Legal Document

Privacy
Policy

Effective: 20 July 2026
Last updated: 20 July 2026
Version: 1.1
Contents

Plain English summary: QUAYLINE collects only what it needs to run the platform. Your agency's operational data belongs to you. We do not sell your data. We do not share it with anyone except the infrastructure providers that keep the platform running. You can request deletion of your data at any time.

Section 01

Who We Are

QUAYLINE™ is a maritime port call management platform operated by Quayline Innovations, a business registered in Kenya under the Registration of Business Names Act (Business No. BN-L3SMO7B2), Mombasa, Kenya.

In this policy, "QUAYLINE", "we", "us", and "our" refer to Quayline Innovations and the QUAYLINE platform. "You" and "your" refer to the agency, organisation, or individual accessing the platform.

For the purposes of applicable data protection law, Quayline Innovations is the data controller for personal data collected through the QUAYLINE platform and website.

Data Controller
Company: Quayline Innovations (BN-L3SMO7B2)
Jurisdiction: Mombasa, Kenya
Platform: quayline.africa
Section 02

What This Policy Covers

This Privacy Policy applies to:

This policy does not cover third-party websites or services that may be linked to from the QUAYLINE platform. Those services have their own privacy policies.

Important: QUAYLINE is a business-to-business (B2B) platform. The primary users are ship agencies and their staff. If you are an individual whose data has been entered into QUAYLINE by a ship agency, the agency is responsible for informing you of how your data is handled.

Section 03

Information We Collect

We collect information in three ways: information you give us directly, information generated by your use of the platform, and information provided by your agency administrator.

3.1 Account and identity information

3.2 Operational data entered into the platform

3.3 Automatically collected data

3.4 What we do NOT collect

Section 04

How We Use Your Information

We use the information we collect for the following purposes, each of which has a lawful basis under applicable data protection law:

We do not use your data for advertising, profiling, or sale to third parties. Ever.

Section 05

How We Store and Protect Your Data

The security of your operational data is a first-class concern for QUAYLINE. The following controls are in place:

Our infrastructure is hosted on cloud services with industry-standard security certifications. We conduct periodic security reviews and update our controls as threats evolve.

Data breach notification: In the event of a data breach affecting your personal data, we will notify you and any applicable regulatory authority within 72 hours of becoming aware of the breach, in accordance with our legal obligations.

Section 06

Data Sharing and Disclosure

We do not sell your data. We do not share your data with advertisers or data brokers. We share data only in the following limited circumstances:

6.1 Infrastructure providers

We use the following third-party infrastructure providers to operate the platform. These providers process data on our behalf under strict data processing terms:

6.2 Client portal links

When your agency issues a client portal link for a port call, the recipient of that link can view the specific port call data associated with that link. They cannot see any other data. The agency administrator controls what data is shared via these links.

6.3 Legal requirements

We may disclose data if required to do so by law, court order, or regulatory authority. We will notify you of any such request unless legally prohibited from doing so.

6.4 Business transfers

If QUAYLINE or Quayline Innovations is acquired, merged, or sold, your data may transfer to the new entity. We will notify you before this occurs and you will have the right to request deletion of your data.

Section 07

Data Retention

We retain data for as long as necessary to provide the platform and comply with our legal obligations:

On expiry of the applicable retention period, data is securely deleted or irreversibly anonymised.

Section 08

Your Rights

Depending on your location, you may have the following rights regarding your personal data. We will respond to all valid requests within 30 days.

To exercise any of these rights, contact us at hello@quayline.africa. We may need to verify your identity before processing your request.

Agency administrators: If you are an agency administrator, you are responsible for managing the data rights of your staff within the platform. You can add, edit, or remove user accounts at any time from the Users section of the dashboard.

Section 09

Cookies and Tracking

The QUAYLINE platform uses HttpOnly cookies to maintain your authenticated session. These cookies are inaccessible to browser scripts and are cleared when your session ends or you sign out.

The QUAYLINE marketing website may use minimal analytics to understand aggregate traffic. We do not use advertising cookies, third-party tracking pixels, or cross-site tracking technologies.

We do not use cookies for advertising or share browsing data with third parties.

Section 10

Third-Party Services

The QUAYLINE platform integrates with the following third-party services. Each has its own privacy policy:

We review our third-party providers periodically. If we add new providers that process personal data, this policy will be updated.

QUAYLINE does not integrate with social media platforms, advertising networks, or data brokers.

Section 11

Children's Privacy

QUAYLINE is a professional B2B platform intended exclusively for use by maritime industry professionals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18.

If you believe a person under 18 has provided personal data to QUAYLINE, please contact us at hello@quayline.africa and we will delete it promptly.

Section 12

International Data Transfers

QUAYLINE is operated from Kenya and serves clients across Africa and the Indian Ocean region. Your data may be stored on infrastructure located outside your home country.

Our primary database infrastructure is located in Asia-Pacific. Our platform hosting infrastructure uses a global edge network.

Where data is transferred internationally, we ensure appropriate safeguards are in place, including:

By using QUAYLINE, you acknowledge that your data may be transferred to and processed in countries outside your own. We take all reasonable steps to ensure your data is treated securely regardless of where it is processed.

Section 13

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

Your continued use of QUAYLINE after the effective date of any changes constitutes acceptance of the updated policy. If you do not agree to the changes, you may close your account before the effective date.

Previous versions of this policy are available on request by emailing hello@quayline.africa.

Section 14

Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact us:

Privacy Contact
Subject line: Privacy Request — [your name or agency]
Response time: Within 30 days of receipt

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. In Kenya, the supervisory authority is the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.

For clients in other African jurisdictions, you may contact your national data protection authority. Where no national authority exists, the principles of the AU Malabo Convention on Cyber Security and Personal Data Protection (in force June 2023) apply.