Privacy Policy

Bolina Marine (“Bolina”, “we”, “us”, or “our”) operates the website bolinamarine.comand the Bolina fleet management platform (collectively, the “Service”).

For the purposes of the General Data Protection Regulation (GDPR) and applicable EU and UK data protection law, Bolina Marine is the data controller of personal data collected through the Service.

You can reach us at any time at contact@bolinamarine.com.

When you visit our website:

• IP address and approximate location (country/city)
• Browser type, device type, and operating system
• Pages visited, referral URL, and time spent on pages
• Contact form submissions (name, email, message)

When you create a Bolina account:

• Name and email address
• Company name and role
• Billing information processed securely via Stripe (we never store card numbers)
• Vessel and fleet data you choose to enter into the platform
• Files and documents you upload (certificates, reports, etc.)
• Activity logs and usage data within the platform

We process your personal data on the following legal bases:

We share your data only with trusted service providers acting as data processors under binding agreements. We do not sell your data to any third party.

Where providers are based outside the EU/EEA, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).

All platform data is stored on infrastructure located within the European Economic Area and encrypted at rest (AES-256) and in transit (TLS 1.2+). Access is restricted to authorised personnel only.

While we take all reasonable steps to protect your data, no system is completely immune to risk. If a breach occurs that is likely to affect your rights, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

We retain your data for as long as your account is active. If you close your account:

• Account and platform data is deleted within 30 days
• Billing records are retained for 7 years to comply with tax law
• Anonymised, aggregated analytics data may be retained indefinitely

We use strictly necessary cookies to keep you logged in and maintain your session. We do not use advertising or third-party tracking cookies.

If we introduce analytics cookies in the future, we will update this policy and request your consent beforehand.

Under GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data (“right to be forgotten”)
• Restriction — ask us to pause processing of your data in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Object — opt out of processing based on legitimate interests or direct marketing
• Withdraw consent — at any time, where processing is based on your consent

To exercise any of these rights, email us at contact@bolinamarine.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

The Service is intended for business users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. If we make material changes, we will notify registered users by email at least 14 days before the changes take effect. The “Last updated” date at the top of this page always reflects the current version.

For any questions, requests, or concerns about this Privacy Policy or how we handle your data, please contact: