navdeck is operated by [registered legal entity โ update before launch], of 55 Triq Il-Kwarta, Swieqi, Malta ("navdeck", "we", "us"). This policy explains how we handle personal data. Questions: info@navdeck.io.
This policy applies to our website (navdeck.io and its subdomains) and the navdeck platform โ the myboat, Marina and Fleet products. For personal data in a marina's or fleet's own account (their customers, vessels and contracts), that organisation is the data controller and navdeck acts as a data processor on their behalf. For your own account and our website, navdeck is the controller.
Name, email address, organisation name and role, job title, and messages you send us (for example via the contact form or support).
Marina, fleet and boat records โ berths, vessels, owners, contracts, invoices, documents, routes and logbook entries โ as you use the platform.
For connected boats, the data your SignalK device sends (for example position, speed, battery, tanks) and its history. Owners control whether and how this is shared with a marina or fleet, and can revoke sharing at any time.
Payments are processed by Stripe. We do not receive or store full card numbers โ only a payment reference, amount, currency and status.
IP address, browser/device information, and essential cookies needed to sign you in and remember your language. We do not use advertising or cross-site tracking cookies.
We use only essential cookies: an authentication session when you sign in, and a small cookie that remembers your chosen language on the website. No third-party advertising or analytics-tracking cookies are set by us.
We use a small number of trusted subprocessors to run the platform. Each only processes data to deliver its part of the service:
We do not sell personal data. We may disclose data where required by law, or to protect our rights and the safety of users.
We host and operate primarily within the EU/EEA. Some subprocessors (for example Stripe, Cloudflare and Google) may process data outside the EEA; where they do, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
We keep personal data for as long as your account is active and as needed to provide the service. Some records (for example invoices) are kept longer to meet legal and tax obligations. When data is no longer needed, we delete or anonymise it. You can export your data at any time, and downgrading a plan never deletes it.
Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. To exercise any of these, email info@navdeck.io. If your data is held in a marina's or fleet's account, we will direct your request to that organisation as controller. You also have the right to complain to your data protection authority โ in Malta, the Information and Data Protection Commissioner (IDPC).
Traffic is encrypted in transit (HTTPS/TLS), access is authenticated, and each organisation's data is isolated to its account. See our Security & trust page for more.
navdeck is a business and boating tool and is not directed at children. We do not knowingly collect personal data from anyone under 16.
We may update this policy as the platform evolves. We'll change the "last updated" date above and, for material changes, let account holders know.
Questions about this policy or your data: info@navdeck.io, or write to navdeck, 55 Triq Il-Kwarta, Swieqi, Malta.