Last updated: 23/10/2026

1. Who we are
This Privacy Policy explains how Leadship collects and uses personal data when you visit leadship.com or contact us about our services.
The controller responsible for your personal data is Leadship Group Ltd, Arch. Makariou III & 1–7 Evagorou, MITSI 3, 1st Floor, Office 102A, 1065 Nicosia, Cyprus.
Leadship also operates through Leadship Ltd, at the same Nicosia address; Leadship Hellas Single Member PC, 10 Antoniou Ampatielou Str., 18536 Piraeus, Greece; and Leadship Design & Consulting Ltd, Unit 2, Leavesden Lodge, 1A Leavesden Road, Watford WD24 5FR, United Kingdom. Together these are "Leadship", "we" or "us". When one of these companies handles your enquiry, it is also responsible for your data.
This policy covers website visitors, people who contact us, and our clients, suppliers and partners. It does not cover our own employees.

2. Personal data we collect
• Contact and enquiry data you give us when you email, call or use a contact form: name, email address, phone number, company, job title and the content of your message.
• Business contact data about people at our clients, suppliers and partners, collected in the course of a project or contract.
• Job applications you send us: CV, cover letter and the details in them.
• Technical data collected automatically when you visit the website: IP address, browser type and version, device and operating system, pages visited, and date and time of the visit.
We do not ask for sensitive data (such as health or religious beliefs). Please do not send it to us.

3. How we use your data and why
We only use your data where the GDPR (and, for our UK company, the UK GDPR) gives us a legal basis:
• Reply to your enquiry and prepare a proposal. Data: contact and enquiry data. Legal basis: steps before a contract (GDPR Art. 6(1)(b)), and our legitimate interest in answering business enquiries (Art. 6(1)(f)).
• Deliver projects and manage contracts with clients and suppliers. Data: business contact data. Legal basis: performance of a contract (Art. 6(1)(b)).
• Keep project records for the working life of the vessels we design. Data: business contact data in project emails, drawings and contracts. Legal basis: our legitimate interest in supporting clients with later modifications and in defending legal claims (Art. 6(1)(f)).
• Assess job applications. Data: job application data. Legal basis: steps before a contract (Art. 6(1)(b)), and consent where we keep your CV for future roles (Art. 6(1)(a)).
• Run and secure the website, and detect misuse. Data: technical data. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f)).
• Use functional, analytics and marketing cookies. Data: technical data and cookie identifiers. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time through Cookie Settings.
• Keep accounting and tax records, and establish or defend legal claims. Data: any of the above, as needed. Legal basis: legal obligation (Art. 6(1)(c)), and our legitimate interest in protecting our rights (Art. 6(1)(f)).
We do not sell your data, send marketing emails without your consent, or make decisions about you by automated means.

4. Cookies
We use strictly necessary cookies that the website needs to work and to remember your cookie choice. These do not need your consent.
Our cookie banner lets you choose which cookies to allow. Essential cookies are always on; functional, analytics and marketing cookies are set only if you accept them, and the site works without them. You can change your choice at any time through the Cookie Settings button on the site, or block cookies in your browser.
Our website runs on Wix, which sets these strictly necessary cookies:
• XSRF-TOKEN: fraud and security protection (session)
• hs: security (session)
• svSession and wixSession: security, stability and core site function (12 months)
• SSR-caching: page rendering performance (24 hours)
• TS*: attack detection (session)
• bSession: measuring system effectiveness (24 hours)
• fedops.logger.sessionId: tracking site errors (12 months)
• _wixAB3|*: site experiments (6 months)
• server-session-bind and client-session-bind: API protection (session)
• oAuthState: identification (session)
• sec-fetch-unsupported: detects browser limits on security features (session)
If you accept non-essential cookies, third-party services embedded on our site, such as YouTube, Google Maps or analytics tools, may set their own cookies. Their cookie use is explained in those providers' own privacy policies.

5. Who we share it with:
• Other Leadship companies, so the right office can handle your enquiry or project.
• Service providers who process data for us under contract, such as our website host (Wix.com), email and IT providers (for example Microsoft 365). They may only use it on our instructions.
• Professional advisers such as accountants, auditors and lawyers.
• Authorities and courts, when the law requires it.
• A buyer or successor, if all or part of our business is reorganised or sold.

6. Transfers outside the EEA
Our UK office and some service providers are outside the European Economic Area. Transfers to the UK rely on the European Commission's adequacy decision for the UK (Commission Implementing Decision (EU) 2025/2574, valid until 27 December 2031). Other transfers rely on another adequacy decision (such as for Israel, where Wix is based, or the EU–US Data Privacy Framework) or the Commission's Standard Contractual Clauses.

7. How long we keep it
• Enquiries that do not lead to work: 2 years after our last contact.
• Project records: for the working life of the vessels involved, which can be several decades, because they are needed for later modifications and legal claims. Personal details not needed for the project record are removed once no longer needed.
• Accounting and tax records: as long as tax and company law in the relevant country require.
• Job applications: 12 months after the role is filled, or longer if you agree.
• Website technical logs: kept by our website host, Wix, under its own retention policy.

8. Your rights
You have the right to:
• access the personal data we hold about you and get a copy;
• have inaccurate data corrected;
• have your data deleted, or its use restricted;
• receive data you gave us in a portable format;
• object to our use of your data based on legitimate interests;
• withdraw consent at any time, where we rely on it.
To use any of these rights, email info@leadship.com. We will reply within one month and may ask you to confirm your identity first.
If you have a concern, please contact us first so we can try to resolve it. You can also complain to a data protection authority, in particular where you live or work:
• Cyprus: Commissioner for Personal Data Protection
• Greece: Hellenic Data Protection Authority
• United Kingdom: Information Commissioner's Office

9. Security
We protect personal data with technical and organisational measures, including access controls, encryption and multi-factor authentication. No system can be completely secure, but we will notify you and the authorities of a breach where the law requires.

10. Children
Our website is for businesses and is not aimed at children. We do not knowingly collect data from anyone under 16.

11. Other websites
Our website may link to other sites, such as LinkedIn and YouTube. We are not responsible for their privacy practices, so please read their policies.

12. Changes to this policy
We may update this policy. The current version is always on this page, with its date at the top. We will highlight significant changes on the website.

13. Contact us
• Email: info@leadship.com
• Post: Leadship Group Ltd, Arch. Makariou III & 1–7 Evagorou, MITSI 3, 1st Floor, Office 102A, 1065 Nicosia, Cyprus