Privacy Policy

Privacy Policy

Last updated: October 2026

NCL Limited, trading as Shipwrights.com, is the data controller for personal information collected through this website. We are registered in England and Wales and our registered office is at Capitol Court, Capitol Business Park, Barnsley, S75 3UD, United Kingdom.

This policy explains what personal information we collect, how we use it, and what rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

We may collect the following information when you contact us or use this website:

  • Name, email address, telephone number, and company details provided through enquiry forms or direct correspondence.
  • Vessel and project information submitted as part of a service enquiry, including vessel particulars, classification status, and trading requirements.
  • Technical data about your use of this website, including IP address, browser type, pages visited, and referring website, collected through cookies and server logs.

How We Use Your Information

We use the information we collect for the following purposes:

  • Responding to enquiries about our maritime advisory services.
  • Providing naval architecture, vessel sale and purchase, chartering, classification coordination, and other maritime services.
  • Sending industry updates and service information where you have given consent.
  • Monitoring and improving the performance of this website.
  • Complying with legal and regulatory obligations.

Legal Basis for Processing

We process personal data on the following legal grounds under the UK GDPR:

  • Legitimate interests (Article 6(1)(f)): processing enquiry data and client information to deliver our services and manage business relationships.
  • Contract performance (Article 6(1)(b)): where processing is necessary to perform or prepare a contract for maritime advisory services.
  • Consent (Article 6(1)(a)): for marketing communications. You may withdraw consent at any time by contacting us.
  • Legal obligation (Article 6(1)(c)): where we are required to retain records under maritime, tax, or company law.

Information Sharing

We do not sell personal data to third parties. We may share information with the following parties where necessary to provide our services:

  • Classification societies, flag state administrations, P&I clubs, and marine insurers where required for vessel certification, registration, or insurance placement.
  • Legal advisors acting in connection with maritime disputes, arbitration, or ship arrest proceedings.
  • IT service providers who host this website and support our business systems, under appropriate data processing agreements.
  • Regulatory authorities or law enforcement agencies where we are required to do so by law.

International Data Transfers

Our maritime advisory services operate across the United Kingdom, Europe, and Africa. Where project requirements demand it, personal data may be transferred to parties in countries outside the United Kingdom. Where such transfers occur, we apply appropriate safeguards including standard contractual clauses approved by the Information Commissioner.

Data Retention

We retain personal data only as long as necessary for the purpose for which it was collected:

  • General enquiry data: retained for three years from the date of last contact, then securely deleted.
  • Client and project records: retained for seven years following completion of the engagement, in line with professional indemnity and statutory requirements.
  • Website analytics data: retained for 26 months.
  • Marketing consent records: retained for as long as the consent remains active, plus 12 months.

Your Rights

Under the UK GDPR, you have the right to:

  • Request access to the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your data where there is no continuing lawful reason for us to retain it.
  • Request restriction of processing in certain circumstances.
  • Object to processing based on legitimate interests.
  • Request portability of your data in a structured, commonly used format.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at cs@ncl-ltd.co.uk. We will respond within 30 calendar days.

Cookies

This website uses cookies to support core functionality and monitor usage. Essential cookies are required for the website to operate correctly. Analytics cookies collect anonymised data about how visitors use the site. You may manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

Data Security

We apply technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. Data transmitted through this website is encrypted using SSL/TLS. Access to personal information is restricted to authorised personnel who require it for their role.

Changes to This Policy

We may update this policy to reflect changes in our data processing activities or legal requirements. The revised policy will be published on this page with an updated effective date.

Contact and Complaints

If you have questions about this policy or wish to exercise your data protection rights, contact us at:

NCL Limited
Capitol Court, Capitol Business Park
Barnsley, S75 3UD
United Kingdom

Email: cs@ncl-ltd.co.uk
Telephone: +44 20 3355 1985

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled improperly. The ICO can be contacted at ico.org.uk or by writing to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.