Privacy Policy

1. Overview and Data Controller

This Privacy Policy governs the processing of personal data on the website crewcottageflicki.click. The data controller responsible for this site is Flicki Maritime Observation Ltd., registered under company registration number SC-849201-B, having its principal registered office at Pier Head Bastion, East Pier Road, Kirkwall, Orkney KW15 1HU, United Kingdom. You may direct data protection inquiries to our designated contact at [email protected].

2. Personal Data We Collect

We adhere to the principle of data minimisation. The personal information processed by this website is limited to:

• Contact Submissions: When you submit a technical inquiry via our contact form on contact.html, we capture your provided name, email address, topic category, and message text. This processing is performed on the basis of your explicit consent and our legitimate interest in responding to user communications.
• Technical Connection Logs: When accessing our static pages, our web server infrastructure automatically records standard transmission logs, including truncated IP addresses, timestamp of access, HTTP request method, requested URI, browser user-agent string, and referrer headers. These logs are utilised solely for server security and operational stability.
• Local Browser Storage: We store a minimal consent preference flag in your browser’s localStorage under the key flicki_cookie_consent to retain your cookie selection across sessions.

3. Purpose and Legal Grounds of Processing

We process your personal data under the General Data Protection Regulation (UK GDPR / EU GDPR) and the Data Protection Act 2018 on the following legal bases:

• Consent (Article 6(1)(a)): For handling direct inquiries voluntarily submitted through our field desk contact form.
• Legitimate Interests (Article 6(1)(f)): For monitoring server performance, diagnosing routing failures, mitigating distributed denial-of-service threats, and maintaining functional website availability.

4. Cookies and Tracking Technologies

crewcottageflicki.click does not deploy third-party advertising trackers, cross-site profiling pixels, or intrusive commercial tracking scripts. For detailed information regarding our storage mechanisms and cookie categories, please review our dedicated Cookie Policy.

5. Data Retention Periods

Technical server access logs are retained for a rolling period of no more than thirty (30) days, after which they are permanently purged or anonymised. Form correspondence submitted to our contact inbox is retained for up to twelve (12) months to maintain historical records of communications, after which messages are deleted unless required for legitimate legal or dispute purposes.

6. Third-Party Processors and International Transfers

Our static site infrastructure is hosted on secure web servers located within the United Kingdom and the European Economic Area (EEA). We do not sell, rent, trade, or transfer personal data to commercial data brokers or unrelated third parties. Where third-party technical hosting providers are engaged, they act strictly under standard contractual clauses ensuring equivalent GDPR data protection safeguards.

7. Your Data Subject Rights

Under applicable data protection legislation, you possess distinct legal rights regarding your personal information:

• Right of Access: You may request confirmation and copies of any personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal records.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal communications where no ongoing statutory retention obligation applies.
• Right to Restrict Processing: You may request limits on how your data is processed under specific legal disputes.
• Right to Data Portability: You may request your submitted data in a structured, machine-readable format.
• Right to Object: You may object to data processing grounded on legitimate interests.

To exercise any of these rights, transmit a written notice to [email protected]. We will acknowledge and respond to verified requests within thirty (30) calendar days without fee.

8. California Consumer Privacy Rights (CCPA / CPRA)

Under the California Consumer Privacy Act as amended by the CPRA, California residents are entitled to know what categories of personal information are collected and whether data is sold or shared. crewcottageflicki.click does not sell personal information, does not share personal information for cross-context behavioural advertising, and does not collect sensitive personal information as defined by California statutes.

9. Security Measures

We implement technical and organizational safeguards including Transport Layer Security (TLS 1.3) encryption for all web communications, least-privilege administrative access controls, and regular static file integrity audits.

10. Updates to This Policy

We may revise this Privacy Policy to reflect technical, operational, or statutory adjustments. Any changes will be published directly on this page with an updated effective date.