps a vessel’s details (maintenance jobs and the names and ranks of the crew on board) and any entries not yet sent on the phone that opened it, so it works without internet. Signing out does not remove them; clear the site’s data in the browser to remove them.

We do not sell personal data.

• You can see and correct your own profile at any time after signing in.
• Seafarers can delete their profile from their account. This removes the profile, documents, sea service and applications. The sign-in account, payment records and the record of who opened the profile are kept. A company that hired you keeps its own employment record.
• Company staff should ask their company’s administrator about records their company holds.
• You may ask us what we hold about you, ask us to correct or delete it, or object to how we use it, under the Nigeria Data Protection Act 2023.

Write to hello@mglmaritime.org.