Privacy Policy

This website is operated by Maritec Nautical Services LLC under the MARITEC Yacht Survey & Advisory trade name. For public-site and portal processing described here, MARITEC determines why and how information is used. Privacy questions and rights requests may be submitted through the Contact page with “Privacy request” in the subject line.

The verified legal name, registered address, and dedicated privacy contact must be approved before this draft is indexed or treated as final. A customer agreement may identify additional contracting parties and responsibilities for a specific engagement.

This policy applies to MARITEC's public website, inquiry and consultation forms, authenticated client portal, administration and operations tools, and related communications. A signed service agreement may contain additional project-specific confidentiality, records, and retention terms.

It does not govern third-party websites reached through an external link or information that a yacht owner, broker, yard, employer, or other organization processes independently for its own purposes.

Contact and business information includes your name, email address, telephone number, company or organization, role, subject, and message. Service inquiries may also include vessel identity and characteristics, location, requested service, schedule, objectives, and details you choose to provide.

Authenticated services may contain account identifiers, organization memberships, invitations, roles, multi-factor status, projects, vessels, tasks, documents, observations, orders, timelines, communications, and audit events. The exact records depend on the services your organization uses and the permissions assigned to you.

Technical and security information may include request timestamps, coarse network identifiers used for rate limiting, authentication/session events, browser language, and service-provider logs needed to deliver and secure the service.

If optional measurement is enabled and you accept it, sending a public form also saves a separate record of the page you arrived on, the site that referred you, any campaign tags in the link, which kind of form you sent, and when. It holds no name, email, or visitor identifier, and no key ties it to your inquiry, though the time it records could in principle be matched against one. We read it only as totals by channel. No cross-site advertising identifier or browsing profile is created.

The careers and candidate-application workflow is disabled. MARITEC does not currently invite or accept candidate files through this website. This policy and the security workflow must be updated before that feature is enabled.

Most information comes directly from you when you submit a form, sign in, upload a document, communicate with MARITEC, or use an authenticated workspace. An authorized customer administrator may also provide your business contact information and role when inviting you.

Service providers generate authentication, hosting, delivery, database, storage, security, and audit records while operating the service. Optional referral and campaign details come from your current URL and browser referrer only after the consent conditions described above are satisfied.

We use information to answer inquiries, to evaluate and deliver the services you request, and to create and administer accounts. Day-to-day operation accounts for the rest: running projects and client workspaces, communicating about service, security, and support, maintaining records, and troubleshooting. Some uses are protective rather than operational: keeping users and systems safe, preventing abuse, meeting legal obligations, and establishing, exercising, or defending legal claims.

Optional first-party measurement is used only to understand, in aggregate, which referral or campaign channels lead to submitted inquiries. Refusing or withdrawing that choice does not block any form, account, or service.

MARITEC does not use website information for cross-context behavioral advertising, does not build advertising profiles, and does not make decisions producing legal or similarly significant effects solely by automated means.

Depending on the processing, the legal basis may be steps you request before a contract, performance of a contract, compliance with a legal obligation, MARITEC's legitimate interests in operating, securing, improving, and documenting its services, protection of legal rights, or your consent. Before relying on legitimate interests, we weigh necessity, proportionality, and what you would reasonably expect. Which basis applies to which activity is a determination for privacy counsel and remains a launch-review item; this draft sets out the working position rather than a confirmed one.

Optional measurement relies on consent where consent is required. You may refuse it or withdraw it at any time through Cookie settings, without affecting the lawfulness of processing already performed or your ability to use the site.

If special-category or sensitive information is genuinely required for a specific engagement, it must be handled under the agreement and an applicable legal condition. Please do not place unnecessary medical, government-identifier, financial-account, or similarly sensitive information in a general inquiry form.

The site uses necessary first-party storage for consent choices, language, authentication, session security, and user-requested portal preferences. Optional measurement is disabled by default and cannot run unless its deployment flag is enabled and a current affirmative choice exists.

The Cookie Notice identifies the actual cookie and storage keys, purposes, providers, and retention behavior. Cookie settings can be reopened from every public-page footer. Necessary storage cannot be disabled in that panel because the requested session, security, language, or consent function would stop working, but you can delete it through your browser.

Information is available only to authorized MARITEC personnel and customer users whose roles require it. It may be disclosed to the customer organization responsible for a workspace; to service providers acting under MARITEC's instructions; to professional advisers; to a successor in a properly controlled business transaction; or to authorities and other parties when lawfully required or necessary to protect rights, safety, and systems.

Current core providers handle hosting and delivery, authentication, database and private file storage, and operational email delivery. Provider capabilities, locations, subprocessors, contracts, and retention settings must be reviewed before final legal approval. MARITEC does not sell personal information and does not share it for cross-context behavioral advertising.

MARITEC is based in the United States, and information may be processed in the United States and other places where an approved service provider operates. Those locations may have different privacy laws from your home jurisdiction. Like the entity details above, the stated place of business is pending verification and is not final in this draft.

Where an applicable law requires a transfer mechanism or additional safeguards, MARITEC must use the required contractual and organizational measures. Confirmation of executed data-processing terms, transfer terms, and provider regions remains a launch-review item; this draft does not claim that an unverified agreement has been signed.

Information is kept only as long as reasonably necessary for the purpose collected, the customer relationship and project record, security and continuity, dispute handling, and applicable legal, insurance, tax, accounting, and professional obligations. Criteria include the type and sensitivity of the record, operational need, contractual commitments, limitation periods, and the risk of keeping it.

The consent-choice cookie lasts 180 days. Browser-only preference storage lasts until you clear it or the feature removes it. Authentication retention is governed by the configured session and provider renewal policy. Inquiry, project, document, audit, email, backup, and optional attribution periods must be confirmed in the operational retention schedule before this policy receives final approval.

When information is no longer required, it should be deleted, anonymized, or placed beyond active use, subject to technically necessary backup cycles and legal holds.

MARITEC uses role-based access, private storage, authentication and database access controls, rate limits, security headers, audit records, and restricted administrative operations to reduce risk. Service providers are selected and configured for their assigned functions.

No website or transmission is completely secure. Security controls, incident procedures, access reviews, backup restoration, and provider configurations require continuing operational verification. If a breach triggers notice duties, MARITEC will follow the applicable notification requirements.

Depending on where you live and the law that applies, you may have rights to know or access information, obtain a copy, correct inaccuracies, delete information, restrict or object to processing, receive portable data, withdraw consent, opt out of certain sharing or targeted advertising, and appeal a denied request. EEA, UK, and Brazilian residents may also complain to their local supervisory authority or the ANPD, as applicable.

Submit a request through the Contact page with “Privacy request” in the subject line and describe the right you want to exercise. MARITEC may request information reasonably necessary to verify identity, authority, account, or organization while avoiding collection of unnecessary verification data. An authorized agent may submit a request where permitted, subject to proof of authority and identity verification.

MARITEC will not discriminate against you for exercising an applicable privacy right. Some information may be retained or a request limited where an exemption applies, including security, another person's rights, legal obligations, privilege, and the establishment or defense of claims. The response will explain an applicable denial and any appeal route required by law.

The categories this service may handle are: identifiers and contact information; commercial, vessel, and service-request information; internet or network activity; approximate location inferred by infrastructure from network information; professional or employment-related information supplied for a business account; correspondence and uploaded content; and inferences limited to first-party referral-channel classification. The sections above describe where each comes from, why it is used, and who receives it.

MARITEC does not sell personal information, does not share it for cross-context behavioral advertising, and does not use or disclose sensitive personal information to infer characteristics. None of those activities occur, so the site presents no sale/share opt-out link and an opt-out preference signal such as Global Privacy Control has nothing here to act on. If any of that changes, the signal and the required opt-out controls must work before launch.

Comprehensive state privacy statutes generally apply only when their jurisdictional and business thresholds are met, but this policy provides a request channel regardless. California's online privacy notice rules and federal/state unfair-or-deceptive-practice rules may apply even when a threshold privacy statute does not.

The website and yacht services are intended for adults and business users, not children. MARITEC does not knowingly collect personal information online from children under 13 and does not knowingly solicit portal accounts from anyone under 18. If you believe a child submitted information, contact MARITEC so it can be reviewed and deleted where required.

This policy may be updated when processing, providers, legal requirements, or services change. Material changes should be communicated in an appropriate manner. The effective date and prior versions should be retained once counsel approves a public version.

Use the Contact page for privacy questions or requests and put “Privacy request” in the subject line. Do not send identity documents, passwords, financial-account details, or other unnecessary sensitive information through the general message field.