How we handle your data

Last updated 8 October 2026

Who we are

Oceanhand Collective provides marine conservation, nautical and media services across Malta, Portugal, Greece and Egypt. We are the controller of the personal data described here. Contact: daniel@oceanhandcollective.com.

What we collect and why

When you send an enquiry we receive your name, email address, the service line you chose and your message. We use them only to reply to you and, if you go ahead, to prepare the work. The legal basis is taking steps at your request before a contract (GDPR Article 6(1)(b)) and our legitimate interest in answering enquiries (Article 6(1)(f)).

If you contact us on WhatsApp, the conversation is handled by WhatsApp (Meta Platforms Ireland) under its own privacy terms, and we keep the messages for as long as the enquiry is open.

We measure page views with Google Analytics 4 in consent mode (cookieless and aggregated unless you consent; IP addresses truncated). We run no advertising or tracking, and we do not sell or share your data for marketing.

Accounts

If you create an account we hold your email address, the name you choose to add (optional), your role, and for each signed-in device the session’s IP address and browser type, which we use to keep the account secure. The legal basis is providing the account you asked for (GDPR Article 6(1)(b)). When anyone asks for a sign-in link we briefly keep their IP address (about an hour) to stop abuse; this is our legitimate interest in keeping the service secure (GDPR Article 6(1)(f)). The data is stored in the EU (Frankfurt). Sign-in links expire after 10 minutes, sessions after 30 days, and when you delete your account on the Account page it is erased immediately, with all its sessions.

Who processes it

Vercel Inc. hosts the website and processes requests to it.
Resend Inc. delivers enquiry emails to our inbox.
Storyblok GmbH stores the website’s editorial content (no visitor data).
Google Ireland Ltd processes aggregated analytics measurements (Google Analytics 4).
Neon Inc. hosts the account database in Frankfurt (EU).
Google Ireland Ltd delivers sign-in emails through our Google Workspace mailbox.

Some of these providers operate outside the EU/EEA under standard contractual clauses.

How long we keep it

Enquiry data is kept for 12 months after our last exchange, or for the life of the engagement plus the statutory retention period if you become a client.

Accounts are kept until you delete them; deletion is immediate and removes all sessions.

Your rights

You can ask us to access, correct, delete or export your data, to restrict or object to its use, and you can complain to your national data protection authority. Write to us at daniel@oceanhandcollective.com and we will respond within one month.

Cookies

Analytics cookies are set only with your consent; advertising cookies never. See the cookie policy.