Privacy Policy
Last updated 14 October 2026
CCS (Coating Consultants for Superyachts) is a private client portal for superyacht coating projects. This policy explains what personal data the portal holds, why, and your rights over it. CCS is based in Spain and handles personal data under the EU General Data Protection Regulation (GDPR).
Who is responsible
CCS is the data controller for the personal data in the portal. For any privacy question or request, email anthony87walsh@gmail.com.
What we hold
- Account details — your name, email address, company and role, and the projects you are allowed to see.
- Project records — inspection reports, readings, notes, photos, snag lists, documents and comments added by users of a project. These can include the names of people involved in the work.
- Sign-in and security records — when you sign in, and technical details needed to keep your session secure.
We do not use advertising, tracking or analytics cookies, and we do not sell or share personal data for marketing.
Why we use it
- To provide the portal: sign-in, showing each user only the projects they are authorised to see, and producing reports. (Legal basis: performance of a contract, and our legitimate interest in running the service for our clients.)
- To send service emails, such as notice that a report has been issued or an action needs attention.
- To keep the portal secure and to meet legal obligations.
Cookies and storage on your device
The portal uses only what it needs to work: a sign-in cookie that keeps you logged in, and storage in your browser for your settings (such as light or dark view) and, if you choose, copies of projects saved for offline use. Offline copies stay on your device until you clear them or sign out.
Who can see it
Project data is visible only to users that CCS has given access to that project. Access is enforced by the database itself, not just by hiding pages. The portal runs on trusted service providers acting on our instructions:
- Supabase — database, sign-in and photo storage.
- Vercel — website hosting.
- Resend — service emails.
Where these providers process data outside the European Economic Area, they do so under the European Commission’s Standard Contractual Clauses. All connections to the portal are encrypted (HTTPS).
How long we keep it
Project records are kept for as long as the coating record is needed by the vessel’s owner and for warranty purposes, or as agreed with the client. Accounts that are no longer needed are removed on request or when a project ends.
Your rights
You can ask to see, correct or delete your personal data, to restrict or object to how it is used, or to receive a copy of it. Email anthony87walsh@gmail.com and we will reply within one month. You can also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).
Security
To report a security concern, email anthony87walsh@gmail.com. Our security contact details are also published at /.well-known/security.txt.
Changes
If this policy changes, the new version will be posted on this page with a new date.