Privacy Policy
Last Updated: February 22, 2026
1. Introduction
Buga Marine Group, as the operator of BMG YACHT ISM (mobile application and web platform), respects the privacy of our users and is committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights.
2. Information We Collect
2.1 Personal Information
- Contact Information: First and last name, email address, phone number
- Account Information: Username, password (encrypted form), company details
- Vessel/Operations Data: Vessel information, brand, model, year, tonnage
- Documents and Forms: Files containing ISM documents, certificates, inspection records
- Tasks and Content: User-generated tasks, checklists, notes, and documents
2.2 Automatically Collected Information
- IP address, browser type, operating system, device information
- Usage statistics, app launch data, feature interactions
- Cookie data and session information
- Weather data retrieved from Google Cloud
3. How We Use Information
We use collected information for the following purposes:
- ✓ Providing and improving app services and features
- ✓ Managing user accounts and profiles
- ✓ Storing and synchronizing vessel operation data
- ✓ Providing technical support and customer service
- ✓ Security, fraud prevention, and abuse detection
- ✓ Complying with legal obligations
- ✓ Service and product development (using anonymized analytics)
4. Cookies and Tracking Technologies
Our platform uses cookies to enhance your experience:
- Essential: Site functionality, session management
- Analytics: Usage analysis via Google Analytics
- Functional: Remembering user preferences
5. Data Security
We implement industry-standard security measures to protect your personal data:
- 🔒 SSL/TLS encryption (in-transit)
- 🔒 Password hashing and salting
- 🔒 Secure data storage and regular audits
- 🔒 Access controls and role-based authentication
- 🔒 Offline-first synchronization and data integrity
6. Third-Party Sharing
We do not share your personal information with third parties for marketing or advertising purposes. Limited data sharing may occur in these situations:
- Legal requirements and court orders
- Service providers:
- Google Cloud (data storage and synchronization)
- Payment processors (third-party, direct integration)
- Hosting and CDN providers
- With your explicit informed consent
7. Your Rights
Under the General Data Protection Regulation (GDPR), Turkish Data Protection Law (KVKK), and similar regulations, you have the right to:
- Know whether your personal data is being processed
- Request information about data processing and its purposes
- Request correction, deletion, or destruction of your data
- Object to data processing activities
- Claim compensation if your rights are violated
To exercise these rights, contact:
📧 [email protected]
8. Data Retention
We retain your personal data for the period necessary to fulfill the processing purposes:
- Account Data: Throughout your account membership and until deletion request
- Vessel/Operation Data: Until deleted by user (offline synchronization)
- Legal Records: Longer retention due to legal requirements (up to 5 years)
- Log Data: Security and analytics purposes (up to 90 days)
9. Children's Privacy
Our services are intended for professional users (vessel operators, managers). We do not knowingly collect personal information from individuals under 18 years old. If we discover we have collected data from someone under 18, we will promptly delete the account.
10. Policy Changes
We may update this privacy policy from time to time. Significant changes will be communicated to you via email or app notification. The date of last update will be shown at the top of this policy.
11. Contact Us
If you have questions about this Privacy Policy, data processing, or your rights: