Privacy Policy

Last updated: 20 September 2026.

This notice explains how personal data is processed when you use ECT Marine Store, pursuant to art. 13 of Regulation (EU) 2016/679 (GDPR).

1. Data controller

Eco Cleaning Technologies Consulting Srl, Via di Pratale 28, 56127 Pisa (PI), Italia — VAT no. 02488080504 — PEC ecocleaningtechnologies@lamiapec.it. Use the PEC address for any privacy request.

2. Data we process, why, and on what basis

• Account and contact data (name, email, phone, password credentials, delivery and billing addresses) — to create and manage your account and deliver orders. Basis: performance of a contract.
• Orders and payments (products, amounts, order status, shipment and tracking details, payment outcome). Card data is entered on Stripe’s page and never reaches us. Basis: performance of a contract; legal obligations.
• Billing and fiscal data (tax code, VAT number, PEC, SDI code) — to issue invoices or receipts. Basis: legal obligation (tax and accounting law).
• Yacht, equipment and maintenance data (vessel name and details, equipment, filters and replacement dates, service requests, water and air sample registrations including any photos, sampling points and readings you enter) — to provide the My Yacht features you use. Basis: performance of a contract / your request.
• Product requests (name, email, phone, message) — to reply to your request about an unavailable product. Basis: pre-contractual measures at your request.
• AI assistant conversations — the messages you write to “Ask ECT” and the replies, to answer your questions. Please do not enter sensitive personal information. Basis: performance of the service you request.
• Technical and security data (session, logs, audit records of administrative actions) — to keep the service secure and prevent abuse. Basis: legitimate interest.

Providing the data marked as needed for your account, order or invoice is required to use those features; without it we cannot complete the order or issue the document.

3. Recipients

Data is processed on our behalf, or shared where needed, with:

• Supabase — database, authentication and file storage (EU region, Ireland);
• Vercel — website hosting;
• Stripe — online payments (Stripe also acts as an independent controller for payment and anti-fraud purposes);
• Resend — transactional emails (order confirmations, shipping notices, reminders);
• Anthropic — AI model that generates the assistant’s replies;
• Fatture in Cloud — issuing invoices and receipts;
• carriers and couriers — delivery of your order;
• accountants, consultants and authorities where required by law.

Some of these providers (for example Vercel and Anthropic) are based in, or may process data in, countries outside the European Economic Area, notably the United States. In those cases transfers rely on the safeguards provided by the GDPR, such as the European Commission’s adequacy decision for certified US companies or standard contractual clauses. The shipment tracking link in your order page opens an external tracking website with its own privacy policy.

4. Retention

Account data is kept while your account exists, and AI conversations until you delete your account or ask us to delete them. Order, invoice and accounting records are kept for the periods required by law (generally 10 years for accounting records). After that data is deleted or anonymised.

5. Cookies and similar technologies

The site uses only technical storage that is necessary for it to work: session cookies to keep you signed in, and your browser’s local storage to remember your shopping cart. We do not use analytics, advertising or profiling cookies, so no consent banner is shown. If this changes we will update this notice and ask for your consent first.

6. Automated decisions

We do not take decisions based solely on automated processing that produce legal or similarly significant effects on you. The AI assistant provides informational suggestions only.

7. Your rights

You can ask us for access to your data, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interest, by writing to ecocleaningtechnologies@lamiapec.it. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).