Privacy notice

Marine Match Ltd. Company Number: 17426292. Registered address: 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, United Kingdom. Marine Match Ltd is the data controller for the personal data described here. Contact our data protection lead at privacy@marinematch.co.uk.

• Engineer applications: name, trading name, contact details, service areas, rates, and uploaded certifications and insurance documents.
• Verification documents: We keep the documents you upload for verification private. We delete each document 6 months after its expiry date and keep only a record of our check: who checked it, when, the document type, insurer, cover amount and expiry date.
• Job posts: boat details, location, timeframe, budget and contact details.
• Boat logbook: your boat's details (name, builder, model, year, identifiers you choose to record) and its service history entries, including documents and photos you or your professionals attach.
• If you order a posted sticker, we collect a postal address to send it and to keep in touch about your boat's logbook. You can ask us to delete it at any time.
• Ownership transfers: when a logbook is handed to a new owner we record the transfer and the buyer's account details so the history moves with the boat.
• Marina contractor register: where a marina uses Marine Match to run its contractor register, we record which professionals are registered, fees paid, and each professional's acknowledgement of site documents (with a hashed technical identifier, never a raw IP address).
• Technical data: minimal data needed to run the site securely. Advertising and tracking cookies, including the Meta Pixel, only load if you accept them.

• Contract: to verify engineers, publish profiles and match owners with engineers.
• Legitimate interests: to keep the marketplace safe, keep records of our insurance and qualification checks, prevent fraud and improve the service, balanced against your rights.
• Consent: for marketing cookies, including the Meta Pixel, which only load if you accept them.
• Consent: for optional marketing emails. You can withdraw at any time without affecting the service.

Certification and insurance documents are only seen by our verification team, are never published on your public profile, and are not sold or shared with third parties for marketing. Upload only what we ask for — please redact any data we do not need, such as dates of birth or passport numbers.

How it's read: When you scan an invoice, receipt or yard slip, the document is sent to an AI service (an OpenAI model, accessed through our platform provider, Lovable) so it can read the details and fill in the entry for you to check. We have asked for written confirmation of where this processing takes place and that documents aren't kept or used to train AI models. Until we have it, we don't promise either. Please cover up any personal information you don't need to share before you scan. If you don't confirm the details, the document is deleted automatically within 24 hours. Once confirmed, the original is stored privately in your account until you delete it.

Your original is private: it is never public. You can open it through a link that expires after two minutes. Marine Match does not routinely review or verify these documents.

The business's details: the name of the business that did the work, and the date, work, parts and cost you confirm, are stored as part of your boat's record. They stay with the boat's history, including after a sale.

When you sell: the buyer receives each entry's summary. At handover you choose, document by document, whether to pass the original to the buyer. Nothing is passed unless you tick it. Documents you don't pass on stay in your account.

Deleting a document: open your boat's page and press "Delete document" on the entry. The original is removed from storage straight away. The entry stays in your Marine Match Boat Passport but no longer shows "Supported by third-party document". You can also ask us to delete your documents at any time.

Renewals and expiry dates: renewal dates and documents are private to the owner and are not passed on when you sell, except safety-equipment items you choose to pass on.

Cómo se lee: Cuando escanea una factura, un recibo o un albarán de varadero, el documento se envía a un servicio de IA (un modelo de OpenAI, al que accedemos a través de nuestro proveedor de plataforma, Lovable) para que lea los datos y rellene la entrada para que usted la revise. Hemos pedido confirmación por escrito de dónde se realiza este tratamiento y de que los documentos no se conservan ni se utilizan para entrenar modelos de IA. Hasta tenerla, no prometemos ninguna de las dos cosas. Oculte los datos personales que no necesite compartir antes de escanear. Si no confirma los datos, el documento se elimina automáticamente en un plazo de 24 horas. Una vez confirmado, el original se guarda de forma privada en su cuenta hasta que lo elimine.

Su original es privado: nunca es público. Puede abrirlo mediante un enlace que caduca a los dos minutos. Marine Match no revisa ni verifica estos documentos de forma habitual.

Los datos de la empresa: el nombre de la empresa que hizo el trabajo, y la fecha, el trabajo, las piezas y el importe que usted confirma, se guardan como parte del historial de su embarcación. Permanecen en ese historial, también después de una venta.

Si vende la embarcación: el comprador recibe el resumen de cada entrada. En el traspaso usted elige, documento por documento, si entrega el original al comprador. No se entrega nada salvo que lo marque. Los documentos que no entregue permanecen en su cuenta.

Cómo eliminar un documento: abra la página de su embarcación y pulse «Eliminar documento» en la entrada. El original se borra del almacenamiento de inmediato. La entrada sigue en el Pasaporte, pero ya no muestra «Respaldado por un documento de terceros». También puede pedirnos que eliminemos sus documentos en cualquier momento.

Renovaciones y caducidades: las fechas de renovación y los documentos son privados del propietario y no se entregan en una venta, salvo los equipos de seguridad que el vendedor elija.

If you turn on push notifications, we store a device token for that phone or browser so we can send you alerts about your jobs, quotes, messages and Boat Passport. Turn them off at any time in your profile; the token is deleted when you turn push off, sign out on that device or delete your account.

Si activas las notificaciones push, guardamos un identificador de ese móvil o navegador para enviarte avisos sobre tus trabajos, presupuestos, mensajes y tu Boat Passport. Puedes desactivarlas cuando quieras en tu perfil; el identificador se borra al desactivarlas, al cerrar sesión en ese dispositivo o al eliminar tu cuenta.

Boat Concierge, Superyacht Concierge and Commercial Concierge let you tell us about the care or support you need.

What we collect: your name and contact details, boat or vessel details, marina or berth, country, requested services, frequency, preferred start date and any budget you give us. Depending on the form, we also keep your distance from home, role, company, number of vessels and whether the request is urgent. We record your contact consent and the date of our last contact with you.

Why: to respond to your request and discuss suitable care or support. We rely on your consent, which you can withdraw at any time. Registering interest is not a booking and does not sign you up for marketing.

Who sees it: authorised Marine Match staff handling your request. Your request is private; it is not published or automatically shared with professionals.

How long: if no booking follows, we delete your interest request 12 months after you submitted it or after our last contact with you, whichever is later.

Your choices: ask us to delete your request sooner at any time, or withdraw your contact consent, by emailing privacy@marinematch.co.uk. If a booking follows, the records needed to provide that service and any legally required payment records follow the retention rules in this notice.

What you upload: if you join a marina's contractor register, you can upload public and employer's liability insurance certificates, qualifications, risk assessments and method statements (RAMS), hot works permits and similar documents, along with their expiry dates.

Who sees them: you upload each document once and choose, marina by marina, which registers can see it. A marina only sees a document you have agreed to share with it. Marinas never see your registers at other marinas.

Lawful basis: We use this information to run the register you've joined (to perform our agreement with you) and so marinas can manage safety on their sites (legitimate interests).

Where they're stored: privately in our EU database in Ireland. They are never public; authorised marina staff open them through links that expire after five minutes.

How long we keep them: expired or replaced documents are deleted 12 months after they stop being current. If you leave a register, that marina loses access straight away. Records of compliance checks and site rules acknowledgements (who, what and when, not the documents themselves) are kept for up to 6 years, so the marina has a record of the checks it carried out, even if you later leave its register.

• Access logs: to protect the site from abuse and scraping, we keep basic access logs of signed-out visits to directory pages (page address, browser details and IP address) for up to 30 days, then delete them automatically. They are visible only to two-step-verified administrators.
• Unsuccessful applications and their documents: deleted within 6 months.
• Active engineer accounts: kept while your profile is live.
• Closed accounts: profile removed immediately; verification and transaction records kept for up to 6 years where we have a legal or insurance need.

Primary storage: the live primary database is in Ireland, in AWS region eu-west-1. Lovable Cloud's underlying storage documentation describes primary file storage as being in the same region as the project, but we have not independently verified this project's file-storage location. Hosting is globally delivered, and the country or countries where backups are held have not been confirmed. These primary-storage facts do not mean that all processing stays in the UK or EEA.

Providers and recipients:

• Lovable Cloud: database, private file storage, hosting, and managed application and sign-in/authentication emails. Hosting is globally delivered; the exact processing countries for managed email have not been confirmed. See Lovable's privacy policy.
• Cloudflare: global website delivery and security, which can involve technical request data such as IP addresses and browser details outside Ireland.
• Stripe: payment processing, connected professional payment accounts and related transaction data. Stripe may process data internationally; Ireland's database location does not determine Stripe's processing locations. See Stripe's Data Transfer Agreement.
• Resend: the separate private/admin and campaign email route, not the managed application/authentication email route. Resend documents US storage for metadata, logs and API data; an email's sending region is a distinct setting and does not establish where all its data is stored. Our account's sending region has not been confirmed. See Resend's published DPA and sending-region documentation.
• Lovable AI and OpenAI: the whole uploaded invoice or receipt is sent for scanning, not just the extracted fields. The exact inference region and account-specific retention arrangements are unconfirmed; see Scanned invoices and receipts above.
• Diginate: sticker printing and delivery, receiving the required order, artwork and delivery details when an order is sent for fulfilment. Its exact processing and storage locations have not been confirmed.
• First-party analytics: Marine Match's own site analytics are stored in the primary database in Ireland, rather than sent to a separate analytics provider.
• Access logs: basic access logs of signed-out directory page visits (page address, browser details, IP address) are kept in the primary database in Ireland for up to 30 days to prevent abuse, and are not shared with any third party.
• Meta: optional advertising measurement, gated by your marketing-cookie consent and our marketing-pixels switch. We don't currently use the Meta Pixel.
• OpenStreetMap and YouTube: map requests to OpenStreetMap services, and YouTube videos you choose to open, can disclose technical data such as your IP address and browser details to those services. Their processing locations are not established by our primary database region.

International transfers: some providers process data outside the UK or EEA. Applicable safeguards can include adequacy decisions, Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum. The provider links above describe published terms, not proof of our account's specific contractual arrangements. Resend's public DPA includes SCC and UK Addendum terms as published safeguards; We are confirming that these terms apply to our account. We do not claim that an account-specific Resend DPA has been signed or accepted, or that all transfer arrangements have been independently verified.

A boat's logbook is private to its owner. It is only shared where the owner chooses: with a buyer or broker through a seller pack or preview link, or with the new owner on handover. Buyers never see the seller's invoices or receipts unless the seller chooses to pass a scanned document on (see Scanned invoices and receipts).

If you ask us to stop contacting you, we keep your email address on a do-not-contact list so we can honour that request. This list is visible only to site administrators.

You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent. Email privacy@marinematch.co.uk and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

What we hold: for businesses we list from public sources, we show the business name, categories, town or area, and a business phone number or website. We do not show email addresses or internal notes.

Where it came from: publicly available business sources, such as the business's own website, a marina's published list of businesses, a trade association's member directory or a manufacturer's dealer page.

Why: so boat owners can find marine services, and so we can invite the business to join Marine Match. We may contact the business using its published business contact details to invite it to claim its listing. These listings are marked “Unclaimed · from public sources” and are never shown as Verified.

Legal basis: legitimate interests (Article 6(1)(f) UK GDPR / GDPR).

How long we keep it: while the listing is accurate and useful. We review public-source listings at least once a year, and remove them straight away on request.

Your right to object: you can object at any time. Use the removal form (the “Remove this listing” link on the listing hides it straight away), or contact hello@marinematch.co.uk. A business can also claim its listing at any time. You can also complain to the Information Commissioner's Office (UK) or the Agencia Española de Protección de Datos (Spain).

Qué datos tenemos: de las empresas que incluimos a partir de fuentes públicas mostramos el nombre de la empresa, las categorías, la localidad o zona, y el teléfono o la web de la empresa. No mostramos direcciones de correo electrónico ni notas internas.

De dónde proceden: fuentes públicas de información empresarial, como la propia web de la empresa, la lista de empresas publicada por un puerto deportivo, el directorio de socios de una asociación del sector o la página de distribuidores de un fabricante.

Para qué: para que los propietarios de embarcaciones encuentren servicios náuticos y para invitar a la empresa a unirse a Marine Match. Podemos contactar con la empresa a través de sus datos de contacto profesionales publicados para invitarla a reclamar su ficha. Estas fichas aparecen como «Sin reclamar · datos de fuentes públicas» y nunca se muestran como verificadas.

Base jurídica: interés legítimo (artículo 6.1.f del RGPD).

Cuánto tiempo los conservamos: mientras la ficha sea correcta y útil. Revisamos las fichas de fuentes públicas al menos una vez al año y las eliminamos de inmediato si se nos solicita.

Su derecho de oposición: puede oponerse en cualquier momento. Utilice el formulario de eliminación (el enlace «Eliminar esta ficha» de la ficha la oculta al instante) o escriba a hello@marinematch.co.uk. La empresa también puede reclamar su ficha en cualquier momento. También puede presentar una reclamación ante la Agencia Española de Protección de Datos (AEPD) o la Information Commissioner's Office (Reino Unido).