Privacy notice
This notice explains what personal data Stonys Intelligence collects, why, where it is held and what rights you have. Stonys is built to hold as little personal data as possible: the record is about vessels and the prices published for them, not about people.
Who we are
Stonys Intelligence (Stonys Intelligence, Falmouth, England (company registration details are published here once the operating entity is incorporated)), the controller for the personal data described here. Contact: intel@stonysintelligence.com. Registration with the Information Commissioner's Office is in progress; the registration number is published here when issued.
What we collect, and why
- Access requests. Name, firm, role, email address and the decision you describe, submitted through the request-access form. Purpose: to assess and answer your request and, if accepted, to set up partner access. Lawful basis: steps at your request prior to a contract (UK GDPR Art. 6(1)(b)); for the assessment of fit, our legitimate interest in operating an invitation-only service (Art. 6(1)(f)). Retained for twelve months after the request is answered, or for the life of the partner relationship.
- Partner sign-in. A signed session token set as a cookie when a partner signs in. It holds no name or email; it identifies a session. Purpose: to serve the partner edition to an authorised session. Lawful basis: performance of the partner agreement (Art. 6(1)(b)). It expires with the session and is strictly necessary, so no consent banner is shown.
- Correspondence. Email you send us, held in our mailbox for as long as the matter is open and for six years afterwards where it concerns a contract or a correction (legitimate interest in keeping an accurate record of what we published and were asked to change).
- Technical logs. Our hosting provider records the network address and browser identifier of requests to the site for security and reliability, for a short period set by the provider. We do not run analytics, advertising pixels or tracking cookies.
Cookies and browser storage
The open surfaces set no cookies. Partner sign-in sets one session cookie, HttpOnly and Secure, which is strictly necessary to serve the partner edition and is not used for any other purpose. The Command Deck may keep a filter or a selected view in your browser's own storage; that stays on your device and is never sent to us. There are no analytics, advertising or tracking cookies, so no consent banner is shown.
What we do not collect
The market record holds vessel identifiers (IMO number, name, builder, length), the asking rates published for a vessel, the page they were read from and the date. It is built so that no owner's identity, no owning entity's legal name and no achieved transaction price is ever recorded for publication. Where a public page names a person (a broker, a charter manager, a captain), we do not extract that name; a short excerpt of the page around the published figure is kept for audit and may incidentally contain one, and it is not published or indexed.
Who processes data for us
- Cloudflare, Inc. (site hosting and edge security; United States with UK/EU points of presence; transfers under its data processing addendum and the UK Addendum to the EU standard contractual clauses).
- Supabase, Inc. (database hosting for the market record; United States-headquartered).
- GitHub, Inc. (code and the committed record; United States).
- FormSubmit (relays the access-request form to our mailbox; United States). If the relay fails, your email client is opened instead and nothing is sent through FormSubmit.
- Google Workspace (our mailbox; Google, United States, under its standard terms and the UK Addendum).
- OpenFreeMap (map tiles on the Command Deck, built from OpenStreetMap data). Your browser requests tiles directly from tiles.openfreemap.org, which sees your address like any web server; we send it nothing else.
We do not sell personal data and we do not share it with anyone else.
International transfers
Our processors are established in the United States. Transfers rely on the UK International Data Transfer Addendum to the EU standard contractual clauses incorporated in each provider's terms and, where the provider is certified, on the UK-US Data Bridge.
Your rights
You may ask for a copy of the personal data we hold about you, for it to be corrected or deleted, for processing to be restricted or objected to, and for data you gave us to be returned in a portable form. Write to intel@stonysintelligence.com; we answer within one month. You may complain to the Information Commissioner's Office (ico.org.uk) and, if you are in the European Union, to your local supervisory authority.
Changes
This notice is dated 23 October 2026. Changes are recorded here with their date.