Privacy policy

Privacy Notice

Galileo Maritime Academy

Galileo Maritime Academy (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, store and share personal data when you interact with us, including when you visit www.galileomaritimeacademy.com, contact us, or book training with us.

This Privacy Notice is provided in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and applicable data protection laws.

1. Data controller

Galileo Maritime Academy is the Data Controller responsible for your personal data

Contact details:
Galileo Maritime Academy
Email: info@galileomaritimeacademy.com

2. Personal data we collect

We may collect the following categories of personal data:

• Identity data: name, date of birth, nationality
• Contact data: email address, telephone number, postal address
• Booking & training data: course bookings, attendance records, certification details, correspondence
• Payment data: invoices, payment status (payments are processed via third-party payment providers; we do not store full card details)
• Technical data: IP address, browser type, device information, usage statistics
• Marketing data: communication preferences, consent records
• Application data: CVs and information submitted for employment or freelance instructor roles
• Special category data (where required): medical fitness declarations required for maritime training or certification

We collect data directly from you or from authorised third parties (e.g. accrediting bodies).

3. How we use your personal data & lawful basis

Under GDPR, we must have a lawful basis to process your data. We rely on the following:

You may withdraw consent at any time where processing is based on consent.

4. Special category data

Where required for training or certification, we may process special category data (such as medical fitness information). This data is processed only where strictly necessary, stored securely, and handled in accordance with Article 9 GDPR

5. Disclosure of personal data

We may share your personal data with:

• Accredited training and certification bodies (e.g. MCA, IYT)
• IT, CRM, website hosting, analytics and email service providers
• Payment service providers
• Professional advisers (accountants, auditors, legal advisers)
• Regulatory authorities where legally required

All third parties are required to process data securely and in accordance with data protection law.

6. International data transfers

Some service providers may be located outside the UK or EU. Where personal data is transferred inter

nationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent lawful mechanisms.

7. Data retention

We retain personal data only for as long as necessary:

• Training and certification records: retained in line with regulatory requirements
• Financial records: retained for statutory accounting periods
• Marketing data: retained until consent is withdrawn
• Recruitment data: retained for a limited period following the recruitment decision

8. Your rights under GDPR

You have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Request erasure of your data
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local EU supervisory authority

Requests are handled free of charge, unless manifestly unfounded or excessive.

9. Marketing communications

We will only send marketing communications where you have provided consent or where permitted by law. You can opt out at any time by using the unsubscribe link or contacting us directly.

10. Cookies

Our website uses cookies to ensure functionality, analyse usage, and support marketing activities. Non-essential cookies are used only with your consent.

11. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. While we take reasonable steps to secure data, no transmission over the internet can be guaranteed as completely secure.

12. Links to third-party websites

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those websites.

13. Updates to this Privacy Notice

We may update this Privacy Notice from time to time. The latest version will always be published on our website.

14. Contact

If you have questions about this Privacy Notice or your personal data, please contact:

Privacy Officer
Galileo Maritime Academy
📧 info@galileomaritimeacademy.com