Who is responsible for the information?
The ocean ice service operator manages registration, subscription and platform security information to provide the service. A subscribing business is responsible for the lawful collection and use of customer, supplier and employee information it enters; we process that information to provide the service under lawful instructions and the relevant agreement.
The ocean ice trade name does not replace the legal operator details in your subscription agreement. Published contact details appear at the end of this page when supplied by the operator.
What information is collected?
Registration and account information includes the business and owner names, email, phone, chosen address, plan and subscription details, and information needed to verify email and administer access.
Business information entered by your users can include parties, products, invoices, vouchers, stock records, journals, reports and attachments, depending on your use of the service.
Necessary technical and security information can include IP addresses, session identifiers, browser or device identifiers where needed, request and login times, and activity records. These support abuse prevention, account protection and operational troubleshooting; they are not used to monitor activity outside the service.
Purposes and legal basis
Information is processed to create and verify accounts, provision workspaces, provide features, manage subscriptions and support, to perform the contract or requested steps before entering it.
Necessary information also supports service security, abuse prevention and legal obligations. Separate consent will be requested before another purpose that requires it. Consent may be withdrawn as applicable, without affecting prior lawful processing.
Access and recipients
Business users access information according to their accounts, permissions and branch scope. Authorized support staff may process information needed for a support request or service protection, subject to access controls and need.
Hosting, email and backup providers may process information necessary to operate the service, subject to appropriate arrangements and controls. This policy does not claim that data is hosted exclusively in any particular country. Applicable transfer requirements must be addressed for the deployment environment and its providers.
Personal information is not sold for marketing. Disclosure may be made when legally required or requested by a competent authority through lawful procedures.
Data and account protection
The platform uses separate business databases, permissions, session controls and audit records. Passwords are hashed, and selected sensitive connection information is encrypted. These controls work alongside server, transport, backup and recovery safeguards in the deployment environment.
No technical measure can guarantee absolute protection or a fixed security percentage. Controls are reviewed and incidents are handled under applicable procedures and obligations. Subscribers contribute through strong passwords, appropriate permissions and prompt reporting of unauthorized access.
Retention, export and deletion
Information is retained as needed for service purposes, the agreement, legal obligations and dispute resolution, taking financial record requirements into account. Trial or subscription expiry does not automatically delete all records immediately.
You may request a copy, correction or lawful deletion. Deletion may be restricted or delayed to meet record-retention obligations, protect others or address lawful security and compliance needs. Backups are subject to an appropriate retention and removal cycle.
Your rights and requests
Depending on applicable law, rights may include information about processing, access and a copy, correction and updating, deletion, and withdrawal of consent where it is the legal basis, subject to legal exceptions and restrictions.
Send requests to the party responsible for the information with enough detail to identify the request. Appropriate identity verification may be required, without requesting your password. Requests are handled within applicable statutory periods. Customers and employees of subscribing businesses should contact that business first; we assist within the service scope.
Where a complaint cannot be resolved through appropriate channels, it may be referred to the competent data protection authority under the law applicable to the request.
Links, changes and contact
External websites you choose to visit have their own policies. This page is updated when processing changes, and material changes are communicated appropriately. The published operator and contact information below are the reference for privacy requests.
Contact and privacy requests
Service operator: ocean ice
Contact support using the channel in your subscription agreement. If your request concerns information entered by a subscribing business, contact that business first as the party responsible for that information.