EMIT Logo
Home Legacy
E35 Sport Cruiser E42 Grand Voyager
EMIT Care Events EMIT Talks FAQ Request a Quote Secure Access

Privacy Policy

Last Updated: July 11, 2026

EMIT Yachts respects your privacy and is committed to protecting your personal information. This policy explains how we collect, use, disclose, and safeguard your data when you visit our website or use our services. We strive to align with internationally recognized data protection standards, including the principles set out in regulations such as the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

Table of Contents

1. Data Controller & Contact Information 2. Information We Collect 3. Legal Basis for Processing 4. How We Use Your Information 5. Data Sharing & Disclosure 6. Cookies & Tracking Technologies 7. International Data Transfers 8. Data Retention 9. Data Security 10. Your Rights & Choices 11. California Privacy Rights (CCPA/CPRA) 12. Children's Privacy 13. Data Subject Access Requests 14. Complaints 15. Changes to This Policy 16. Contact Us

1. Data Controller & Contact Information

EMIT Yachts is the data controller responsible for the processing of your personal data.

EMIT Yachts

Industrial Zone, Behind the Military Airport
Hurghada, Red Sea, Egypt

Email: info@emitboats.com
Phone: +20 100 566 4477

2. Information We Collect

We collect only the information necessary to provide our services. The following table details each category:

3.1 Information You Provide Directly

CategoryData PointsSource
Contact / LeadName, email, phone, country, vessel interestQuote request form, configurator
AccountEmail, password (hashed), name, roleRegistration form
CommunicationMessage content, attachmentsEmail, phone, social media
PaymentBilling address, transaction detailsFuture purchase transactions

3.2 Information Collected Automatically

CategoryData PointsPurpose
Log DataIP address, browser type, OS, referral URLSecurity, analytics
Usage DataPages visited, time spent, interactionsWebsite improvement
Session DataDevice type, browser, OS, country, city, ISPSecurity monitoring, fraud prevention
CookiesAuthentication, preferences, analyticsFunctionality, analytics

3.3 Information from Third Parties

We may receive information from:

  • Vercel — Website hosting and analytics (anonymized page view statistics)
  • Supabase — Database and authentication services
  • YouTube — Embedded video content (see Google's privacy policy for their data collection)

3. Legal Basis for Processing

Under the GDPR, we process your personal data only when we have a lawful basis. The following table maps each processing activity to its legal basis:

Contractual Necessity

Processing your consultation request, managing your account, and providing our services.

Legitimate Interest

Website security monitoring, fraud prevention, business analytics, and improving our services. We balance your rights against our legitimate business interests and ensure the impact on your privacy is minimal.

Consent

Marketing communications, non-essential cookies, and optional profile information. You may withdraw consent at any time.

Legal Obligation

Retaining records as required by Egyptian and international tax and maritime regulations.

4. How We Use Your Information

We use your information exclusively for the following purposes:

  • Service Delivery: Responding to inquiries, processing consultation requests, and providing customer support.
  • Account Management: Creating and maintaining your Owner Portal or Admin account, managing sessions.
  • Security: Protecting our website, preventing fraud, monitoring sessions, and ensuring system integrity.
  • Analytics: Understanding website usage patterns to improve user experience (anonymized).
  • Communication: Sending information about your inquiry, our vessels, and EMIT events (with your consent where required).
  • Legal Compliance: Fulfilling regulatory obligations under applicable data protection and maritime laws.

5. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We share your data only in the following circumstances, with contractual safeguards in place:

RecipientPurposeLocationSafeguards
Vercel Inc.Web hosting, CDN, analyticsUSASCCs, DPA
Supabase Inc.Database, authenticationUSA / Multi-regionSCCs, DPA, encryption
YouTube / GoogleVideo content embeddingUSAGoogle's DPA, SCCs

We may also disclose data when required by law, regulation, or legal process, or to protect our rights, property, or safety.

6. Cookies & Tracking Technologies

Our website uses cookies and similar technologies for authentication, security, and analytics. We distinguish between:

  • Strictly Necessary Cookies — Required for the website to function (authentication, security). No consent required.
  • Preference Cookies — Remember your settings and preferences.
  • Analytics Cookies — Anonymous usage statistics via Vercel Analytics (first-party, privacy-friendly).
  • Marketing Cookies — Not currently used. We will obtain explicit consent before deploying any.

For detailed information about each cookie, its purpose, and duration, please see our Cookie Policy. You can manage your cookie preferences at any time through our Cookie Preferences Center.

7. International Data Transfers

As an Egyptian company serving an international clientele, your data may be transferred to and processed in countries outside your country of residence, including Egypt and the United States. Our service providers (including Vercel for hosting and Supabase for database services) are contractually obligated to protect your data through industry-standard data processing agreements.

If you have questions about international data transfers, please contact us at info@emitboats.com.

8. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Our retention periods are determined by the following criteria:

Data CategoryRetention PeriodRationale
Lead / Inquiry2 years after last contactCustomer relationship management
Account DataDuration of account + 1 yearService continuity, legal claims
Session Logs12 monthsSecurity monitoring
AnalyticsAnonymized (no retention of raw data)Vercel Analytics default
Financial Records7 yearsTax and legal obligations
Newsletter / MarketingUntil unsubscribed + 30 daysConsent-based

When data is no longer needed, it is securely deleted or anonymized.

9. Data Security

We implement industry-standard technical and organizational measures to protect your personal data, including:

  • Encryption in Transit: TLS 1.3 for all communications (HTTPS)
  • Encryption at Rest: Database-level encryption on Supabase
  • Access Controls: Role-based access (developer, admin, staff, owner) with least-privilege principles
  • Authentication: Password hashing (bcrypt), session tokens via Supabase Auth, optional multi-factor authentication
  • Session Management: Active session tracking with geographic monitoring, device fingerprinting, and admin revocation
  • Rate Limiting: Brute force protection on login endpoints
  • Web Application Firewall: Vercel WAF and security headers (CSP, HSTS, X-Frame-Options)
  • Regular Audits: Periodic security reviews and penetration testing

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We encourage you to use strong passwords and enable MFA where available.

10. Your Rights & Choices

Under applicable data protection laws, you have the following rights regarding your personal data. We will respond to your request within 30 days (GDPR standard) and at no charge for reasonable requests:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure (Right to be Forgotten)

Request deletion of your personal data where it is no longer needed, or you withdraw consent.

Right to Restrict Processing

Request limitation of how we use your data while a complaint is investigated.

Right to Data Portability

Receive your data in a structured, machine-readable format (JSON).

Right to Object

Object to processing based on legitimate interests or direct marketing.

Right to Withdraw Consent

Withdraw consent at any time where processing is based on consent. This does not affect the lawfulness of processing before withdrawal.

Right Not to Be Subject to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

11. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights:

Right to Know

Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purpose, and the categories of third parties with whom we share it.

Right to Delete

Request deletion of personal information we have collected from you, subject to certain exceptions.

Right to Opt-Out of Sale/Share

We do not sell or share your personal information for cross-context behavioral advertising. We have no knowledge of selling or sharing the personal information of minors under 16.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights.

Right to Correct

Request correction of inaccurate personal information.

Right to Limit Sensitive Data Use

We do not process sensitive personal information for purposes other than those authorized by the CCPA.

To exercise your California privacy rights, please submit a request via our Data Subject Request form or email us at info@emitboats.com. We will verify your identity using information you provide before fulfilling the request. You may designate an authorized agent to make a request on your behalf.

We collect the following categories of personal information (as defined by the CCPA): identifiers (name, email, IP), commercial information (products or services purchased), internet/electronic activity (website usage), and geolocation data (approximate country/city from IP). We do not collect sensitive personal information such as social security numbers, precise geolocation, or biometric data.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete it promptly. If you believe a child has provided us with personal data, please contact us immediately.

13. Data Subject Access Requests (DSAR)

To exercise any of your privacy rights, please submit a request through one of the following methods:

  • Online Form: Submit a Data Subject Request (coming soon — use email in the meantime)
  • Email: info@emitboats.com with subject line "Data Subject Request"
  • Mail: EMIT Yachts — Privacy, Industrial Zone, Behind the Military Airport, Hurghada, Red Sea, Egypt

To protect your privacy, we will verify your identity before processing your request. We will respond within 30 days (extendable by 60 days for complex requests, with notice). Requests are free of charge unless they are manifestly unfounded or excessive.

14. Complaints

If you believe we have not handled your personal data in accordance with this policy, please contact us directly so we can resolve your concerns. You also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

We encourage you to contact us first — we will do our best to resolve any issue promptly.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or operational considerations. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Notify registered users via email for significant changes
  • Post a notice on our website for at least 30 days

We encourage you to review this policy periodically. Your continued use of our website after changes constitutes acceptance of the updated policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices:

Data Protection Inquiries

Email: info@emitboats.com
Phone: +20 100 566 4477
Address: Industrial Zone, Behind the Military Airport, Hurghada, Red Sea, Egypt

EMIT Yachts

Industrial Zone, Behind the military airport
Hurghada, Red Sea, Egypt

Models

E35 Sport Cruiser E42 Day Cruiser Configurator

Company

Legacy EMIT Care Events EMIT Talks

Contact

info@emitboats.com +20 122 289 8480 FAQ Request a Quote
© 2026 EMIT Yachts. All rights reserved. Powered by Ground Zero LLC
Privacy · Cookies · Terms
Cookie Preferences EMIT Yachts uses cookies for authentication, security, and analytics. We also set preference cookies to remember your choices. Learn more