1. Introduction
PWO Solution (“PWO”, “we”, “us”) provides cloud software for maritime operators and shore-based workforce teams, including Marine ERP (vessel operations, maintenance, IoT, crew and compliance workflows), payroll, HR, and related products accessible via www.pwosolution.com and associated applications (the “Services”).
This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you use our websites, trials, demos, and subscribed Services. It is intended for fleet operators, ship managers, employers, and other business users who process data about personnel, vessels, and operations.
2. Who we are
The data controller for personal data processed through the Services is PWO Solution. Contact: info@pwosolution.com.
Where your organisation uses the Services, your organisation may also act as a controller for crew, vessel, or employee data it uploads. We process such data on documented instructions where applicable (including as a processor under GDPR-style regimes).
3. Categories of personal data
- Account & contact data: name, business email, phone, company name, role, billing and authorised signatory details.
- Maritime & operational data you choose to store: vessel identifiers, equipment and maintenance records, voyage-related inputs, inventory and procurement data, incidents, permits, and similar operational records that may identify individuals when linked to crew or shore staff.
- Crew & HR-related data: qualifications, certificates, sea service, payroll inputs, attendance, leave, and other workforce fields your organisation configures.
- Technical & usage data: IP address, device/browser type, approximate region, log and diagnostic data, cookies or similar technologies where enabled, and security telemetry used to protect the Services.
- Communications: messages you send through demo requests, support channels, or in-product workflows.
4. Purposes and legal bases
We use personal data to:
- Provide, operate, secure, and improve the Services (contract / legitimate interests).
- Authenticate users, enforce terms, prevent fraud and abuse, and maintain audit trails where configured.
- Offer trials, demos, onboarding, customer success, and technical support (contract / legitimate interests).
- Meet legal and regulatory obligations where applicable.
- Analyse aggregated or de-identified usage to improve reliability and UX (legitimate interests).
Where GDPR applies, we rely on appropriate bases such as contract, legitimate interests (balanced against your rights), legal obligation, or consent where required—depending on the processing activity.
5. Hosting, subprocessors & international transfers
Our Services are hosted on enterprise cloud infrastructure (including AWS regions as configured). Amazon Web Services maintains recognised infrastructure certifications and attestations that customers commonly review for due diligence; your data may be processed in the regions you select or that apply to your deployment.
We may engage subprocessors for hosting, email delivery, analytics, error reporting, customer communications, security monitoring, or backups. We impose contractual safeguards consistent with applicable law for transfers outside the UK/EEA/Switzerland where required (including standard contractual clauses or equivalent mechanisms).
6. Retention
We retain personal data for as long as needed to provide the Services, comply with law, resolve disputes, and enforce agreements. Customer-controlled operational data is retained according to your organisation’s settings, subscription term, and export/deletion requests subject to technical feasibility and legal holds.
7. Security
We implement administrative, technical, and organisational measures appropriate to the nature of maritime and payroll processing—including access controls, encryption in transit where supported, monitoring, and least privilege. No method of transmission or storage is completely secure; you should protect account credentials and follow good cyber hygiene aboard ship and ashore.
8. Your rights
Depending on your location, you may have rights to access, rectify, erase, restrict, or port personal data, and to object to certain processing. California residents may have rights under the CCPA/CPRA (e.g. know, delete, correct, opt-out of sale/share—where “sale/share” applies). EU/UK users may lodge a complaint with a supervisory authority.
To exercise rights, contact info@pwosolution.com. We may need to verify requests and coordinate with your organisation when data is held on their behalf.
9. Maritime operations disclaimer
AIS, IoT, maintenance, crew compliance, and analytics features support operational decisions but do not replace statutory obligations, bridge procedures, classification society rules, or professional maritime judgment. Customers remain responsible for safe navigation, pollution prevention, labour compliance, and documentation required by flag and coastal states.
10. Children
The Services are directed at businesses and are not intended for children under 16 as primary users.
11. Changes
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date or through in-product notice where appropriate. Continued use after changes constitutes acceptance where permitted by law.
