Privacy notice

Your data, handled with care.

Effective 15 July 2026

This notice explains how Maldives Yacht Support Pvt Ltd handles personal data through this website, the AI concierge, email and telephone enquiries. It also explains the rights available where the EU General Data Protection Regulation, or a similar data protection law, applies.

Who is responsible

Maldives Yacht Support Pvt Ltd is the controller for personal data used to operate this website and answer direct enquiries. For personal data handled after an engagement begins, the company's role may be controller, processor or a separate controller depending on the service agreement and the instructions it receives.

What this website handles

Website delivery and security

When you visit, the hosting provider receives normal technical data such as your IP address, browser and device information, requested page, request time and security signals. This is used to deliver the site, maintain availability, prevent abuse and diagnose faults.

The site is hosted by Cloudflare. Cloudflare may process this technical data in the locations described in its services documentation and data processing addendum. To limit repeated concierge requests, the website function converts the requesting IP address into an ephemeral salted identifier. That identifier exists only in volatile function memory for the current 60-second rate-limit window and is not written to application storage.

Enquiry form, email and calls

The enquiry form runs in your browser. It prepares a message in your email application and does not automatically submit the form to this website. If you choose to send the email, Maldives Yacht Support receives the name, work email, support brief and any optional vessel, schedule or contact details you include. Telephone enquiries may also include the information you choose to provide.

Your name, work email and support brief are needed to prepare a useful enquiry. The other form fields are optional. If the required details are not provided, the website cannot prepare the message. Please do not include passport copies, medical details, precise security arrangements or other sensitive personal data in the form or chat. Contact the agency directly to agree an approved human-handled channel before sharing sensitive information that is genuinely required.

AI concierge

Published service answers and guided booking answers run in your browser. During the guided flow, answers remain in the current tab's memory and are cleared after 30 minutes or when you cancel. If you continue to the contact form from another page, a short-lived handoff is placed in session storage. It is removed when transferred, cancelled, expired or when the browser tab session ends.

An open-ended question is sent to the website's protected Cloudflare endpoint, together with normal network metadata needed to deliver and secure the request. The page keeps the visible conversation in memory until you reload or close it, and the website code does not write open-ended chat history to browser storage. The current production service does not pass chat messages to an external AI model. External AI processing will remain disabled until the relevant provider, purpose, safeguards and retention information are added to this notice.

Purposes and legal bases

Where GDPR applies, personal data is handled for these purposes and legal bases:

• To answer an enquiry and take requested steps before a possible agreement, under Article 6(1)(b) when you are the prospective contracting party. When you contact the company for an organisation, the basis is Article 6(1)(f), the legitimate interests of both organisations in discussing the requested service.
• To coordinate and deliver services under Article 6(1)(b) when the agreement is with you. When the agreement is with the organisation you represent, the basis is Article 6(1)(f), the legitimate interest in administering that business relationship.
• To deliver, secure and diagnose the website under Article 6(1)(f), the legitimate interest in providing a reliable and abuse-resistant business service.
• To keep or disclose records under Article 6(1)(c) when a legal obligation applies.

The website does not rely on consent for essential enquiry handling. If consent is requested for a separate purpose in future, it may be withdrawn at any time without affecting earlier lawful processing.

Who may receive the data

Personal data may be handled by authorised Maldives Yacht Support personnel, Cloudflare as website hosting and security provider, the email and telecommunications providers used by the sender and recipient, and operational suppliers or professional advisers when needed for a request. It may also be disclosed to an authority when required by law. Information is not sold and is not used for behavioural advertising.

International transfers

Maldives Yacht Support is based in the Maldives, outside the European Economic Area. Website and communication providers may also process information in other countries. Where GDPR transfer rules apply, an appropriate lawful mechanism is required, such as an adequacy decision or approved standard contractual clauses. Cloudflare publishes a customer data processing addendum that includes transfer safeguards. You may ask for information about the safeguard relevant to your data.

How long information is kept

Browser session data and the volatile rate-limit identifier follow the short lifecycles described above. Cloudflare retains platform security and request records according to the service configuration and its contractual retention terms. Maldives Yacht Support keeps access to those records only for as long as needed to operate and secure the website, diagnose a fault, investigate abuse or meet a legal obligation. Enquiry emails and operational records are kept only for as long as needed to answer the enquiry, provide requested services, maintain necessary business records, meet legal, accounting, insurance or maritime obligations, and establish or defend legal claims. They are then deleted or anonymised. The exact period depends on the record type and applicable obligation.

Cookies and measurement

This website does not currently set analytics, advertising or preference cookies and does not load third-party web fonts. A consent banner is therefore not shown. This notice and the consent controls will be updated before any non-essential tracking is introduced.

Your rights

Where applicable, you may ask Maldives Yacht Support to:

• Give you access to your personal data and a copy of it.
• Correct inaccurate or incomplete data.
• Delete data when the legal conditions are met.
• Restrict particular processing.
• Provide portable data when that right applies.
• Stop processing based on legitimate interests, subject to any overriding lawful grounds.

Send a request to info@maldivesyachtsupport.com. Identity may need to be verified before a request is completed. You also have the right to complain to the competent data protection supervisory authority, particularly in the EEA country where you live, work or believe an infringement occurred.

Automated decisions and children

The concierge does not make decisions that produce legal or similarly significant effects. It cannot confirm a booking, price, permit or operational approval. This business website is not directed to children.

Changes and contact

This notice will be updated when a material data flow or provider changes. The effective date above identifies the current version. Privacy questions and rights requests can be sent to info@maldivesyachtsupport.com.

Provider information: Cloudflare customer data processing addendum.