Privacy Policy - EU

Last updated: November 2026   |   Version 2.0

1. Who we are

Ardmore Shipping Corporation and its subsidiaries ("Ardmore", "we", "us" or "our") respect your privacy and are committed to protecting your personal data. This Privacy Notice explains how we collect and use personal data about you, and the rights you have under the EU General Data Protection Regulation ("GDPR"), the Irish Data Protection Acts 1988 to 2018 and the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011 (S.I. 336/2011).

The data controller

The data controller responsible for personal data collected through www.ardmoreshipping.com and our social media pages is:

Ardmore Shipping Services (Ireland) Limited, a company registered in Ireland under company number 483972, whose registered office is at 1102 One Albert Quay, Cork, Ireland.

Where another Ardmore group company collects your personal data for its own purposes (for example, when you contract with that company directly), that company is the controller of that data and will tell you so when it collects it. The Ardmore group includes Ardmore Shipping Corporation, Ardmore Shipping (Bermuda) Limited, Ardmore Shipping Services (Ireland) Limited, Ardmore Shipping (Asia) Pte. Ltd., Ardmore Shipping (Americas) LLC, Ardmore MR Pool LLC, Ardmore Tanker Trading (Asia) Pte. Ltd. and Ardmore Trading (USA) LLC.

How to contact us about privacy

2. Scope of this notice

This notice applies to personal data we process about:

  • visitors to our website, www.ardmoreshipping.com;

  • people who contact us with an enquiry or subscribe to our news or investor updates;

  • individuals who work for our customers, charterers, suppliers, agents, brokers, service providers and other business contacts; and

  • people who interact with our pages on LinkedIn, Facebook, Instagram and X.

Section 9 explains how we use personal data about job applicants. This notice does not apply to our employees or seafarers, who receive separate privacy information.

3. The personal data we collect

Category

Examples

Identity and contact data

Name, job title, company or organisation, business email address, telephone number, postal address

Correspondence data

The content of enquiries, emails and other messages you send us, and our replies

Business relationship data

Details of the dealings between you or your organisation and Ardmore, including contracts, invoices and meeting records

Marketing preferences

Your subscriptions, consents and opt-out choices

Technical data

IP address, browser type and version, device type, operating system, pages visited, date and time of visit, referring website, and approximate location derived from your IP address

Cookie data

Cookie identifiers and similar data, as explained in our Cookie Policy (EU)

Social media data

Your public profile name, comments, messages and reactions on our pages, and aggregated page statistics provided by the platform

We do not intentionally collect special category data (such as data about health, religion or ethnicity) through our website. Please do not send us this type of information.

Where we get your personal data

  • Directly from you: when you complete a form, email or call us, subscribe to updates, or deal with us in the course of business.

  • Automatically: when you use our website, through server logs and, where you have consented, cookies.

  • From third parties: from your employer or organisation, shipbrokers and agents, industry events, publicly available sources such as company websites and LinkedIn, and social media platforms.

4. How and why we use your personal data

We only use your personal data where we have a lawful basis under Article 6 GDPR. The table below sets out each purpose and the lawful basis we rely on.

Purpose

Personal data used

Lawful basis

Responding to your enquiries and requests

Identity and contact data; correspondence data

Legitimate interests: responding to and managing enquiries about our business

Managing our relationships with customers, charterers, suppliers, agents, brokers and other business contacts

Identity and contact data; correspondence data; business relationship data

Legitimate interests: running our shipping business and communicating with the organisations we work with

Operating, maintaining and securing our website and IT systems

Technical data; strictly necessary cookies

Legitimate interests: providing a secure, functioning website and protecting our systems against misuse

Understanding how our website is used, through analytics, including identifying at company level which organisations visit our website

Technical data; cookie data

Consent, given through our cookie banner

Sending news and industry updates to people who have subscribed

Identity and contact data; marketing preferences

Consent

Sending relevant business updates to existing business contacts

Identity and contact data; marketing preferences

Legitimate interests: keeping existing business contacts informed about our services. We only do this where permitted by S.I. 336/2011, and you can opt out at any time

Sending investor and press release alerts you have signed up for

Name; email address; subscription preferences

Consent

Managing our social media pages and understanding their performance

Social media data

Legitimate interests: promoting Ardmore and engaging with our audience

Complying with legal, regulatory, sanctions, tax and accounting obligations

Any relevant data

Legal obligation

Establishing, exercising or defending legal claims

Any relevant data

Legitimate interests: protecting Ardmore's legal rights

Corporate transactions, such as a merger, acquisition or reorganisation

Any relevant data

Legitimate interests: carrying out and evaluating business transactions

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your interests, rights and freedoms. You can ask us for more information about this assessment.

Where we rely on consent, you can withdraw it at any time using the unsubscribe link in our emails, through our cookie settings, or by contacting privacy@ardmoreshipping.com. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

You are not required to give us your personal data. However, if you do not provide the information we ask for in a form, we may not be able to respond to your enquiry or provide the information you have requested. Where information is required by law or contract, we will tell you when we collect it.

5. Your right to object

You have the right to object at any time to our use of your personal data where we rely on legitimate interests, on grounds relating to your particular situation. You also have an absolute right to object at any time to the use of your personal data for direct marketing. If you object to direct marketing, we will stop. To object, email privacy@ardmoreshipping.com or use the unsubscribe link in any of our emails.

6. Marketing and news emails

We only send news and marketing emails where you have agreed to receive them, or where you are an existing business contact and the law permits us to contact you. Every email we send identifies Ardmore as the sender and includes a simple way to unsubscribe. If you unsubscribe, we keep a record of your email address on a suppression list so that we do not contact you again.

We use a third-party email service provider to send our emails. It may record whether you open our emails and click on links, so that we can understand which content is useful.

7. Cookies

Our website uses cookies and similar technologies. Strictly necessary cookies are used to make the website work and keep it secure. We only use other cookies, such as analytics cookies, if you agree to them through our cookie banner. You can accept or reject non-essential cookies, and change your choices at any time, by clicking "Cookie settings" at the bottom of any page. Full details are set out in our Cookie Policy (EU).

8. Our social media pages

When you visit or interact with our pages on social media, the platform also processes your personal data under its own privacy policy. For page statistics ("insights" or "analytics"), we are joint controllers with the platform, as follows:

  • Facebook and Instagram: joint controller with Meta Platforms Ireland Limited under the Page Insights Controller Addendum. Meta is responsible for providing you with information and handling your rights requests relating to Page Insights.

  • LinkedIn: joint controller with LinkedIn Ireland Unlimited Company under the LinkedIn Page Insights Joint Controller Addendum.

  • X: X Corp. / Twitter International Unlimited Company acts as an independent controller of the data it collects.

We only receive aggregated statistics from these platforms, together with any public profile information, comments and messages you choose to share with us. You can exercise your rights with the platform directly or with us, and we will pass on your request where necessary.

9. Job applicants

This section applies if you apply for a role with Ardmore by email or through LinkedIn, including if you send us a speculative application.

What we collect

  • your CV, cover letter and contact details;

  • your employment history, qualifications, skills and any other information you choose to include in your application;

  • notes from interviews and any assessments; and

  • references, which we will only request with your knowledge.

Please do not include special category data in your application (for example, information about your health, religion or ethnicity) unless it is relevant to the role or you need us to make adjustments to the recruitment process.

Why we use it and our lawful basis

We use your application to assess your suitability for the role, communicate with you, arrange interviews and, if you are successful, make you an offer. We do this because it is necessary to take steps at your request before entering into a contract of employment, and because we have a legitimate interest in recruiting suitable people. Where we need to confirm your eligibility to work, we do so to comply with a legal obligation.

If you apply through LinkedIn, LinkedIn also processes your data as an independent controller under its own privacy policy.

Who can see your application

Your application is accessed only by our HR team. It is stored securely in our email and IT systems, which are provided by Microsoft. We do not share your application with anyone else without your permission, unless we are required to do so by law.

How long we keep it

  • If you are successful, your application will form part of your employee record. How long we keep it will be set out in the terms agreed when you are hired and in our employee privacy information.

  • If you are unsuccessful, we will delete your application 6 months after the role has been filled, unless you agree that we can keep it for future opportunities.

Keeping your CV for future opportunities

We will only keep your CV to consider you for future vacancies if you give us your consent. If you agree, we will keep it for 12 months and may contact you about suitable roles during that time. You can withdraw your consent at any time by emailing privacy@ardmoreshipping.com, and we will delete your CV.

Your rights

You have the same data protection rights as set out in section 14. We do not use automated decision-making in our recruitment process.

10. Who we share your personal data with

We do not sell your personal data. We share it only where necessary for the purposes described in this notice, with:

  • other companies in the Ardmore group;

  • service providers who support our business, such as IT, website hosting, email, analytics and cookie management providers. They act on our instructions and are contractually required to protect your data;

  • professional advisers, such as lawyers, auditors and insurers;

  • regulators, authorities and courts, where required by law; and

  • potential buyers or investors in the event of a merger, acquisition or reorganisation.

11. International transfers

Ardmore is an international group with offices in Ireland, Bermuda, the United States and Singapore. Some of our service providers are also based outside the European Economic Area ("EEA"). As a result, your personal data may be transferred to and accessed from countries outside the EEA.

Whenever we transfer personal data outside the EEA, we make sure it is protected in one of the following ways:

  • the European Commission has decided that the country provides an adequate level of protection (for example, the United Kingdom);

  • for transfers to United States organisations certified under the EU-U.S. Data Privacy Framework, that certification;

  • for transfers within the Ardmore group, our intra-group data transfer agreement, which incorporates the European Commission's Standard Contractual Clauses; and

  • for transfers to other recipients, including in Bermuda, Singapore and the United States, the European Commission's Standard Contractual Clauses, together with any supplementary measures needed.

You can request more information about these safeguards, or a copy of them, by contacting privacy@ardmoreshipping.com.

12. How long we keep your personal data

We keep personal data only for as long as we need it for the purposes for which it was collected, including to meet legal, accounting, regulatory and reporting requirements.

Type of data

How long we keep it

Website enquiries

24 months after we have dealt with your enquiry

Business contact and relationship records

6 years after the end of the business relationship

Contracts, invoices and accounting records

6 years from the end of the financial year to which they relate, as required by law

Contracts signed as deeds

12 years after the contract ends

Newsletter and investor alert subscriptions

Until you unsubscribe, or for 2 years after you last engage with our emails. After that, we keep only your email address on a suppression list so that we do not contact you again

Website server and security logs

90 days, or up to 12 months for security logs needed to investigate incidents

Cookies

As set out in our Cookie Policy (EU). Your cookie choices are remembered for 12 months

Website analytics data

14 months

Social media messages

24 months

Job applications (unsuccessful candidates)

6 months after the role has been filled, or 12 months if you agree that we can keep your CV for future opportunities

Records relevant to legal claims

Until the claim is resolved and any limitation periods have expired

When we no longer need personal data, we securely delete it or anonymise it.

13. How we protect your personal data

We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, alteration or disclosure. These include encryption of data in transit (HTTPS), access controls, multi-factor authentication, staff training and contractual obligations on our service providers. We have procedures in place to deal with any personal data breach and will notify you and the Data Protection Commission where we are legally required to do so.

14. Your data protection rights

Subject to certain conditions and exceptions under the GDPR, you have the right to:

  • Access: obtain confirmation of whether we process your personal data and a copy of it;

  • Rectification: have inaccurate or incomplete personal data corrected;

  • Erasure: have your personal data deleted in certain circumstances;

  • Restriction: ask us to limit how we use your personal data in certain circumstances;

  • Portability: receive personal data you have provided to us in a structured, machine-readable format, or have it sent to another organisation, where processing is based on consent or contract and carried out by automated means;

  • Objection: object to processing, as explained in section 5;

  • Withdraw consent: at any time, where we rely on consent; and

  • Complain: lodge a complaint with a supervisory authority (see section 15).

To exercise any of these rights, email privacy@ardmoreshipping.com or write to us at the address in section 1. We may need to ask you for information to confirm your identity. We will respond within one month of receiving your request. If your request is complex or you have made several requests, we may extend this by up to two further months, and we will tell you if we need to do so.

Exercising your rights is free of charge. However, if a request is manifestly unfounded or excessive, in particular because it is repetitive, we may charge a reasonable fee or refuse to act on it, as the GDPR permits.

15. Complaints

If you have a concern about how we use your personal data, please contact us first at privacy@ardmoreshipping.com and we will do our best to resolve it.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live, work or where you believe an infringement took place. In Ireland, this is:

Data Protection Commission

  • Website and online complaint form: www.dataprotection.ie

  • Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland

16. Automated decision-making

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

17. Children

Our website is intended for business users and is not directed at children. We do not knowingly collect personal data from anyone under 16.

18. Links to other websites

Our website contains links to other websites, including those of our partners and social media platforms. This notice does not apply to those websites. We encourage you to read their privacy notices.

19. Changes to this notice

We review this notice regularly and will update it when our processing of personal data changes. The date at the top shows when it was last updated. If we make significant changes, we will highlight them on our website and, where appropriate, notify you directly.

If you are located in the United States or the United Kingdom, please also see our Privacy Statement (US) and Privacy Statement (UK), available on our website.