Privacy Policy

Last updated: 13 April 2026

1. Who we are

CrewNotice is an operational compliance platform for superyacht crew, provided by Sharp Digital Solutions Ltd, a company registered in England and Wales.

Registered address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

Sharp Digital Solutions Ltd is the data controller for personal data processed through CrewNotice. Where a vessel operator administers their own workspace, they may also act as a data controller for their crew’s data, and Sharp Digital Solutions Ltd acts as a data processor on their behalf.

2. What data we collect

Category	Data	Purpose
Account	Name, email address, role, department	Authentication and vessel crew management
Activity	Activity logs, read receipts, document acknowledgements, training records	Operational compliance tracking
Usage	Login timestamps, feature access logs	Audit trail and security
Device	Push subscription endpoint (if opted in)	Delivering push notifications

We do not collect location data, financial information, biometric data, or any special-category personal data.

3. How we use your data

Operational compliance tracking (notice reads, document acknowledgements, training completion)
Crew communications and notifications
Training delivery and progress tracking
Generating compliance reports for vessel management
Maintaining audit trails required under ISM Code and MLC 2006

4. Legal basis for processing

We process your data under legitimate interests (vessel safety and regulatory compliance) and contractual necessity (your employment agreement with the vessel operator). For push notifications and email reminders, we rely on your consent, which you can withdraw at any time by disabling notifications in your device settings.

5. Data retention

Personal data is retained for the duration of the vessel’s subscription plus 12 months. After this period, data is securely deleted unless a longer retention period is required by applicable maritime regulations.

6. Data processors

Your data is processed by the following sub-processors:

Supabase — database and authentication
Vercel — application hosting

All data is stored within the European Economic Area. No personal data is transferred outside the EEA.

7. Your rights

As a crew member, you have the right to:

Access — request a copy of all personal data we hold about you
Correction — correct any inaccurate personal data
Deletion — request deletion of your data upon request to your vessel administrator
Portability — receive your data in a structured, machine-readable format
Objection — object to processing based on legitimate interests
Withdraw consent — for consent-based processing (e.g. push notifications)

To exercise any of these rights, contact your vessel administrator in the first instance, or contact us at the address below.

8. GDPR compliance

Sharp Digital Solutions Ltd is a UK-registered company and is fully compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 when processing crew data. We implement appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS 1.3), encryption at rest (AES-256), row-level security policies on all database tables, and role-based access controls.

9. Contact

For privacy enquiries, contact your vessel administrator in the first instance. For questions about CrewNotice’s data processing practices:

Sharp Digital Solutions Ltd
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Email: privacy@crewnotice.app