PORTIQ — Maritime Intelligence Platform Last Updated: May 4, 2025
1. WHO WE ARE
PORTIQ is operated by MAH GROUP IC LTD, a company registered in England and Wales.
- Registered Name: MAH GROUP IC LTD
- Trading As: Ships Parts Turkey
- Registered Address: Suite 10543, 5 Brayford Square, London, E1 0SG, United Kingdom
- Contact Email: info@shipspartsturkey.com
- Website: www.shipspartsturkey.com
As the operator of PORTIQ, MAH GROUP IC LTD acts as the Data Controller in respect of personal data collected through this application.
2. APPLICABLE LAW
This Privacy Policy is governed by and compliant with:
- UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, applicable because MAH GROUP IC LTD is registered in the United Kingdom.
- Turkish Personal Data Protection Law No. 6698 (KVKK), applicable to users residing in the Republic of Turkey.
Where both frameworks apply, we apply the higher standard of protection.
3. DATA WE COLLECT
3.1 Account & Profile Data
When you register for a PORTIQ account, we collect:
- First name and last name
- Email address
- Encrypted password (we never store passwords in plain text)
3.2 User-Generated Content
- Port Reports: Author name (which may be masked at your request), report content, and date of submission.
- Requests: Item or service name, ship name, desired region, requested date, quantity, description, and your contact email address. Note: your contact email is publicly visible on your request listing.
- Saved Ships: Vessel name, IMO number, flag state.
- Voyage Records: Voyage details you enter manually.
- Laytime Calculations: Port name, vessel name, dates, rates, and calculation results.
- Liked Ports: A record of ports you have marked as favourites.
3.3 Technical Data
- IP Address: Collected temporarily for rate-limiting purposes (to prevent spam). Not displayed to other users. Not retained beyond operational necessity.
- Push Notification Token: An Expo push token stored in your profile to deliver in-app notifications. This is not your device identifier and cannot be used to track you.
3.4 Data We Do NOT Collect
- GPS or precise location data
- Device identifiers (IMEI, IDFA, etc.)
- Browsing history outside the app
- Biometric data
- Financial or payment information
4. HOW WE USE YOUR DATA
| Purpose | Legal Basis (UK GDPR) | Legal Basis (KVKK) |
|---|---|---|
| Providing and operating the app | Contract (Art. 6(1)(b)) | Art. 5(2)(c) |
| User authentication and account security | Legitimate interest (Art. 6(1)(f)) | Art. 5(2)(f) |
| Displaying your public requests and reports | Consent (Art. 6(1)(a)) — you are warned before posting | Art. 5(1) |
| Sending push notifications | Consent (Art. 6(1)(a)) — you grant permission on device | Art. 5(1) |
| Rate limiting and abuse prevention | Legitimate interest (Art. 6(1)(f)) | Art. 5(2)(f) |
| Responding to your enquiries | Legitimate interest (Art. 6(1)(f)) | Art. 5(2)(f) |
5. PUBLIC CONTENT — IMPORTANT NOTICE
When you post a Request on PORTIQ, the following information becomes publicly visible to all users of the application:
- The type of request (service or spare part)
- Item or service name
- Ship name (if provided)
- Desired region
- Requested date
- Description
- Your contact email address
You are shown an explicit confirmation prompt before any request is published. By proceeding, you consent to this public disclosure. You may delete your requests at any time through the “My Requests” section.
When you post a Port Report, your name is displayed. You may choose to hide your real name by enabling the “Hide Name” toggle, which replaces your name with a masked version.
6. THIRD-PARTY SERVICES
We use the following third-party services. Each has its own privacy policy.
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase (supabase.com) | Database, authentication, and cloud functions | Account data, all user content |
| Expo (expo.dev) | Push notification delivery | Push notification token |
| Open-Meteo (open-meteo.com) | Weather data for port conditions | Port coordinates only (no personal data) |
| Marine API (marine-api.open-meteo.com) | Wave and swell data | Port coordinates only (no personal data) |
| OpenStreetMap / CARTO | Map tiles | Your IP address (standard web request) |
| ipify.org | IP address detection for rate limiting | Your IP address |
| Resend (resend.com) | Transactional email (password reset) | Your email address |
We do not sell your data to any third party. We do not use your data for advertising purposes.
7. DATA RETENTION
| Data Type | Retention Period |
|---|---|
| Account and profile data | Until account deletion |
| Port reports and comments | Until deleted by user or removed by moderation |
| Public requests | Until deleted by user |
| Saved ships, voyages, laytime records | Until deleted by user or account deletion |
| IP addresses (rate limiting) | Not stored persistently; used only in real-time checks |
| Push notification tokens | Until account deletion or token renewal |
When you delete your account, all personal data associated with your account — including your profile, saved ships, voyage records, laytime calculations, requests, port reports, and liked ports — is permanently deleted from our systems within a reasonable timeframe.
8. YOUR RIGHTS
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data (“right to be forgotten”)
- Restrict processing of your data
- Data portability
- Object to processing based on legitimate interest
- Withdraw consent at any time (where processing is consent-based)
- Lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk
Under KVKK, you have the right to:
- Learn whether your personal data is being processed
- Request information if it has been processed
- Learn the purpose of processing and whether it is used accordingly
- Know the third parties to whom data is transferred
- Request rectification if incomplete or inaccurate
- Request deletion or destruction under the conditions specified in Article 7
- Object to a result that is to your detriment arising from the analysis of processed data solely through automated systems
- Claim compensation for damages arising from unlawful processing
To exercise any of these rights, contact us at: info@shipspartsturkey.com
We will respond within 30 days (UK GDPR) or 30 days (KVKK).
9. PUSH NOTIFICATIONS
PORTIQ may send you push notifications about new maritime requests and platform updates. Notifications are delivered via Expo’s push notification infrastructure.
- You will be asked for permission before notifications are enabled.
- You may disable notifications at any time through your device settings.
- We do not send marketing or advertising notifications.
10. CONTENT MODERATION
PORTIQ employs automated profanity filtering on user-generated content. Additionally, users may flag inappropriate reports. Reports receiving a significant number of flags from different users may be automatically removed. Flagging data (which user flagged which comment) is stored for moderation purposes only and is not shared publicly.
11. CHILDREN’S PRIVACY
PORTIQ is intended for use by maritime and shipping industry professionals. The app is not directed at children under the age of 13 (or under 16 in the EU/UK). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us immediately at info@shipspartsturkey.com.
12. DATA SECURITY
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encrypted data transmission (HTTPS/TLS)
- Password hashing (managed by Supabase Auth)
- Row-level security policies on our database
- Access controls limiting who can access personal data
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to industry-standard levels.
13. INTERNATIONAL DATA TRANSFERS
Your data is stored on Supabase infrastructure, which may process data in the United States and European Union. Supabase complies with applicable data transfer mechanisms including Standard Contractual Clauses (SCCs). For more information, see Supabase’s privacy policy at supabase.com/privacy.
14. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Material changes will be communicated through an in-app notice or via email. The “Last Updated” date at the top of this page reflects the most recent revision. Continued use of the app after changes constitutes acceptance of the updated policy.
15. CONTACT & COMPLAINTS
MAH GROUP IC LTD (trading as Ships Parts Turkey) Suite 10543, 5 Brayford Square London, E1 0SG United Kingdom Email: info@shipspartsturkey.com Website: www.shipspartsturkey.com
For UK data protection complaints: Information Commissioner’s Office (ICO) — ico.org.uk — 0303 123 1113
For Turkish data protection complaints: Kişisel Verileri Koruma Kurumu (KVKK) — kvkk.gov.tr