1. Who we are
Michal Jatczak, a sole trader registered in Malta and trading as ITSailor (the "Data Controller"), operates the website https://itsailor.io and any services offered through it.
Registered office: 507 CITYWAY, Triq Il-Madonna Tal-Gebla, GZR 1564 Gzira, Malta. Maltese VAT number: MT32760411.
For any privacy-related question, contact michal.jatczak@itsailor.io.
2. What we collect
- Contact details you submit via our forms or email (name, work email, company, country, use case).
- Audit input data you grant us read-only access to, strictly limited to the scope of the engagement (e.g. M365 license inventory, DNS records, automation telemetry). We do not request or store credentials.
- Technical data (IP, user agent, referrer, page timing) collected by our hosting provider and any analytics tooling disclosed in the cookie banner, when enabled.
3. Why we process it (legal bases — GDPR Art. 6)
- Contract / pre-contract (Art. 6(1)(b)) — to respond to your request, deliver an audit, or operate a partner relationship.
- Legitimate interest (Art. 6(1)(f)) — to maintain the security and integrity of our website and to communicate with partners and prospects who have actively engaged with us.
- Consent (Art. 6(1)(a)) — for any optional analytics, marketing emails, or non-essential cookies. You can withdraw consent at any time.
- Legal obligation (Art. 6(1)(c)) — to retain invoices, VAT records, and similar documents as required by Maltese and EU law.
4. Who we share data with
We only share personal data with processors strictly necessary to operate the service. Current processors:
- Vercel Inc. — website hosting and deployment.
- Microsoft Ireland Operations Ltd. — Microsoft 365 email and collaboration.
- Cloudflare, Inc. — DNS for itsailor.io.
- Resend, Inc. — delivery of contact-form messages.
We do not sell personal data. Where a processor can handle data outside the EU/EEA, we require an appropriate safeguard such as Standard Contractual Clauses or an equivalent approved mechanism.
5. Retention
- Form / contact submissions: 24 months from last interaction.
- Audit input data and reports: 12 months after engagement closure, unless a longer term is required by tax / accounting law.
- Invoices and VAT records: 10 years (Maltese statutory).
6. Your rights (GDPR Art. 15–22)
You have the right to access, rectify, erase, restrict, port, or object to the processing of your personal data, and to lodge a complaint with the Maltese Information and Data Protection Commissioner (IDPC). To exercise any right, email michal.jatczak@itsailor.io.
7. Cookies
The current version of itsailor.io sets only essential cookies required to deliver the page. When analytics or marketing cookies are introduced, a consent banner will be shown and this section updated.
8. Changes
We will publish material changes on this page and update the "last updated" date above. Substantial changes affecting existing processing will be communicated by email where applicable.