Privacy Policy

The company behind this site

Delivered Onboard is owned and operated by Ocean Air Media (OAM), a media and software company serving the yacht industry. OAM is the data controller for all information collected through this website and its services.

If you want to contact us about your data, you can reach us at deliveredonboard@gmail.com at any time.

The data we gather from you

When you join a waitlist or sign up for updates

• Email address — required, so we can contact you
• Name — optional on some forms
• Vessel name and role — optional, collected only on the Delivered Onboard waitlist
• Product interests — which workbench tools you've asked us to notify you about
• Pricing tier preference — if you indicate one on the waitlist

When you submit a Creative Crew application

• Full name, email, phone number
• Professional role and experience summary
• CV or portfolio file — if you upload one
• Any additional information you share in free-text fields

Automatically, when you use the site

• Browser type and user agent — for security and debugging
• Approximate IP address — retained briefly for fraud prevention
• Pages visited and time on site — basic analytics only

Our lawful basis for processing

Under GDPR, we must have a lawful reason to process your data. Here are ours:

• Consent — you give us your email because you want to hear from us. You can withdraw this consent at any time by unsubscribing.
• Legitimate interest — basic site analytics and security logging, which let us keep the site running and detect abuse.
• Contract — if you become a paying customer, we process your data to deliver the service you purchased.
• Legal obligation — if we are required to retain records for tax, accounting, or regulatory reasons.

Where your data lives

We keep infrastructure simple and audit-friendly. Your data is stored with the following providers:

• Supabase (EU region) — form submissions, subscriber records, and application data
• Kit (formerly ConvertKit) — email subscribers and campaign delivery
• Netlify — website hosting and delivery
• Google Workspace — our business email and shared documents

Each of these providers has their own privacy policy and data protection commitments, which we have reviewed and rely on. By using our site, you consent to data being processed by these providers on our behalf.

Retention periods

• Email subscribers — we retain your email while you are subscribed, and up to 12 months after you unsubscribe for housekeeping purposes.
• Waitlist entries — retained until the product launches and for 12 months after, unless you ask us to remove you sooner.
• Crew applications and CVs — retained for 24 months while you are active in our placement network. You can ask us to delete your profile and CV at any time.
• Server logs — rotated out within 30 days.
• Financial records — retained for 7 years as required by tax law.

What you can ask us to do

Under GDPR you have the right to:

• Access your personal data — we will send you a copy of what we hold.
• Correct inaccurate or incomplete data.
• Delete your data (the "right to be forgotten"), subject to any legal retention obligations.
• Restrict how we process your data in certain circumstances.
• Port your data to another service in a machine-readable format.
• Object to processing based on legitimate interest.
• Withdraw consent at any time, where our lawful basis is consent.
• Complain to your local data protection authority if you believe we have mishandled your data.

To exercise any of these rights, email us at deliveredonboard@gmail.com. We respond to all requests within 30 days, usually within a few working days.

Third parties and sub-processors

We do not sell your data. We do not share it with advertisers or data brokers. The only parties who have access are the providers listed in section 04, acting on our behalf as sub-processors.

If we ever receive a legally binding request from a law enforcement agency or court, we will comply with applicable law. We will notify you where we are permitted to do so.

What we use and what we don't

We use only strictly necessary cookies to keep the site functioning — session state, security, and form submission handling. We do not use marketing cookies, cross-site tracking, or third-party advertising pixels.

If we ever add analytics, we will update this policy and add a clear opt-in banner.

Age of users

Delivered Onboard is a business service for professional crew and yacht operators. It is not directed at children. We do not knowingly collect data from anyone under the age of 16. If you believe a child has submitted data to us, please email us and we will remove it.

How we update this page

If we change how we handle your data, we will update the "Last updated" date at the top of this page. Significant changes — anything affecting your rights or our lawful basis — will also be communicated by email to active subscribers.