Privacy Policy

The purpose of this policy is to name the personal information that the Company receives, the grounds on which the Company processes it, and the choices that a user holds. The policy governs the website hmsfreedom.lol and any platform, dashboard, mobile view or application that the Company publishes under the HMS FREEDOM name. It also governs inquiries that arrive by the contact form, by email to alert@hmsfreedom.lol or by telephone to +16802465873.

The Services are designed for adults who operate vessels, manage fleets, plan voyages, coordinate port calls or run supporting offices. The Company may process the details of ships the user controls, the routes those ships sail, the crew on board and the maintenance those hulls keep. A portion of that material is operational rather than personal, but when operational records touch an identified individual, this policy treats those records with the same care as any other personal data.

This policy does not cover the practices of third parties to which the Company may link. Each third party publishes its own statement of practice, and the Company encourages you to read that statement before you share data on an external site.

The website and the Services are operated by HMS FREEDOM, LLC, a limited liability company with its registered office at 19751 E 63RD Dr, Aurora - 80019-2174, United States (US). References in this policy to the Company, to we, or to us mean HMS FREEDOM, LLC.

The underlying systems and this website were built by the developer HMSFreedom. The developer wrote the code that keeps the watch on your data, while the Company holds responsibility under the law for how that data is used. Questions about either the technical handling of data or its legal treatment may be sent to the offices at the address above or by email to alert@hmsfreedom.lol.

The Company is a provider of computer systems design and related services within the professional, scientific and technical services sector, and of computer integrated systems design. The privacy obligations described here apply across that work.

The Company collects only the information that a working relationship requires. In broad terms that information falls into three groups: information a user chooses to send, information gathered automatically while the site is visited, and information that arrives from trusted third parties that a user has authorised.

The first group includes name, company, role, email address, telephone number and the content of a message sent through the contact form. When an account is opened for a live system, the Company may also collect billing details, an account contact, and the credentials that protect access to the dashboard.

The second group arises from technology and is described in more detail in the sections below on automatic collection and on cookies. The third group depends on how a user arrived. If you begin a demonstration from a partner listing or an industry portal, the Company may receive a reference that lets both parties recognise the shared interest.

Most direct collection happens when a user chooses to signal the Company. Submitting the contact form asks for a name, an email address and a message so that the operations crew can reply to the right watch. Additional detail, such as a telephone number or the size of a fleet, may be provided at the users own choice.

When the relationship moves beyond an inquiry, direct information grows. Onboarding a fleet system collects the names and contact details of account administrators, the roles of those administrators, and corporate records that establish who may act on behalf of a vessel operator. Paying for a service collects the billing address and the data needed to complete a transaction; card numbers themselves are handled only by a payment provider and never stored in the Company log.

Users should never place sensitive personal data, such as account credentials for unrelated banks or documents of identity, inside a free-text message box unless the Company has asked for that material in a protective channel.

Like almost every site on the public network, the website records routine technical data when a page is opened. That data covers the internet protocol address of the device, the type of browser in use, the operating system, the approximate region derived from the address, the referring page, the pages visited within hmsfreedom.lol and the time of each visit.

The Company uses this automatic material for a narrow set of reasons: to keep the site secure, to understand which parts of the Services matter most to visitors, and to make sure that content renders correctly on the equipment operators actually use. This data is reviewed at an aggregate level; an individual address is not connected to a named person unless a security event makes that connection necessary.

The voyaging systems themselves also generate automatic logs. A dashboard records who signed in, when the sign-in happened and which boards that account opened, because a fleet operator needs a trail of every hand that steered the data.

Certain material reaches the Company without being typed directly into a form. If a vessel operator registers through a marine software reseller, the reseller may send the Company a confirmation that carries a contact name and an email so that support can begin without a second form.

Public registers and classification references may be consulted to confirm that a hull number, a registry or a certificate belongs to the fleet the operator describes. Payment networks return settlement confirmations that the Company retains only as a record of the transaction. Where a service relies on mapping or weather, the Company may pass a route or a coordinate set to a specialist data source; that transfer is described in the sections on sharing and on service providers.

The Company treats third party material with the same standard as direct collection. A data point is kept only while it serves the purpose for which it entered the system.

The Services are not directed at children. The fleet operations work the Company performs is carried out by adults acting in a professional capacity, and the public website does not hold content aimed at a young audience.

Because of that position the Company does not knowingly collect personal information from a child. If the Company learns that data belonging to a child has reached the systems without the consent of a parent or guardian, the record will be removed as soon as it is practical to do so.

A parent or guardian who believes that a child has supplied information to the Company should write to alert@hmsfreedom.lol. The message should identify the browser or device that was used, so that the Company can find and delete the record and close any stray account.

The Company processes personal information for purposes that a reasonable visitor would expect. That set of purposes includes responding to inquiries, delivering the Services agreed in a contract, keeping the Services secure, improving the tools the operator relies on, meeting a legal or tax obligation, and defending the legitimate interests of the Company.

Delivering the Services is the widest purpose. For a fleet tracking system that purpose includes receiving position reports, drawing the fleet chart and making that chart available to the accounts the operator authorises. For crew rotation it includes holding the certificates and sailing assignments that a roster must respect. None of these purposes imagines using your data for anything unrelated to the work you opened an account to do.

The Company does not sell personal information in the ordinary sense of the word, and does not trade it for advertising profit. Where a disclosure happens to help the operator run the fleet, the operator is told which parties received what and why.

Where a data protection law asks for a lawful reason behind each act of processing, the Company relies on a small set of recognised grounds. Most inquiries and demonstrations rest on consent, which a user may withdraw at any time by telling the Company to stop.

When an operator signs a service agreement, processing runs under the ground of performance of a contract. Fleet data is processed because operating that fleet is what the contract exists to do, and support is delivered because a working agreement always carries a duty of care.

Billing records and safety logs are processed because a law or a professional rule requires them. The remaining background work, such as securing the network and testing the Services, rests on the legitimate interest of the Company in running an honest and reliable operation, weighed always against the interest and the expectation of the individual whose data is involved.

Read plainly, the Company uses personal information to answer you, to serve you and to keep you safe. A message from the contact form reaches the operations inbox so that the correct watch replies. An account request sets up a dashboard. A support ticket opens a record so the same engineer can follow a problem to its end.

Beyond that immediate work, the Company may use contact details to send essential notices, such as a change to the Terms of Service, a security advisory or a maintenance window. These are not marketing messages, and they can be received only as the cost of a responsible relationship. Occasionally, and only where consent has been given, the Company sends a note about new capabilities relevant to the systems an operator already uses.

Service logs help the Company measure reliability and spot faults before an operator does. Aggregated figures about numbers of vessels or ports may appear in a public summary, but those figures never name an operator or a vessel unless the operator has agreed to be a case study.

The Company shares personal information sparingly and only where a clear purpose exists. One share partner is the group of service providers described in the next section. Others arise from diligence rather than from choice: the Company may be compelled to share a limited record with a regulator, a court or a body of professional rule when the law insists.

If the Company ever sells a business unit or enters a merger, the records of that unit move with it. In that event every customer will be told well before the transfer, and the data reaches the new owner under the same duty of care that this policy describes. Those who do not wish to follow their data into the new arrangement may close the account in the usual way.

What the Company does not do matters as much as what it does. The Company does not sell personal information to data brokers. It does not build advertising profiles about operators. It does not repackage a fleet log into a product aimed at competitors. Any claim that this sharing exists is simply wrong.

To run its own office the Company uses a small number of service providers: the host that keeps the servers on line, the payment processor that settles invoices, the mail carrier that delivers alerts, and providers of mapping and weather data that enrich a voyage. Each provider acts on instruction from the Company and may handle only the material that its role demands.

Every provider is chosen with an eye to its own safeguards, and every provider agrees to a contract that forbids it from selling the data or from using it for its own unrelated ends. The customer of a provider such as a mapping firm is the Company, and the raw fleet data is conveyed to that firm for the single purpose of drawing a chart or forecasting weather for the route at hand.

A list of the principal provider categories is available on request from alert@hmsfreedom.lol. The Company reviews the roster from time to time and tells operators about any material change before it takes effect.

The Company treats access to personal information as a watch you must earn. Accounts carry passwords, sessions expire, and logins to the operations systems are recorded so that an unusual hand can be questioned. Data in transit travels over encrypted connections, and data at rest sits behind the access rules of the hosting provider.

Only staff and agents who need a record to do their work can reach it, and each of them answers for what they open. Backups are taken so that a fault never becomes a loss, and the restoration drills keep those backups honest rather than decorative.

No system can promise absolute safety, and the Company is candid about that limit. But a breach is met with a clear procedure: the affected records are contained, the cause is found, the hole is closed, and where the law requires it the people who might be harmed are told without delay.

Personal information is kept only for as long as the purpose that brought it into the office still stands. A contact inquiry is closed and filed once the question it carried is answered; a service account keeps its records while the service runs and for the period that tax and professional rules demand afterwards.

Operational accounts store voyage, maintenance, crew and port records while the operator subscribes. When an account ends, the operator may take an export of its own records, and the Company then deletes the residual copies on the schedule that housekeeping sets, unless a court, a regulator or an active dispute requires them to be held longer.

The Company designs deletion so that it is real. Removing an account from the log triggers the removal of the associated records from the active systems and, on the next safe cycle, from backups where that is technically possible.

The Company is based in the United States, and much of the hosting used to serve the Services sits within the United States. A vessel operator working from another country should understand that data provided to the Company may be stored and processed in the United States, which is the primary place of business shown on this page.

Where the law of the users region restricts the movement of personal data across borders, the Company relies on appropriate safeguards. Those safeguards may take the form of a recognised adequacy finding, a set of standard contractual clauses, or another instrument accepted by the relevant authority. A copy of the safeguard that applies to a particular transfer can be requested from the Company.

Travelling with a vessel across national tracking zones also moves data between the offices that share a route, but that movement is governed by the agreement the operator holds and never exceeds what the voyage truly needs.

Depending on where you live, the law grants you a set of rights over the personal information the Company holds. The Company honours those rights and answers every request honestly. The rights most often exercised are these: the right to know what is held, the right to correct a record, the right to delete a record, the right to move a record, the right to object to certain processing, and the right to withdraw consent.

To exercise a right, send a request to alert@hmsfreedom.lol and identify the account or the device concerned. The Company will confirm who you are before it answers, so that a third party cannot pry into your record under your name. A simple request is answered within the period the law sets, and an especially complex one is acknowledged with an honest timetable.

Refusing to provide optional detail is always permitted, and it will never be used against you. Refusing to hand over the material a service genuinely requires is different: without a billing address or an account contact the Company simply cannot open a live system, and it will tell you so plainly rather than hide the reason.

The website uses small files, often called cookies, and similar local storage to remember that a visitor is on the site and to make the pages behave sensibly. The strictest of these, the kind that keeps a form or a session working, are needed for the site to run and cannot be switched off.

Where an analytics measure is used, it is set to a modest view of the visits: pages seen, regions and timings, without building a profile of a named person. Because the Company values a plain deal, annoying trackers that follow a visitor across unrelated sites are not part of the design.

Most browsers let a user review or clear stored files, although clearing a strictly necessary cookie can interrupt a session in progress. Details of how to manage cookies sit in the help centre of the browser, but no matter which setting you pick, the services themselves still run exactly as billed.

The website and the mailing notes may carry links to the offices of classification societies, to marine data registers, to partners or to professional bodies. Following one of those links carries you onto a site the Company does not operate.

The Company has no command over the privacy practice of those sites, and this policy does not extend to them. Reading the visitor policy of the destination is the only safe habit, because each separate site decides its own handling of the data you give it.

The Company will never hide a link behind a misleading label. If a page says the link points to a weather service, the link points to that service and to nothing else, so you can make an informed choice about where you go.

Rules written once rarely survive an honest office long, because the Services grow and the law moves. The Company reviews this policy and updates it when the practice it describes changes or when a legal requirement so demands.

Any material change is marked at the top of this page with a new date, and accounted users are told about a change that touches them before it takes effect. The version of the policy that governed your use is the version shown on the page on the day you acted, and the Company keeps an internal record so that a dispute about an older act can be answered by the older text.

Continuing to use the Services after a revision takes effect means that you accept the revised policy. If you do not accept a change, the remedy that costs you least is to close the account before the new text begins to apply.

Questions and requests about privacy are answered by the same crew that answers everything else, and they are answered by a person, not by a machine. The data protection contact for HMS FREEDOM, LLC is the registered office below.

If you hold a concern about how your information has been handled and the Company answer does not satisfy you, you also hold the right to complain to the data protection or consumer authority that governs your region. The Company will cooperate fully with any such authority and will never punish a user for raising a legitimate question about data.