This privacy statement addresses the personally identifiable information (“data”) that we collect and process about users of our services (“you” or “your”). “Services” means any services that we offer, including visitors to our website.

1. General
1. We are Orgo Yachting (“we”, “us” or “Orgo Yachting”).
2. This Privacy Statement explains how we collect, process, and use data about you. This Privacy Statement applies to all users, including those users who use the Services via their employer or another company. This Privacy Statement also applies to all of the data that we collect through our Services, irrespective of the type of Services or the device you use to access the Services. If you submit personal data to us via the Orgo Yachting Website, you agree that we may collect, use and store that personal information data in accordance with relevant data protection legislation and regulations. Further details can be found at www.ico.gov.uk.
2. Collection
1. The data we collect about you depends on the Services that you use (and how you use them). The remainder of this section sets out the categories of data we collect depending on your use of our Services.
2. If you register as a user of any of our Services, we may for example ask you to provide your name, email address, job title, contact telephone number, the company you work for, your address, a username and password, and other data relevant to the Services we provide. If you are not an administrative user for your account, the same data about you may be provided by a colleague or other third party. We may also collect other data directly from you, from time to time.
3. Depending on your account type, we may collect payment data from you in order to take payment for our Services.
4. If you contact our support services, we will collect the data we need to categorize your question and respond to it. We also use this data to track potential issues with our Services and customize our support responses to better serve you.
5. We collect data about you when you use any part of our Services. For example, if you are logged in to your Orgo Yachting account, we will collect data as to how often you use it, what queries you created or amended, and other data about how you interact with it. We may also collect data about how you interact with messages we send to you, for example whether you opened an email or read an in-app message.
6. We collect data about the device you use to access our Services, including operating system details, web browser type, your mobile device identifier and mobile operating system, and the name of your ISP or mobile carrier. We may also collect your location data if your device permits this.
7. We will indicate where any personal information we have requested is mandatory or optional. We will also explain the consequences should you decide not to provide information which we have indicated is mandatory. In some circumstances this may mean we are unable to provide you with a certain service or product.
3. Using your data
1. Orgo Yachting has a legitimate interest to process the data of data subjects it deems relevant, and that could have a potential interest in its products &/or services. It has a Legitimate Interest to do this in order to provide our Services to our customers, which includes providing technology that empowers our customers to act with more certainty in a way that is easy-to-access and use. Orgo Yachting also processes the data of its customers in order to ensure they can deliver offers and other relevant materials, for example where consent is required to send certain marketing communications or where the processing is necessary for compliance with our legal obligations (for example where we receive requests from regulatory authorities).
2. We combine data about you across our Services. We use data and content that you and other users provide or make available to us to provide the Services to you and our other customers. We also use data to conduct research and development for the improvement of our Services so that we can provide all of our users with a better experience.
3. We may communicate transactional or service messages to you, such as welcoming you to our Services or informing you of scheduled downtime, via email or other means available through the Services. We may also send you marketing communications, on our own behalf or in future on the behalf of third parties. Marketing communications may be sent to you, even if you do not have an account, if you have indicated to us that you wanted to receive such communication. In respect of marketing communications, you can opt out of receiving future communications in the footer of each email we send to you. You cannot opt out of receiving transaction or service messages from us while you are a consumer of those services.
4. We do not use your personal data to engage in automated decision making about you.
4. Sharing your data
1. We may in future share data with affiliates (meaning legal entities controlled by, controlling, or under common control with us) as reasonably necessary to provide the Services.
2. We may in future share your data with selected third parties, including business partners, suppliers, and sub-contractors, for the performance of any contract we enter into with them. We may also share your data with analytics and search engine providers that assist us in the improvement of our website.
3. We may also disclose some of your data to other third parties. Alternatively, if we or substantially all of our assets are acquired by a third party, your data may be part of the transferred assets.
4. If any third party processes any of your data, we ensure there are sufficient contractual and operational safeguards protecting your data.
5. Accuracy, retention, security, and your rights
1. We will retain data about you for as long as it is reasonably necessary for us to provide the Services. We anonymise any data about you as soon as it is reasonably practical, once you no longer use our Services.
2. We may transfer your data to, and store it in, a country other than your own. That country may not provide the same level of data protection as your own country. Whenever we transfer your information outside of Europe, we will take steps which are reasonably necessary to ensure that adequate safeguards are in place to protect your personal information and to make sure it is treated securely. If you are located in Europe, you may contact us for a copy of the safeguards which we have put in place to protect your personal information and privacy rights in these circumstances.
3. The servers that store your data have appropriate administrative, technical, and physical controls that are designed to safeguard your data, including industry-standard encryption technology.
4. You have a number of legal rights in your data under applicable data privacy law. Under applicable law you may:
1. request access to the data that we have about you and request that it be updated, rectified, deleted, or blocked;
2. request that we refrain from further use of any data we hold about you;
3. if we ever process your data based on your consent, to revoke your consent at any time, where relevant; or
4. request to receive a machine-readable copy of the data have provided to us.
5. To exercise any rights listed above, please email us at support@orgo.co.uk or write to us at the address listed at the bottom of this document.
6. You may lodge a complaint with the supervisory authority about our processing of your data under this Privacy Statement. The appropriate supervisory authority is the data privacy regulator in which you live. If you live in the United Kingdom it is the Information Commissioner’s Office and you can report a concern at ico.org.uk/concerns.
7. Please note that we cannot always delete records of all historical data. For example, we are required to retain certain records for financial reporting and compliance reasons.
6. Privacy practices of third parties
1. This Privacy Statement only addresses our collection, processing and use (including disclosure) of your personal data. In future our customers and other third parties may have access to your personal data and use it in other ways in accordance with their own privacy practices. We encourage you to familiarize yourself with the privacy statements provided by any platform you use to publish any data.
7. Governing law and jurisdiction
1. English law governs this privacy statement and any dispute or claim related to it. Each party agrees that the English courts have exclusive jurisdiction over this privacy statement and any dispute or claim related to it.