Privacy

1. Who is responsible

This website is published under the working name Helmwize. The legal operator, registration number and business address are not yet confirmed. Helmwize is a working name, not a confirmed incorporated company. The public domain for this site is not yet confirmed. A Data Protection Officer contact is not yet published. Privacy requests will be handled once a DPO and entity are confirmed. A general contact address is not yet published.

This notice covers the current informational website preview and direct communications about it. It does not govern a future customer platform or the processing of customer datasets, which require separate notices and agreements.

2. What this preview actually does

The enquiry form posts JSON to /api/lead. Until a destination is configured, the server responds that the form is not configured and nothing was sent. The page shows that refusal. It does not show a received message unless transport is confirmed. Values can remain visible in the open page until cleared or the page is closed. Browser autofill, form-restoration features, extensions and operating-system functions are controlled separately by you or their providers.

The demo uses illustrative records rather than your uploaded operational information. It does not connect to an AI model, ERP, vessel system, customer database or external messaging service. A displayed clarification draft is not sent.

The application does not include third-party analytics, advertising pixels, session replay or an external video-player embed. Display type (Switzer) and IBM Plex Mono are self-hosted with the website. Images and the intro film are served with the website. This description must be rechecked when the deployed website is changed.

The current preview is hosted by Vercel. That host can record request logs, including IP address, requested URL, time, browser or user-agent and referring page. Those logs are not an analytics product on this site, and this notice does not describe the site as free of all third-party processing.

3. Information involved in browsing

The page can store one browser local-storage preference, `hw-motion`, containing on or off, to remember the motion setting you select when you have not chosen "Do not remember this choice". It is not an account identifier and the current application code does not transmit it to us. When persistence is enabled it has no application-set expiry and remains until it is cleared or the browser removes it. Choosing "Do not remember this choice" removes the key and stops further local-storage writes until you enable remembering again. See the Cookie and Local Storage Notice for controls.

The approved hosting-provider register is not complete. Delivering the pages can still involve technical request information (IP address, requested URL, time, browser/user-agent, referring page and security events) at the current host. That is not the same as tracking analytics, but it can involve personal data.

4. Information you deliberately send outside the demo

If you email us or use another expressly published contact channel, we receive the contact details, message and attachments you choose to send. We use them to understand and respond to your enquiry, manage the resulting business discussion, keep appropriate records, prevent misuse and comply with applicable law. The public form does not currently deliver those fields because transport is not configured.

Do not send passports, NRIC/FIN numbers, crew health or payroll records, credentials, personal financial details, privileged documents or live security-sensitive vessel information through a public contact channel. Tell us that you need a secure exchange before sharing such material.

5. Purposes and lawful handling

We handle personal data for the purposes stated at collection, with consent where required, or where another basis is permitted by applicable law. We do not treat merely visiting the site as consent to unrelated marketing, model training or disclosure of confidential data. We limit handling to what is reasonably appropriate for the stated purpose.

We do not intentionally sell personal data collected through this website or share it with advertising networks. The current preview has no working newsletter. A later subscription requires its own clear choice. Enquiry information is not submitted by this preview to an AI provider for inference or training.

6. Service providers and disclosures

For an actual deployment or a direct business communication, only authorised personnel and approved service providers with a relevant need should receive personal data. The current host is Vercel. Other providers can include email, IT support and professional advisers once they are appointed. An approved provider register is not yet published.

We may disclose information where lawfully required, to address a security incident, or to establish, exercise or defend legal rights, subject to applicable safeguards. We do not promise that disclosures required by law can always be withheld or notified in advance.

7. Overseas processing

A Singapore working name does not mean that every server, support session or backup is in Singapore. Where personal data is transferred outside Singapore, we must satisfy applicable transfer requirements, including protection comparable to that required by the PDPA where relevant. Do not assume that reading this notice is blanket consent to unrestricted overseas processing.

8. Retention and security

We retain personal data only while it serves a legitimate business or legal purpose and cease retention or anonymise it appropriately when that purpose no longer applies. The website does not retain submitted form records in an application database because transport is not configured. Direct correspondence and hosting records follow a retention schedule that has not yet been published. A legal hold may require preservation of particular records.

We are responsible for reasonable security arrangements appropriate to personal data in our possession or control. No internet service is risk-free. We do not describe this notice as evidence of certification, a completed security audit or guaranteed protection. Where a personal-data breach occurs, we will assess it and notify the relevant authority and affected people when applicable law requires.

9. Your requests and choices

You may request access to personal data we hold about you and information about relevant use or disclosure, request correction of errors, withdraw consent with reasonable notice, or raise a concern. A Data Protection Officer contact is not yet published. Privacy requests will be handled once a DPO and entity are confirmed. Exceptions and verification requirements may apply. We may need proportionate information to verify a request; do not send identification documents unless we explain why they are necessary and provide a suitable channel.

We will respond to access requests as soon as reasonably possible and deal with corrections as soon as practicable. If unable to complete an applicable request within 30 days, we will inform you in writing within that period of when we expect to respond. Any permitted access fee will be explained before work is charged; correction requests are not charged.

Withdrawing consent may limit our ability to deal with a matter; we will explain relevant consequences. It does not undo lawful prior processing or require deletion of records that must be retained. You can ask for deletion, but Singapore law does not create an unconditional right to have every record erased. Additional rights may apply where other laws govern a particular activity.

You may raise an unresolved concern with Singapore's Personal Data Protection Commission. Contacting us first is encouraged, not a condition that removes an available regulatory remedy.

10. Children, other sites and changes

The website is intended for business audiences and is not directed at children. Please tell us if a child has provided personal information. We will assess and address it appropriately. Other sites or services linked in future have their own privacy practices.

We will update this notice when data handling materially changes and obtain additional consent where required. A revised publication does not retroactively authorise an unrelated use of previously collected data.

An effective date and last-updated date have not been set. Version: 1.0. These pages are draft notices for the current preview and are not a counsel-approved publication.