Privacy Policy​

Orchid Haze Maritime EOD Ltd​

Effective Date: 11.11.2025

​

Orchid Haze Maritime EOD Ltd (referred to as "we," "us," or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

1. Introduction and Contact Details

We are the Data Controller responsible for your personal data.

Company Name -Orchid Haze Maritime EOD Ltd

Registered Address -First Floor Office, 3 Hornton Place, London, United Kingdom, W8 4LZ

Data Protection Contact/Officer -Rick Graham

Email for Data Queries - operations@orchidhaze-maritime.com

 

 

2. The Personal Data We Collect

We collect and process various types of personal data depending on your relationship with us (e.g., client, supplier, employee, website visitor).

Category of Data -  Examples of Data Collected

Identity Data - Name, job title, company name.

Contact Data-  Email address, postal address, telephone numbers.

Financial Data - Bank account details, payment information for invoicing and procurement.

Technical Data - Internet Protocol (IP) address, browser type and version, time zone setting and location, operating system, and platform (from website use).

Professional Data - Certification details, qualifications, security clearances, medical fitness/diving records (specifically relevant to EOD and diving operations).

Communications Data - Records of correspondence and communication preferences.

 

 

3. How and Why We Use Your Personal Data (Lawful Basis)

We rely on the following lawful bases under UK GDPR to process your personal data:

Purpose of Processing, Type of Data and  Used Lawful Basis (UK GDPR Article 6)

Providing EOD/Maritime Services - Identity, Contact, Professional, Financial. Contract: Processing is necessary to perform a contract with you or to take steps before entering a contract.

Invoicing and Payments - Financial, Identity, Contact. Contract and Legal Obligation (e.g., tax law).

Client Communications - Identity, Contact, Communications. -Legitimate Interest: To keep in contact with clients and manage our relationship efficiently.

Compliance and Regulation -Professional (EOD/Diving Certs), Identity. - Legal Obligation: Necessary for compliance with maritime, health & safety, or EOD-specific regulations.

Recruitment & Personnel - Identity, Contact, Professional. -Contract (for employees) or Legitimate Interest (for prospective employees).

Marketing (if applicable) - Identity, Contact. -Consent (for direct marketing) or Legitimate Interest (for business-to-business marketing where permitted).

 

 

4. Who We Share Your Personal Data With

We may share your personal data with the following categories of recipients when necessary:

• Service Providers: IT and system administration service providers, professional advisors (e.g., lawyers, accountants).

• Clients/Contractors: To verify your professional credentials (e.g., EOD certification, medical fitness) to ensure compliance with contract requirements.

• Government/Regulatory Bodies: Where required by law, such as the Health and Safety Executive (HSE) or maritime regulators.

• Banking/Payment Processors: To process payments and manage financial transactions.

 

5. International Transfers

           We operate globally 

• We ensure your personal data is protected by ensuring at least one of the following safeguards is implemented: transferring to countries deemed adequate by the UK.

 

 

6. Data Security and Retention

• Data Security: We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. This includes encryption, firewalls, secure storage of hard-copy documentation and regular training for staff.

 

• Data Retention: We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, [Insert your retention policy, e.g., "customer contract records are kept for six years after the contract ends."].

 

7. Your Data Protection Rights

Under data protection law, you have rights regarding your personal data. You can exercise these rights by contacting us using the details in Section 1. Your rights include:

• Right to access: The right to ask us for copies of your personal information.

• Right to rectification: The right to ask us to correct information you think is inaccurate or incomplete.

• Right to erasure: The right to ask us to erase your personal information in certain circumstances.

• Right to restrict processing: The right to ask us to restrict the processing of your personal information in certain circumstances.

• Right to object to processing: The right to object to the processing of your personal information in certain circumstances.

• Right to data portability: The right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

 

8. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint directly to us using the contact details in Section 1.

You also have the right to lodge a complaint with the supervisory authority in the UK, the Information Commissioner's Office (ICO):

• The ICO's address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

• ICO Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk