Privacy Policy & Data Protection Commitment
At Aqua Haul, safeguarding your personal data is paramount. This privacy policy details our unwavering commitment to protecting your information, ensuring full compliance with GDPR and all applicable UK data protection regulations. We believe in transparency and empower you to understand and control your data.

Our Promise of Transparency
This policy outlines the scope of data collection across our website and services, our principles for handling your information, and how we ensure its security. Aqua Haul acts as the data controller for the information you provide, and we maintain stringent internal procedures.
Understanding Your Rights
You have fundamental rights concerning your personal data, including the right to access, rectify, or erase your information, and to object to certain processing activities. We are committed to facilitating the exercise of these rights efficiently and respectfully.
Data Collection & Usage Practices at Aqua Haul
At Aqua Haul, every piece of data we collect serves a specific, legitimate purpose, primarily to deliver and enhance our marine services effectively and securely. We adhere to the strictest lawful bases for processing under GDPR, ensuring your trust is always at the forefront of our operations.
-
Types of Data Collected
We collect essential information such as contact details (name, email, phone), vessel specifications for management services, logistics requirements for transport, and transaction data for equipment sales. This is collected via forms, direct communications, and service agreements.
-
Lawful Basis for Processing
Our data processing relies on clear consent, contractual necessity, legitimate interests (e.g., service improvement, fraud prevention), and legal obligations. We specify the basis for each data type upon collection.
-
Purpose of Usage
Data is used exclusively for service delivery, customer support, invoicing, improving our offerings, and ensuring operational safety and compliance. We do not use your data for unrelated third-party marketing.
-
Data Retention & Deletion
We retain data only as long as necessary for the purposes for which it was collected or to comply with legal requirements. Rigorous schedules ensure timely and secure deletion or anonymization of your information.
For detailed information or to withdraw consent, please refer to the 'Your Data Protection Rights & Controls' section or contact our DPO.


Your Data Protection Rights & Controls
Aqua Haul fully respects and enables your rights as a data subject under GDPR. We provide clear, accessible mechanisms for you to manage your personal information effectively.
- Right to Access:
- Request copies of your personal data held by us. We provide this in a readable format.
- Right to Rectification:
- Correct any inaccurate or incomplete personal data we hold about you.
- Right to Erasure:
- Request the deletion of your personal data, subject to legal retention obligations.
- Right to Portability:
- Receive your data in a structured, commonly used, machine-readable format or have it transferred directly to another controller where technically feasible.
- Right to Object:
- Object to processing your personal data for certain purposes, including direct marketing.
To exercise any of these rights, please contact our Data Protection Officer at [email protected] or use our dedicated online request form.
Robust Data Security & Protection Measures
Aqua Haul employs industry-leading technical and organizational security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. Our commitment extends to every aspect of our operations.
Technical Safeguards
- Data Encryption (in transit and at rest)
- Firewalls and Intrusion Detection Systems
- Strict Access Controls and Multi-Factor Authentication
- Regular Security Audits and Vulnerability Assessments
Organizational Safeguards
- Mandatory Staff Data Protection Training
- Data Processing Agreements with Third Parties
- Comprehensive Data Breach Response Plan
- Safeguards for International Data Transfers
In the unlikely event of a data breach, we have robust notification procedures in place to inform affected individuals and regulatory authorities promptly, as per GDPR requirements.
