Privacy policy


Bermuda Maritime Academy Privacy Statement

Privacy Statement Introduction Welcome to the Privacy Statement for Bermuda Maritime Academy (collectively, “BMA, “our”, “we” or “us”). BMA is a not-for-profit, locally registered company and is committed to respecting and protecting the privacy and security of personal information in compliance with the Personal Information Protection Act 2016 ("PIPA"). This Privacy Statement outlines how we collect, use, and protect the personal information provided to us, as applicable. Our services are not intended for children. If you are a parent or a guardian and believe that your child has provided us with personal information, please contact us. We will take steps to delete such information from our records as soon as possible. PIPA considers a child to be under the age of fourteen (14). If for any legitimate and lawful reason BMA must collect personal information relating to a child, we will obtain the consent of a parent or guardian, or as permitted by law.

  1. Scope This privacy statement applies to personal information collected and processed by BMA in the context of our operations as provider of internationally recognized maritime training courses in Bermuda.

  2. Personal Information we Collect and how we use it How and What We Collect How We Use It Registering for, or seeking information on our courses: When you register interest for one of our courses on our platform, we will collect your name, address, telephone number, email address & date of birth. • Coordinating the provision of our services • Providing you with our services or products • Promoting our products or services (e.g. use of photographs, videos, brochures or other publications) • As may be required for any legal or regulatory purposes • As may be required as part of the services we procure from local or foreign service delivery partners, or where it is required for the purpose of performing such third-party services Sensitive Personal Information: gender, nationality, physical or mental disabilities We use this information to assess your application and eligibility to complete the selected training course(s). Course purchases: When you make a purchase with us, or on or through our platform we will collect your name, address, telephone number, email address and payment card information, including credit card number, expiration date and security code. We use this information to process your request and communicate with you about your training. Where we have engaged a third-party processor to process payments on our behalf, which includes all purchases made through a platform, your payment information is sent directly to our third-party payment processor who will only use such information for the purpose of processing your payment.
    Social Media If you use the blog or comment feature on an online platform, or if you communicate with us through any of our social media (e.g. Facebook), you should be aware that any personal information you submit through comments or posts to the blog or other social networking forum can be read, collected, or otherwise used by anyone with access to the forum or who visits the URL of the web page on which the post or comment is posted.
    Financial Information Payments for our services are made directly via bank transfer, or via third party payment processors. BMA does not collect, use, or share any personal financial information. CCTV To protect our employees, customers, assets, and to prevent & detect crimes against our staff, clients, or facilities.

  3. Purpose of Collection We collect and process personal information for the following purposes: i. To facilitate efficiency for student registration processes; ii. To provide to training staff and training partners for course preparation and delivery; iii. To comply with legal and regulatory obligations; iv. To maintain secure and accurate accounting and inventory management; v. To communicate effectively with employees, suppliers, and business partners; vi. To protect the safety of our employees and students.

  4. Legal Basis for Processing We process personal information based on one or more of the following legal grounds: i. Consent, where required. ii. Fulfillment of contractual obligations. iii. Compliance with legal or regulatory requirements. iv. Legitimate interests pursued by BMA, such as business operations.

  5. Security of Personal Information At BMA we take the protection of your personal information seriously. We make every reasonable effort to prevent unauthorized use, disclosure, loss or theft of your personal information. Authorized associates who have access to your personal information are made aware of the importance of keeping it confidential. Where we use service providers who have access to your personal information, we select them carefully and require them to have privacy and security standards that are comparable to ours. We use contracts and other measures with our service providers to ensure that they maintain the confidentiality and security of your personal information and to prevent such information from being used for any other purpose. We implement appropriate technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. These measures include: i. Secure storage systems. ii. Access controls and authorization protocols. iii. Regular data security assessments. iv. Encryption of our website for the transmission of data that includes personal information.

  6. Sharing of Personal Information The Bermuda Maritime Academy will, or may disclose your personal information to the following individuals or organizations: i. With our service providers or contractors who provide training, and process data on our behalf under strict confidentiality and security obligations. This includes the Bermuda College, the Bermuda Fire Life Saving Association, the U.K. Maritime Coastguard Agency, Seascope Maritime Training, and service delivery contractors, partners or service delivery providers that we may use to deliver training. The types of individuals or organizations that we may provide your personal information are as follows: • Where required by law such as the Bermuda Government, or regulatory bodies • Our suppliers, & service providers locally & overseas • Professional advisers, such as legal, accounting, & other advisers • Directors, authorized business associates, or employees • Marketing or advertising advisers, service providers, website hosts, consultants • Third party outsourcing, cloud based services & other IT/data processing service providers

  7. Rights of Individuals To obtain access to, make a correction to, or delete your personal information, please submit a written request to the Privacy Officer, which must include sufficient information to enable us, with reasonable effort, to identify the personal information that is relevant to your request. Your request must also include all necessary contact information for us to respond to your request. You will be contacted by one of our privacy administrators promptly to confirm receipt of your request, but no more than three (3) business days after we have received your request. Please note the following information associated with any request we receive from you: • We require your accurate and complete name, & contact information; • We will confirm receipt of your enquiry or instructions within three (3 business days after we have received same; • We will take a reasonable amount of time to process your enquiry or instructions and initially respond to your request, but usually no more than 45 days (depending upon the nature and complexity of your request) The BMA reserves all of its rights and protections afforded to it under PIPA.

  8. Protecting your Data Please be aware that no data security measures can guarantee complete security. You should also take steps to protect against unauthorized access to your password, phone and computer by, among other things, logging off after using a shared computer, choosing a robust password that nobody else knows or can easily guess and keeping your login and passwords secure and not sharing them. If you do not want BMA to know any particular information about you, you should not include that information in anything you submit to us.

  9. Contact Information If you have questions about this Privacy Statement or wish to exercise your rights under PIPA, please contact us at: Bermuda Maritime Academy Attn: Privacy Officer 13 Malabar Road, Sandys Bermuda MA 01 EMAIL: admin@bermudamaritimeacademy.com
    You may also enquire with the office of the Privacy Commissioner by contacting Privcom@privacy.bm with any questions or concerns about your personal information.

  10. Changes to this Privacy Statement The Bermuda Maritime Academy reserves the right to update this privacy notice at any time and as may be prudent or necessary to reflect changes in our privacy practices or legal requirements. Effective Date: 1st January, 2025