1. Data Controller Identity
Questsviewticker Financial Services Ltd ("we", "our", or "us"), registered at 12 Finance Lane, London, EC1A 1BB, UK, acts as the data controller for any personal information collected through the questsviewticker.yachts website. We are committed to processing data in compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Information We Collect
We may collect, store, and process the following categories of data:
- Identity and Contact Data: Includes name and email address, collected only when you voluntarily submit inquiries via our Contact Form.
- Technical Data: Includes IP addresses, browser types, time zone settings, and operating systems automatically collected when you access our server.
- Usage Data: Information about how you interact with our website, pages viewed, and navigation paths.
3. Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Consent: Where you have provided clear consent for us to process your personal data for a specific purpose (e.g., submitting a contact form or accepting non-essential cookies).
- Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms (e.g., maintaining network security and preventing fraud).
4. Third-Party Processors and Sharing
We do not sell, rent, or trade your personal data to third parties. We may share your data with trusted third-party service providers who assist us in operating our website, such as hosting providers and analytics partners. All third-party processors are bound by strict data processing agreements ensuring adequate security and compliance with relevant laws. If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, such as Standard Contractual Clauses, are in place.
5. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which we collected it. Contact form submissions are retained for a maximum of 12 months for customer service follow-ups. Analytics and technical data are anonymized or deleted after 26 months.
6. Your Data Rights (GDPR & CCPA)
Depending on your jurisdiction, you possess specific rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your data under certain conditions.
- Right to Restrict Processing: Request suspension of processing your personal data.
- Right to Data Portability: Request transfer of your data to yourself or a third party.
7. Data Protection Officer (DPO) Contact
To exercise any of your rights, or if you have questions regarding this Privacy Policy, please contact our Data Protection Officer at: [email protected].