ShipGarden

This Privacy Policy explains how ShipGarden (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit this website.ShipGarden is the data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR) and the UK GDPR.

Information we collect

We collect only what we need to run an editorial gallery and answer the people who write to us:

Information you provide directly. When you use our contact form, we collect your name, email address, the reason for contact, and the content of your message.
Usage data collected automatically. When you browse the site we may collect your IP address (in truncated or hashed form), browser and device type, the pages you view, and referring URLs.
Cookies and similar technologies. We use a small number of cookies as described in our Cookie Policy. Analytics cookies are only set after you consent.

How we use information

We process personal data to:

respond to your enquiries, corrections, and boilerplate submissions;
operate, secure, and maintain the website;
measure aggregate traffic so we can improve our curation and content;
comply with our legal obligations.

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

Legal bases for processing

Under the GDPR, we rely on the following legal bases:

Consent (Art. 6(1)(a)) for analytics cookies and any optional communications. You may withdraw consent at any time.
Legitimate interests (Art. 6(1)(f)) for responding to your messages, keeping the site secure, and understanding aggregate usage, balanced against your rights and freedoms.
Legal obligation (Art. 6(1)(c)) where we must retain or disclose data to comply with applicable law.

Sharing and disclosure

We share personal data only with processors who help us run the site, and only under written agreements that require appropriate safeguards. These include our hosting and infrastructure provider, our email delivery provider (used to relay contact-form messages), and our privacy-aware analytics provider. We may also disclose data where required by law or to protect our legal rights.

Data retention

We keep contact-form messages for as long as needed to handle your request and for a reasonable follow-up period, after which they are deleted. Analytics data is retained in aggregate or pseudonymized form for no longer than 14 months. We do not keep personal data longer than necessary for the purposes described above.

Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise any of these rights, use our contact form and we will respond within one month. You also have the right to lodge a complaint with your local data protection supervisory authority.

International transfers

Where personal data is transferred outside the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or transfers to countries covered by an adequacy decision.

Children's privacy

This website is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Contact us

Questions about this policy or a request about your data? Reach the ShipGarden team through our contact form. We read every message.