Privacy Policy

Last updated: 13 July 2026

This Privacy Policy explains how Karewood Management Limited collects and processes personal data through this website in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, or “GDPR”) and other applicable data protection laws.

1. Data Controller

Karewood Management Limited
64 Georgiou Griva Digeni, Office 32
1095 Nicosia
Cyprus

Privacy-related requests may be submitted through the Corporate & Investment contact form available on this website.

2. Personal Data We Process

When you use a contact form, we process the information you provide, which may include your name, company, email address, subject, message and the type of enquiry. We may also process limited technical data required for website security and delivery, such as IP address, browser and device information, date and time of access, server logs and security verification data.

3. Purposes and Legal Bases

We process personal data to:

  • respond to enquiries and manage business communications;
  • take steps at your request before entering into a contract and administer existing business relationships;
  • route vessel-related enquiries to the appropriate operating entity;
  • maintain website security, prevent spam and protect our systems;
  • comply with applicable legal and regulatory obligations.

The applicable legal bases are Article 6(1)(b) GDPR where processing is necessary for pre-contractual steps or performance of a contract, Article 6(1)(f) GDPR for our legitimate interests in operating the website and managing business communications, Article 6(1)(c) GDPR where processing is required by law, and Article 6(1)(a) GDPR where consent is specifically requested.

4. Recipients

Operational enquiries may be shared with Karewood Management OU in Estonia. Personal data may also be processed by service providers supporting website hosting, security, email delivery and technical maintenance, including the configured SMTP provider and Cloudflare Turnstile. Such providers process data only as necessary to provide their services and subject to applicable contractual and legal safeguards.

5. International Transfers

Some technology providers may process data outside the European Economic Area. Where this occurs, we rely on an applicable adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, as required by the GDPR.

6. Retention

Contact enquiries are generally retained for no longer than 12 months after the last substantive communication, unless a longer period is necessary for an ongoing business relationship, the establishment or defence of legal claims, or compliance with legal obligations. Technical and security logs are retained for the period reasonably necessary for security and troubleshooting. Email delivery logs may be retained according to the configured SMTP service and website administration settings.

7. Your Rights

Subject to applicable law, you may request access to, rectification or erasure of your personal data; restriction of processing; data portability; or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting processing carried out before withdrawal.

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus or with the competent supervisory authority in your country of residence.

8. Security

We use appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration or disclosure. No internet transmission or storage system can, however, be guaranteed to be completely secure.

9. Third-Party Services

The website uses Cloudflare Turnstile to protect forms from automated abuse. Website fonts are hosted on the same server as the website and are not requested from Google Fonts or another external font provider.

10. Changes to this Policy

We may update this Privacy Policy to reflect changes in legal requirements, website functionality or the services we use. The date of the latest revision is shown at the top of this page.