MC Yachting

MC Yachting

Yacht Management

Privacy Policy

Last updated: 23-09-2026

This Privacy Policy explains how MC Yachting (“we”, “us”) processes personal data within the MC Yachting fleet operations platform, which consists of a shore-based web dashboard and a crew mobile application. The platform is a private, invitation-only professional tool provided to yacht owners, management offices and crew members. It is not intended for use by children and it is not available for public self-registration.

Account and data deletion requests

To request closure of your MC Yachting account, deletion of personal data, or deletion of specific data while keeping your account, email info@mc-yachting.com. Use the subject “MC Yachting account and data request” and include your account email, vessel name and what you want removed. Do not include your password or identity documents in the initial request.

We will verify the request with you and the responsible management office. Closing access does not automatically erase maintenance, safety, employment or audit records that must be retained for legal, security or compliance reasons. We will explain which data can be deleted, what must be retained and the applicable retention period. No sign-in is required to make a request.

1. Who is responsible

MC Yachting acts as data controller for account and platform-usage data, and as data processor for operational vessel data entered by a client’s office staff and crew. Each vessel owner or management company remains responsible for the accuracy and lawful use of the records it enters.

2. Data we collect

  • Account data: name, work email address, assigned vessel, access role and shipboard rank, authentication credentials (passwords are stored only as salted hashes).
  • Crew and compliance records: crew list entries, certificates and expiry dates, work and rest-hours logs, training and waiver records, entered by authorised office or shipboard users.
  • Operational data: planned maintenance tasks and completions, safety-management checklists, defect and fault tickets, near-miss and incident reports, voyage and consumption logs, documents and attachments.
  • Technical data: device and app version, timestamps, audit log entries recording who created or changed a record, and error diagnostics used to keep the service reliable.

We do not collect advertising identifiers, we do not track users across other apps or websites, and we do not sell personal data.

3. Why we process it

  • To authenticate users and enforce role-based access to vessel data.
  • To deliver planned maintenance, safety-management, certificate and reporting functionality.
  • To support statutory and class compliance, including ISM, MLC rest-hours and flag-state requirements, and to produce audit-ready records.
  • To maintain traceability through append-only activity logs, and to secure and improve the service.

Legal bases include performance of a contract, compliance with legal obligations applicable to maritime operations, and our legitimate interest in operating a secure platform.

4. Location tracking and device permissions

The mobile app does not track your location in the background. Camera, photo library and file access are requested only when you attach evidence to a task, checklist, ticket or report, and are used solely for that purpose.

5. Sharing

Data is visible to authorised users of the same vessel or management office according to their role. We share data with infrastructure providers acting on our instructions for database hosting, authentication, file storage and transactional email delivery, and with flag-state, class, auditors or insurers only where the client instructs us or the law requires it.

6. Retention

Operational and compliance records are retained for the periods required by applicable maritime regulations and the client’s retention policy. Retention depends on the type of record and its applicable requirements; closing an account does not erase the operational history it contributed to. Account and personal data deletion requests are assessed separately, as described above.

7. Security

Data is encrypted in transit, access is restricted by row-level security policies tied to each user’s role and assigned vessel, passwords must be changed on first sign-in, and administrative actions are logged. No system is completely secure, so we ask users to keep credentials confidential and to report any suspected compromise immediately.

8. International transfers

Because yachts operate worldwide, data may be processed in countries other than your own, including within and outside the European Economic Area, always under appropriate safeguards such as standard contractual clauses.

9. Your rights

Subject to applicable law you may request access to, correction of, or deletion of your personal data, restrict or object to certain processing, and receive a copy in a portable format. Because access is managed by your employer or management office, please raise requests with them or contact us directly and we will coordinate. You may also complain to your local data protection authority.

10. Changes

We may update this policy as the platform evolves. Material changes will be announced in the app, and the revision date above will be updated.

11. Contact

Privacy enquiries: info@mc-yachting.com