Privacy Policy

1. Our commitment

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains what we collect, why, how we use it, who we share it with, and what you can do about it.

Industry Apps is the entity responsible for the personal information described here.

2. Registration is optional for the live map

You may view the live map without an account. Registration is required for everything else.

If you would prefer not to provide personal information, do not create an account. If you have one and change your mind, you may close it — see section 12.

3. What we collect

Account information

Name, work email address, organisation name and email domain, role within your team, and a hashed password. We never store passwords in readable form.

Usage information

Pages and features accessed, searches performed, vessels and berths viewed, filters applied, reports generated, times of access, and actions taken within the Service.

Technical information

IP address, browser type and version, operating system, device type, screen dimensions, time zone, and session identifiers.

Communications

Correspondence you send us, including enquiries, support requests and demo requests, together with any information you choose to include.

Information you supply

Schedules, commitments, configuration, saved views or other material you provide.

Recruitment

Where you apply for a position, we collect the information in your application — contact details, work history, qualifications, and any material you provide. It is used for that recruitment process, kept for a reasonable period afterwards, and is not used for any other purpose.

What we do not collect

Payment card details — any fees are invoiced separately and handled outside the Service. Precise geolocation. Biometric or sensitive information as defined by the Privacy Act.

We do not knowingly collect information from anyone under 18. The Service is directed at maritime and industrial professionals. If we learn we hold information about a minor we will delete it.

4. Vessel data and personal information

PortPilot records AIS transmissions, which vessels broadcast publicly and unencrypted under SOLAS Chapter V, receivable by anyone with suitable equipment.

These transmissions identify vessels, not individuals, and in most cases are not personal information.

We recognise that a small privately-owned craft may be associated with an identifiable individual. Accordingly:

• We do not seek to identify vessel owners, masters or crew
• We do not combine vessel data with personal information to profile individuals
• We do not offer any service for monitoring a named person
• We do not publish crew lists, ownership records or personal contact details
• Where a small craft owner asks us to exclude their vessel from display, we will consider it

The Service is directed at commercial shipping. If you believe your privacy is affected by a vessel record, contact us.

5. How we use information

• To provide, operate, secure and improve the Service
• To authenticate you and manage your organisation’s access and entitlements
• To communicate about the Service — changes, outages, support and administration
• To understand how the Service is used, in aggregate, and improve it
• To respond to enquiries and prepare for demonstrations
• To assess job applications
• To meet legal, tax and regulatory obligations
• To detect and prevent misuse, fraud and security incidents

With your consent, to send you information about our services. You may withdraw consent at any time; withdrawing it does not affect service communications.

We do not sell personal information. We do not serve advertising in the Service. We do not use advertising or cross-site tracking technologies in the Service.

6. Legal basis

We collect and use personal information where it is reasonably necessary for our functions and activities, and where you have consented, where we are required by law, or where we have a legitimate interest in doing so that is not outweighed by your privacy.

7. Cookies and browser storage

Cookies. We use cookies necessary for the Service to function — principally to keep you signed in and to protect your session. Blocking them will prevent sign-in.

Browser storage. We use browser local storage to remember preferences such as map layers, filters and view settings. Unlike cookies, this is not transmitted to us. You may clear it through your browser, at the cost of losing those preferences.

Analytics. We may use privacy-respecting analytics to understand aggregate usage. Where we do, we will not permit cross-site tracking.

Our marketing website may use analytics and, where applicable, advertising technologies. Where it does, this will be disclosed on that site and consent obtained where required.

8. Who we share it with

Service providers who host and operate the Service on our behalf, under contract, bound to protect it and use it only for that purpose. These providers supply application hosting and data storage, content delivery, email delivery, and map imagery.

Your organisation’s team administrator, who can see the members of their own team, their roles and their activity within it. They cannot see any other organisation.

Professional advisers — lawyers, accountants, auditors — where necessary.

Law enforcement, regulators or courts, where required by law or to protect our legal rights.

A successor, in the event of a sale, merger or restructure, subject to equivalent protection.

We do not disclose your information to other customers. Where customers compete, data is separated at the database level and access is enforced on every request.

9. Overseas storage

Our service providers store and process data outside Australia, principally in the United States and Europe. By using the Service you consent to this transfer.

We take reasonable steps to ensure overseas recipients handle information consistently with the Australian Privacy Principles. However, you acknowledge that we may not be able to enforce Australian privacy law against them, and that they may be compelled to disclose information under the laws of their jurisdiction.

10. Security

We protect information with encryption in transit, hashed password storage, session management with server-side revocation, access controls enforced on every request, and database-level separation between customer organisations.

Access by our personnel is limited to what is necessary, and staff are instructed on their obligations.

No system is completely secure, and we cannot guarantee absolute security.

If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

11. Retention

Account information — while your account is active, and for a reasonable period afterwards for legal, tax and record-keeping purposes.

Usage and technical logs — for a limited period, for security and operational purposes.

Communications — for a reasonable period after the matter concludes.

Recruitment information — for a reasonable period after the process concludes, unless you ask us to delete it sooner.

Information you supply — deleted or returned on request when your account ends.

Vessel observation data — our archive of AIS observations, published schedules and derived records is retained indefinitely as a historical record. It is not personal information about you, and it is not deleted when an account closes.

We destroy or de-identify personal information when it is no longer needed, unless we are required to keep it.

12. Access, correction and closing your account

You may access and correct your personal information through your account, or by contacting us.

You may request a copy of the personal information we hold about you. We will respond within a reasonable period and will explain any refusal in writing.

You may close your account at any time by contacting us. We will delete or de-identify your personal information, subject to any legal obligation to retain it.

13. Complaints

If you believe we have breached the Australian Privacy Principles, contact us first — we will investigate and respond within a reasonable period.

If you are not satisfied, you may complain to the Office of the Australian Information Commissioner:

oaic.gov.au · 1300 363 992 · GPO Box 5218, Sydney NSW 2001

14. Changes

We may update this policy. Material changes will be notified through the Service or by email. Where required, we will seek your consent.

15. Contact

Industry Apps, 18 Edgar St, Port Hedland WA 6721
contact@industryapps.com.au