Yacht.Delivery
Privacy Policy
Last updated 1 November 2026. Written in plain English.
Who we are
The Maritime Consultancy Ltd is the controller for the Yacht.Delivery website, the yacht delivery service, and the HELM portal. This notice covers visitors, people who enquire or apply as crew, clients, and everyone with a HELM account.
Crew members also have a shorter Crew Privacy Notice about identity documents, live tracking, and electronic signatures. The Cookie Policy explains cookies and similar storage.
The information we use
Depending on how you deal with us, this can include:
- Name, email, telephone, company, and the message you send us.
- Vessel, route, and timing details in a quote or a delivery.
- HELM account details, role, and sign-in records, including passkeys.
- Crew application details, qualifications, sea time, and a CV.
- Passports, visas, medical certificates, and similar identity documents when you upload them for a delivery.
- Live vessel position from a Garmin device on the yacht, which also shows where the crew on board are.
- Expenses, invoices, contracts, and the evidence of an electronic signature: the email address we checked, a one-time code, the time in UTC, IP address, and browser identification. We do not scan a passport to verify a signature.
- Messages you type into the HELM assistant or the public FAQ assistant.
- A marketing preference, if you tick the optional box. It starts unticked.
The public website is not used to collect special-category data. HELM can hold identity documents and medical certificates when crew upload them for a job. We treat those as a higher-risk set of files. See the crew notice and the security section below.
Why we use it, and the lawful basis
| Purpose | Lawful basis |
|---|---|
| Replying to an enquiry and preparing a quote | Steps towards a contract |
| Running a delivery, a HELM account, invoices, and contracts | Contract |
| Considering a crew application | Steps towards a contract, and our legitimate interest in choosing suitable crew |
| Holding qualifications needed for the voyage | Contract, and legal obligations that apply to commercial yachts |
| Storing passports, visas, and medical certificates you upload | Contract and legal obligation for the voyage. A medical certificate is health data, used only so we can confirm you are fit for the passage you have joined |
| Live tracking during a delivery | Contract with the client, and our legitimate interest in the safety of the yacht and crew |
| Electronic signature evidence | Contract, and our legitimate interest in being able to show who signed |
| Keeping tax and accounting records | Legal obligation |
| Security, fraud prevention, and abuse limits on public forms | Legitimate interests |
| Optional analytics cookies | Consent. They stay off until you accept |
| Occasional news emails | Consent. The box is separate and starts unticked |
| HELM assistant and the public FAQ assistant | Legitimate interests in answering an operational question you asked. A person still makes the decision |
Where we rely on legitimate interests, you can ask us to reconsider. Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect a delivery we are already carrying out for you.
Who we share it with
We use specialist providers to run the site and HELM. They process personal information for us. They are not allowed to use it for their own marketing. We do not sell personal information.
| Provider | What they do for us | Where |
|---|---|---|
| Supabase | Database, accounts, file storage, and server functions. Project vytkdnaioyhqcxspgbal | Confirm the project region in the Supabase dashboard. Support access may be from the United States |
| Lovable | Hosts the website and provides the AI gateway used by HELM | Sweden / EU hosting, with subprocessors that can include the United States |
| Tinybird | Receives Lovable analytics events, only if you accept analytics cookies | EU and United States |
| Resend | Sends enquiry, crew, signature, and operational email | United States |
| Garmin | MapShare feed for a vessel's live position when a delivery uses it | United States |
| Google (Gemini) | Answers HELM assistant questions via the Lovable AI gateway. Models in use include Gemini Flash | United States |
| Esri | Map tiles on charts | United States |
| OpenSeaMap | Seamark tiles on charts | Germany |
| Windy | Weather map on the public site and inside HELM. It receives the IP address so it can draw the forecast. See the Cookie Policy for storage inside the Windy frame | Czech Republic / EU |
| Mapbox | A server function can issue a public map token. The pages do not load a Mapbox map today. Charts use Esri and OpenSeaMap, which receive the IP address to draw the tiles | United States |
| Cloudflare | Bot-protection cookie on the hosted site | United States |
Electronic signing is part of HELM. There is no separate e-sign company. The one-time code is emailed through Resend.
We also share information when the law requires it, or with the client of a delivery where the contract says they should see the crew, the track, or the expenses. Other crew cannot open your passport or your identity file.
International transfers
Some of the providers above are in the United States or can access information from there. The United States does not have a general UK or EU adequacy decision for every company. Where we transfer personal information outside the UK or the EEA we use the UK International Data Transfer Agreement (or the UK Addendum to the EU clauses) and the EU Standard Contractual Clauses. If a destination later has an adequacy decision, we rely on that for the transfer it covers.
TODO(Daniel): confirm the Supabase project region and record it here. If the database itself is in the EU, the remaining transfer is support access from the provider, still covered by those clauses.
How long we keep it
| Information | How long |
|---|---|
| Enquiries that do not become a job | 24 months from the last contact |
| Crew applications where we do not engage you | 12 months |
| HELM account profile | While the account is open, then as described in your deletion request |
| Delivery records, positions, expenses, invoices, contracts, and signature evidence | 6 years after the job closes, for tax and legal claims. We keep the records. Closing a job does not delete them |
| Passport, visa, medical, and other identity files | 12 months after the document expires, or 12 months after you upload a replacement of the same type. The file is then removed. A note that a document of that type was held can remain, without the file or the document number |
| Marketing preference | Until you opt out, and for 2 years after the last marketing email so we can show what you asked for |
| Analytics choice | 6 months, then we ask again if the stored choice has expired in a future version |
| Demo access notes | 12 months |
| Assistant messages | Used to produce the reply. We do not add them to a marketing profile or a separate transcript archive |
After a job is marked completed or cancelled, crew, clients, and staff can still open it for 7 days to finish expenses and handover. After that, only an administrator can open it. The grace period is set in one database function, completed_job_grace(), currently 7 days. The records stay in place for the retention period above.
Your rights
Under UK GDPR, and under EU GDPR if it applies to you, you can ask us to:
- Confirm whether we hold information about you, and for a copy of it.
- Correct it.
- Delete it, or restrict what we do with it.
- Give you a portable copy of information you provided, where the basis is contract or consent.
- Object to processing based on legitimate interests, including tracking where that basis applies.
- Withdraw consent. Analytics and marketing both wait for a yes.
- Ask for a person to review an AI-assisted answer.
HELM users can download a copy of their account information, and can ask us to delete the account, from Your data after signing in. You can also email daniel@yacht.delivery. We reply within one month. We may ask you to confirm it is you.
Some records have to stay even after a deletion request. Invoices, contracts, signature evidence, and voyage records that the law tells us to keep are in that group. We delete or anonymise what we can, and we tell you what remains and why.
Complaints
You can complain to us first at daniel@yacht.delivery. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority: ico.org.uk/make-a-complaint. Our ICO registration number is shown in the footer of this page.
If you live in the EEA, you can complain to the supervisory authority in your country. A list is published by the European Data Protection Board.
EU representative
We deliver yachts for people in the EU and the website is available there. Where Article 27 of the UK GDPR and the EU GDPR requires an EU representative, we are appointing one. TODO(Daniel): add the representative's name, postal address, and email here when the appointment is confirmed.
Children
Yacht.Delivery and HELM are for adults. You need to be 18 or over to enquire, apply as crew, or hold an account. We do not knowingly collect information from children. If you believe we have, email us and we will delete it.
Automated decisions and AI
The HELM assistant drafts answers for signed-in users. An administrator assistant can draft a crew shortlist. Neither tool decides, on its own, whether you are engaged, whether a delivery goes ahead, or whether you are paid. A person makes those decisions. You can ask for a person to look at an AI-assisted answer.
The public FAQ assistant answers general questions about the service. Do not type passport numbers or other people's private details into either assistant.
Security
HELM accounts sit behind sign-in. Database tables use row-level security. Document buckets are private. Identity files and crew CVs are not opened with a long public link: a signed-in owner or administrator confirms a recent password or passkey (within 15 minutes) and then receives a link that lasts 120 seconds. Each opening is recorded as who, when, and which record, without the file itself being written into the log. Finished jobs leave crew, client, and staff access after the wrap-up window and remain visible to administrators.
No online service is free of risk. If you think an account or a document has been exposed, email daniel@yacht.delivery.
Changes
We will post the new version on this page and change the date at the top. If a change affects a delivery already underway, we will also tell the people on that job.