1. Who we are
Yachting.mt is operated by [Stephen Duffy, business address, VAT number]. We are the data controller for the information described here. To contact us about privacy, email [privacy@yachting.mt].
2. What we collect
When you send an enquiry, register as a technician, or take out a care plan, we collect:
- Your name and contact details, and how you prefer to be contacted.
- Details of your boat: type, length, berth or yard, and its service history with us.
- Photos you send us, and photos we take of work on your boat.
- Records of quotes, invoices and payments. [Confirm payment processor.]
- Basic website analytics. [Confirm which tool, and whether it is cookie-based.]
3. Why we collect it
To quote and carry out work, to keep a service history for your boat, to send the photo reports you are paying for, and to meet our tax and legal obligations. We do not sell your details, and we will not add you to a mailing list unless you ask.
4. Who we share it with
The technicians and suppliers working on your boat, only as far as they need it to do the job; our accountant; and the marina or yard where access has to be arranged. [Confirm any software providers — email, invoicing, hosting — and their locations.]
5. How long we keep it
Enquiries that do not become work: [12 months]. Service records, quotes and invoices: [10 years, to meet Maltese tax requirements — confirm]. Photo reports: [for as long as you are a customer, plus x years].
6. Your rights
Under the GDPR you can ask for a copy of what we hold, ask us to correct it, ask us to delete it where we are not required to keep it, and object to how we use it. Email [privacy@yachting.mt] and we will reply within [one month].
7. Complaints
Tell us first — see our complaints procedure. If we cannot put it right, you can complain to the Office of the Information and Data Protection Commissioner in Malta.