1. Data We Collect and Use

• We collect personal data including your name, email, location (real-time tracking), user-generated content, and CV information for yachtie verification.
• We also collect cookies and similar tracking technologies to improve app functionality and user experience.

2. Lawful Bases for Processing Personal Data

Under the General Data Protection Regulation (GDPR), we rely on the following lawful bases to process your personal data:

• Consent: For processing sensitive data such as real-time location tracking and yachtie verification CVs. You have the right to withdraw consent at any time by contacting us.
• Contractual necessity: To provide you with the app services and to perform our contract with you.
• Legitimate interests: For improving and securing the app, preventing fraud, and sending you relevant communications, unless overridden by your rights.

3. Your Rights Under GDPR

You have the right to:

• Access your personal data that we hold.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (“right to be forgotten”), subject to legal and contractual exceptions.
• Restrict processing of your data in certain circumstances.
• Receive your data in a portable format or transfer it to another service provider (“data portability”).
• Object to processing, especially for direct marketing purposes.

To exercise any of these rights, please email us at [email protected]. We will respond within 30 calendar days.

4. Your Rights Under CCPA (for California Residents)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, share, or sell. We do not sell your personal information.
• Request access to your personal data.
• Request deletion of your personal information, subject to exceptions.
• Opt out of the sale of personal information (not applicable as we do not sell data).
• Not be discriminated against for exercising your rights.

To make a request, email us at [email protected]. We will respond within 45 calendar days.

5. International Data Transfers

• Your personal data may be transferred to and stored on servers outside your country, including countries that may not have the same level of data protection as your jurisdiction.
• We ensure such transfers are protected by appropriate safeguards, such as the use of Standard Contractual Clauses approved by the European Commission, or other legally recognized mechanisms.

6. Cookies and Tracking Technologies

• We use cookies and similar tracking technologies for app functionality, analytics, and marketing purposes.
• You may control or disable cookies through your device or browser settings, though this may impact app functionality.
• For detailed information about the cookies we use and their purposes, please refer to our Cookie Policy (linked in the app).

7. Data Security and Breach Notification

• We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or damage.
• In the event of a data breach likely to result in a risk to your rights or freedoms, we will notify you promptly and no later than 72 hours after becoming aware, including details of the breach and steps taken.
• We also provide support to affected users to mitigate potential harm.

8. Consent Management and Opt-Out

• You can withdraw your consent for location tracking or marketing communications at any time by emailing [email protected].
• Upon receipt of your opt-out request, we will act within a reasonable timeframe (not exceeding 10 business days) to implement your preferences.

9. Privacy Policy Updates

• We may update this Privacy Policy periodically to reflect changes in law, technology, or our services.
• We will notify you of significant changes via app notification or email, at least 15 days before they take effect.
• The effective date of this policy is displayed at the top of the document.