Last updated: 27 September 2026
1. Controller
MAXLOC LTD (trading as Yachtie Registrations), Kafkasou 5, 2112 Nicosia, Cyprus is the controller of the personal data processed through the Yachtie Registrations app and website. Contact: info@yachtieregistrations.com.
2. What we collect
- Account data: name, e-mail, phone, password (stored hashed), language and currency preferences.
- Registration data: details of the vessel, of the owner(s) and, for companies, of the company and its representative.
- Documents you upload: passports or ID cards, proof of ownership, boat specifications, photos and any other document the registry requires.
- Order and payment data: what you ordered, amounts and payment status. Card details are entered only on the payment provider's page (JCC) and never reach us.
- Messages you exchange with our team in the app, including attachments.
- Technical data: device push token (if you enable notifications), app version, IP address and access logs.
3. Why and on what basis
- To provide the service you ordered: preparing and submitting your registration to the flag registry (performance of a contract).
- To verify identity and ownership, as the registries require (legal obligation and contract).
- To keep you informed about your case by e-mail and push notification (contract; you can switch notifications off in Profile).
- To keep accounting records (legal obligation, 7 years in Cyprus).
- To keep the service secure and prevent abuse (legitimate interest).
We do not use your data for advertising and we do not sell it. The app contains no advertising or analytics trackers.
4. Who receives your data
- The registry or authority of the flag state you chose, and where required its notaries, translators or agents.
- Our hosting and e-mail providers, the payment provider (JCC) and, for push notifications, Google Firebase.
- Couriers, for the delivery of certificates.
- Authorities, when the law obliges us.
Some registries are outside the European Economic Area (for example Panama, the Marshall Islands, the Cook Islands, Langkawi/Malaysia, the USA). Your data is transferred there only to the extent needed for the registration you asked for.
5. How long we keep it
Documents and case data are kept for as long as the registration is active plus the time needed to renew, amend or prove it, and are deleted after 5 years of inactivity. Accounting records are kept for 7 years. If you delete your account, your personal data is erased or anonymised within 30 days, except what we must keep by law.
6. Your rights
You may ask for access to, correction of or deletion of your data, for a copy in a portable format (Profile → Download my data), to restrict or object to processing, and to withdraw consent. You can delete your account in the app. Complaints can be sent to us at info@yachtieregistrations.com or to the Commissioner for Personal Data Protection of Cyprus (dataprotection.gov.cy).
7. Security
Data travels encrypted (HTTPS). Documents are stored outside the public web root, scanned on upload, and are available only through short-lived signed links to you and to the staff handling your case. Access by staff is logged.
8. Children
Our services are for adults. We do not knowingly collect data of persons under 18.
9. Changes
We may update this policy; the current version is always available in the app.
