Privacy Policy

1. Data controller

The controller of your personal data is ITForge Ltd, registered office College House, 2nd Floor, 17 King Edwards Road, London, HA4 7AE, United Kingdom, VAT number GB364337490. For any privacy matter, contact contact@itforge.uk.

This policy explains how we handle personal data in connection with the YachtProvision platform. It applies to all users wherever they are, and we follow the UK General Data Protection Regulation (UK GDPR), the EU GDPR for users in the EU/EEA, and any other data-protection law that applies to you.

2. Data we collect

You provide

• Account & profile: name, email, phone, password (stored hashed), language preference, and role (yacht or supplier).
• Supplier business data: company name, business registration and tax identification numbers, the jurisdiction your business is registered in, address, ports served, catalogue, verification documents, and payout details.
• Vessel data: vessel name, identifiers, and registry details used for verification.
• Orders & communications: order contents, delivery details, support messages, and messages you exchange with other users through our email relay.

Collected automatically

• Usage & device data: log data, device/browser type, IP address, and app interactions.
• Location: where you enable it, approximate or precise location to surface nearby suppliers. You can disable this in your device settings.

From third parties

• Verification results from official business registries and maritime registries.
• Transaction and payout status from our payment provider.

3. How we use your data

• Create and manage your account and verify suppliers and vessels.
• Operate the marketplace: matching, ordering, escrow, delivery confirmation, payouts, and invoicing.
• Provide support and send service communications (and, with consent, marketing).
• Maintain security, prevent fraud and abuse, and meet legal and tax obligations.
• Produce aggregated analytics to improve the Platform.

4. Legal bases (GDPR Art. 6)

• Contract — to provide the Platform and process your orders.
• Legal obligation — tax, accounting, and verification requirements.
• Legitimate interests — security, fraud prevention, and improving the Service, balanced against your rights.
• Consent — for optional location, marketing, and non-essential cookies; you can withdraw it at any time.

5. Who we share data with

• Other users as needed to fulfil an order or answer an enquiry (a supplier sees order and delivery details; a vessel sees supplier and catalogue details). Messages sent through our email relay are delivered from a relay address, so the other party does not see your email address unless you share it.
• Payment provider for escrow, payouts, and fraud checks.
• Service providers (hosting, infrastructure, analytics, communications, identity/registry verification) acting as our processors.
• Authorities where required by law, and parties to a corporate transaction (e.g. merger), subject to safeguards.

We do not sell your personal data.

6. International transfers

ITForge Ltd is established in the United Kingdom, and your data is processed in the UK and the European Economic Area, including when you use the Platform from another country. Transfers between the UK and the EEA rely on the European Commission's UK adequacy decision (and the UK's recognition of the EEA). Where a provider, such as our payment provider, processes data outside these regions, we rely on adequacy decisions, UK International Data Transfer Agreements, or EU Standard Contractual Clauses to protect it.

7. Retention

We keep personal data for as long as your account is active and as needed to provide the Service. Transaction and invoice records are retained for the period required by tax and accounting law (typically several years). When data is no longer needed, we delete or anonymise it.

8. Your rights

Subject to law, you have the right to access, rectify, erase, restrict, or object to processing of your data, the right to data portability, and the right to withdraw consent. We extend these rights to all users, wherever they are. To exercise them, email contact@itforge.uk. You also have the right to lodge a complaint with a supervisory authority — the UK Information Commissioner's Office (ICO), or the data-protection authority in the country where you live or work.

9. Security

We use technical and organisational measures — including encryption in transit, access controls, and hashed passwords — to protect your data. No system is perfectly secure; if a breach affects your rights, we will notify you and the relevant authority as required by law.

10. Cookies & similar technologies

On the web app we use cookies and local storage that are strictly necessary for sign-in and core functionality, and — with your consent — optional analytics. You can manage non-essential cookies through your browser or any in-app consent control.

11. Children

The Platform is intended for business users and adults. It is not directed at children, and we do not knowingly collect data from anyone under 18.

12. Contact

For any privacy question or request, contact ITForge Ltd at contact@itforge.uk or College House, 2nd Floor, 17 King Edwards Road, London, HA4 7AE, United Kingdom. We may update this policy; the "last updated" date reflects the current version.