Controller: SM Caribbean B.V., trading as SM Caribbean. Contact: support@smcaribbean.com.
What information we handle
We handle contact details and enquiry text when you contact us; account, organization and authentication details when you register; vessel, port, timing, service and quote information when you request bunkering or waste removal; and limited Shopify order information when an order is linked to an authorized portal organization.
Customer document uploads are disabled until a malware-scanning process is approved. Do not send payment-card details, passwords or unnecessary identity documents through public forms.
Why we use it
- Respond to general enquiries and maintain the related CRM record.
- Verify accounts, control organization access and protect portal sessions.
- Review service requests, prepare quotes and keep an auditable request history.
- Show authorized customers purchase summaries linked from Shopify.
- Secure, operate and diagnose the website and portal.
- Load optional analytics or marketing technology only after the matching consent.
Systems and providers
- Vercel
- Hosts and delivers the website and application.
- Supabase
- Provides authentication, database and controlled portal storage.
- Shopify
- Provides the product catalogue, cart, checkout and authoritative order record.
- Zoho CRM
- Holds general-enquiry leads for follow-up.
- Resend
- Sends transactional and internal notification email.
- Cloudflare Turnstile
- Helps protect public and authentication forms from automated abuse.
- Usercentrics
- Stores privacy choices and controls optional services.
- Google and Meta
- Receive limited, non-identifying analytics or marketing events only after the relevant consent.
Cookies and local storage
Essential cookies support authentication, security, cart and consent choices. Optional functionality, analytics and marketing technologies are off by default. You can change your choice through Privacy settings.
Sharing and transfers
Information is shared only with providers and authorized staff needed to operate the relevant workflow. Some providers may process information outside Sint Maarten. The applicable contractual and legal transfer safeguards require legal review before publication.
Security, retention and your choices
Access is restricted by account, organization and staff role. Security controls reduce risk but cannot guarantee absolute security. Specific retention periods are not stated in this draft because they have not yet been approved; information should be kept only as long as needed for the relevant operational, legal and security purpose.
You may ask to access, correct or delete information, object to or restrict certain use, or withdraw consent where consent is the basis. The exact statutory wording and complaint authority must be confirmed during legal review. Contact support@smcaribbean.com.
Draft date: 22 August 2026.