1. Who we are
Yachting.mt is operated by Stephen Duffy, Malta, VAT No. MT33230421 [registered address to follow]. We are the data controller for the information described here. To contact us about privacy, email [email protected].
2. What we collect
When you send an enquiry, register as a technician, or take out a care plan, we collect:
- Your name and contact details.
- Details of your boat: type, length, berth or yard, and its service history with us.
- Photos you send us, and photos we take of work on your boat.
- Records of quotes, invoices and payments. Card payments for care plans are taken by Stripe; we never see your card number.
- Basic website analytics (Cloudflare Web Analytics), which counts page views without cookies and without identifying you.
3. Why we collect it
To quote and carry out work, to keep a service history for your boat, to send the photo reports you are paying for, and to meet our tax and legal obligations. We do not sell your details, and we will not add you to a mailing list unless you ask.
4. Who we share it with
The technicians and suppliers working on your boat, only as far as they need it to do the job; our accountant; and the marina or yard where access has to be arranged. We also use these providers to run the business, each bound by its own data-processing terms: Cloudflare (website hosting and form handling), Supabase (our enquiry database, hosted in Ireland), Resend (transactional email, EU region), Google Workspace (our mailboxes) and Stripe (care plan payments).
5. How long we keep it
Enquiries that do not become work: 12 months. Service records, quotes and invoices: 10 years, to meet Maltese tax and VAT record-keeping requirements. Photo reports: for as long as you are a customer, plus two years, so a new owner or surveyor can still be given the boat’s history if you ask.
6. Your rights
Under the GDPR you can ask for a copy of what we hold, ask us to correct it, ask us to delete it where we are not required to keep it, and object to how we use it. Email [email protected] and we will reply within one month.
7. Complaints
Tell us first — see our complaints procedure. If we cannot put it right, you can complain to the Office of the Information and Data Protection Commissioner in Malta.
