Privacy Policy

Last updated: 19.09.2026

This Privacy Policy explains how netayat.co.uk (“Site”, “we”, “us”, “our”) collects, uses, stores and protects the personal data of visitors and clients (“you”, “user”) who contact us, request advisory support, or engage with our professional services.

This Site operates from the United Kingdom, and the processing of your personal data is subject to the UK GDPR (UK General Data Protection Regulation) and the Data Protection Act 2018.

1. Data Controller

The data controller for your personal data is:

Business name: NETAYAT LIMITED

Address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

Email: netayat@netayat.co.uk

Phone: +44 7547800944

If you have any questions about data protection, you can reach us using the contact details above.

2. Data We Collect

In order to provide our services and respond to enquiries, we may collect the following personal data:

Identity data: First name, last name
Contact data: Email address, phone number, and any other information you provide via our contact or enquiry form
Service request data: Requested service, relevant background information, message content, and any supporting documents shared with us in connection with your enquiry
Limited technical data: Basic technical information automatically collected while using the Site (e.g. IP address, browser type) — only to the extent necessary for site security and proper functioning
Commercial engagement data: Where a client engages us for a project, the agreed scope, project notes, and any externally documented fee arrangements may be retained for administrative and contractual purposes

Note: This Site does not sell products online, does not offer online booking, and does not charge separate fees for general enquiries, consultation requests, or appointment scheduling. Any commercial arrangement, if agreed, is handled directly with the client outside this website.

Depending on the service, we may also process vessel name, IMO or MMSI number, vessel specifications, ownership details, company records, registration history, and documents needed to support a registration or radio licence application.

2A. Identity Documents and Children

Yacht registration work may require passports, proof of address, corporate ownership records, signatures, or other identity and vessel documents. We request only information needed for the relevant service and ask you not to send unrelated sensitive information.

Our services are intended for adults and businesses. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so that we can review and remove it where appropriate.

3. How We Collect Your Data

We collect your personal data directly from you, through:

Contact or enquiry forms you complete on the Site
Direct contact by email or phone
Any communication you initiate with us regarding our services

4. Purposes of Processing and Legal Basis

Purpose	Legal Basis (UK GDPR)
Processing your service enquiry or advisory request	Performance of a contract (Art. 6(1)(b)) or legitimate interests (Art. 6(1)(f))
Responding to your questions and enquiries	Legitimate interests (Art. 6(1)(f))
Complying with legal obligations (e.g. accounting records)	Legal obligation (Art. 6(1)(c))
Improving the quality of our services	Legitimate interests (Art. 6(1)(f))

We never use your data for marketing purposes without your explicit consent.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects. Any service assessment remains subject to appropriate human review.

5. Who We Share Your Data With

We do not share your personal data with third parties, except in the following circumstances:

With authorised service providers necessary to deliver our service (e.g. email or form infrastructure providers) — only to the extent required for that purpose
Where a client engagement requires us to share information with a trusted external professional or authority in order to support the project or comply with legal requirements
Where required by law or a lawful request from a public authority

We never sell your personal data to third parties.

Where a service requires contact with a flag administration, maritime authority, radio licensing body, registrar, professional adviser, or other authority, we share relevant information only as necessary to perform the agreed work or comply with law.

6A. International Transfers

Some providers or authorities involved in a service may be located outside the United Kingdom. Where personal data is transferred internationally, we use a lawful transfer mechanism and appropriate safeguards required by applicable data protection law.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. Once that period ends, your data is securely deleted or anonymised.

Enquiry and correspondence records: as long as reasonably necessary to manage the client relationship and comply with legal obligations
Accounting-related records: 6 years, as required by HMRC

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

No online transmission or storage system can be guaranteed completely secure. If you suspect that your information has been misused or disclosed, contact us promptly using the details below.

8. Your Rights Under UK GDPR

As a data subject in the United Kingdom, you have the following rights:

Right of access: Request a copy of the data we hold about you
Right to rectification: Request correction of inaccurate or incomplete data
Right to erasure: Request deletion of your data (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object: Object to processing based on legitimate interests
Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at netayat@netayat.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with how your data has been handled: ico.org.uk

9. Cookies

We currently use only technologies needed for core site operation and, where applicable, to remember cookie-consent choices. We do not currently use advertising or analytics cookies for tracking purposes. Our Cookie Policy explains the categories, controls, and future changes.

10. Children’s Privacy

Our services are not directed at individuals under the age of 18, and we do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will publish the updated policy on this page and revise the “Last updated” date accordingly.

12. Contact Us

If you have any questions about this Privacy Policy or how your personal data is processed, you can contact us at:

Email: netayat@netayat.co.uk

Phone: +44 7547800944

Address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ