Privacy Policy

The controller for the personal data described in this policy is Priveo Yachts, the brand under which priveoyachts.com is operated. For any question about this policy, or to exercise any of the rights described below, write to [email protected]. We do not publish a registered company number, VAT number or street address on this site; email remains the fastest and most reliable way to reach us.

We collect personal data directly from you and, to a limited extent, automatically as you browse.

• Enquiry form: name, email, phone number (optional), chosen yacht (optional), start and finish location, charter start and end dates, number of guests, your free-text message, plus the page URL and referrer that led to the form.
• Direct contact: anything you tell us by email, phone or WhatsApp when you reach out about a charter.
• WhatsApp click records: when you tap a WhatsApp button on the site, we record the page URL, referrer, language and the prefilled message text before WhatsApp opens; the conversation that follows runs inside WhatsApp itself.
• Server logs: standard technical records (IP address, time, requested page, browser) generated automatically by our hosting infrastructure.
• Visit measurement: pages viewed, time on page, referring website, campaign parameters carried in the link, device type, browser, operating system, screen size, browser language and the country derived from your IP address. We do not store the IP address itself, and the site sets no cookies of its own for this purpose.

We process personal data for the following purposes, each resting on a specific legal basis:

• To answer your enquiry and prepare a written quote, and to perform a confirmed charter contract — this is necessary for pre-contractual steps and for the contract itself.
• To keep our booking records for as long as tax and accounting rules require, and to supply guest names for the crew list or declarations requested by port and maritime authorities when a charter is confirmed — this is a legal obligation tied to operating a charter in the relevant country.
• To keep server logs for security purposes and to understand which channel (form, WhatsApp, phone) brought us an enquiry — this rests on our legitimate interest in protecting the site and improving how we respond to guests, an interest we consider does not override your own rights given the limited data involved.

We do not use personal data for automated decision-making, and we never send marketing emails unless you ask us to.

Access to personal data is limited to what each recipient needs:

• Our own team, who read and answer enquiries through an internal messaging tool connected to our booking system.
• The local charter partner in the city you choose, once a booking is confirmed, so that the yacht, crew and itinerary can actually be delivered.
• Our hosting provider, which stores the site and the booking system and generates the server logs described above.
• A small number of specialised providers whose code runs on the site: Google Fonts (which receives your IP address to serve web fonts), the jsDelivr CDN (which serves the intl-tel-input phone-field library), and unpkg.com together with CARTO (which serve the destinations map and its tiles, based on OpenStreetMap data, and also receive your IP address). None of these providers sets cookies on our behalf.
• WhatsApp, operated by Meta, if you choose to continue your conversation there; that exchange is governed by WhatsApp's own privacy policy, not this one.

We do not sell personal data to anyone.

Some of the providers listed above may process data on servers located outside the European Union or the European Economic Area. Where that is the case, the transfer relies on the safeguards that provider applies under its own compliance framework, such as standard contractual clauses recognised under the GDPR. We do not otherwise transfer personal data outside the EU/EEA ourselves.

Enquiries that do not turn into a booking are deleted after 12 months. Confirmed booking records, including the guest details required for crew lists and port authority declarations, are kept for as long as tax and accounting rules in the relevant country require. Server logs are kept for a short period for security purposes. The local-storage identifiers used for visit measurement expire 30 days after your last visit and can be cleared from your browser at any time.

The site uses limited browser storage rather than tracking cookies:

• A local-storage entry remembering that you closed the cookie notice.
• A session-storage entry remembering which yacht you clicked, so the enquiry form can be prefilled; it is removed when you close the tab or send the form.
• A local-storage entry holding random, non-identifying visitor and session identifiers used for visit measurement, expiring after 30 days of inactivity.

None of these entries contain your name, email or phone number.

Enquiries and bookings are stored in our own booking system, access to which is limited to our team and, for confirmed bookings, the relevant local partner. Server logs are retained only briefly and used solely to detect and respond to security issues. The site itself is served as a static website, which limits the points at which data can be exposed.

Under the GDPR and the national data protection laws of the countries where we operate, you may ask us to:

• give you access to the personal data we hold about you;
• correct inaccurate data or complete incomplete data;
• erase your data, where no legal obligation requires us to keep it;
• restrict or object to certain processing, including processing based on our legitimate interest;
• receive the data you provided to us in a portable format.

To exercise any of these rights, write to [email protected]. We answer within one month and may ask you to confirm your identity before acting on the request. If you are not satisfied with our response, you may lodge a complaint with the data protection authority of your EU country of residence.

Priveoyachts.com is intended for adults arranging a yacht or boat charter and is not directed at children. We do not knowingly collect personal data from children, and the enquiry form is not designed for use by minors.

We may update this policy as our services, our network of local partners, or the tools used on the site evolve. The version published on priveoyachts.com is the one in effect, and we encourage you to check it before sending us personal data if you have any doubt.