Privacy Policy — Prime Yacht Club

Prime Yacht Club is the brand under which primeyachtclub.com is operated, bringing together a network of local charter partners in each of our destinations under a single booking service. For the purposes of Regulation (EU) 2016/679 and the national data protection laws of the countries where we operate, Prime Yacht Club is the controller of the data described in this page. For anything related to how we process your data, or to use the rights set out below, write to [email protected].

We collect personal data directly from you and, to a limited extent, automatically as you browse the site.

• When you send an enquiry, we collect your name, email address and, if you choose to give them, your phone number, the yacht you are interested in, your start and finish locations, your charter dates, the number of guests and any message you write. The form also records the page you were on and the site that referred you, so we can connect your enquiry to that visit.
• If you contact us by email or phone instead, we collect whatever you tell us in that exchange.
• If you click through to WhatsApp, we record that click in our booking system together with the page, the referring site, your browser language and the prefilled message text, then the WhatsApp app or website opens. The chat that follows runs on WhatsApp and is governed by WhatsApp's own privacy policy, not this one.
• Our server keeps standard technical logs of each request to the site: IP address, time, page requested and browser, used only for security.
• We measure visits with a script we host ourselves, not a third-party analytics tool. It records which pages you looked at, how long you stayed, the site that sent you here, any campaign or advertising tag carried in the link, your device type, browser, operating system, screen size, browser language and the country worked out from your IP address — the IP address itself is not stored. If you then send an enquiry or click through to WhatsApp or a phone link, that action is linked to the same visit so we know which channel brought you to us.
• Your browser stores three small pieces of information: a note that you closed the cookie banner, a temporary record of the yacht you clicked on so the enquiry form can prefill it (deleted when you close the tab or send the form), and two random identifiers used only to count visits, which expire 30 days after your last visit and can be cleared at any time in your browser settings. None of these hold your name, email or phone number.

We use your data for the following purposes, each resting on a specific legal basis under the GDPR:

• To answer your enquiry and prepare a quote, and, once you confirm, to manage your charter — necessary to take steps at your request before a contract and to perform the contract once it exists.
• To keep booking records for the periods tax and accounting rules require — a legal obligation.
• To keep server logs and watch for misuse of the site — our legitimate interest in keeping the service secure, balanced against the limited data involved and the short period we keep it.
• To understand how the site is used and improve it — also our legitimate interest, kept narrow by running the measurement ourselves and never storing your IP address.

We do not use your data for automated decision-making, we do not sell it, and we do not send marketing emails unless you ask us to.

Access to your data is limited to the people and services that need it to deliver your charter or run the site:

• Our own team, who see enquiries through an internal messaging tool so we can reply quickly.
• The local charter partner in the city you choose, once your booking is confirmed, so they can prepare and run your charter. For a confirmed booking this can include the names of all guests, since port authorities in most of our destinations require a crew list before departure.
• The hosting provider that serves the website as static pages and keeps the server logs described above.
• Google, for the web fonts used on the site; jsDelivr, for the library that formats phone numbers in the enquiry form; unpkg and CARTO, for the map of our destinations shown on the homepage. Each receives your IP address when your browser loads the relevant resource, but none of them sets cookies on our behalf.
• WhatsApp, operated by Meta, if you choose to write to us there; that conversation is subject to WhatsApp's own terms and privacy policy, not ours.

Most of the services above are based in, or keep data within, the European Economic Area. Where a provider such as Google, jsDelivr, unpkg, CARTO or WhatsApp processes data outside the EEA, the transfer is carried out under the safeguards the GDPR requires for this, such as the European Commission's standard contractual clauses, so your data remains protected wherever it is handled.

• Enquiries that do not lead to a booking are deleted after 24 months.
• Confirmed booking records are kept for as long as tax and accounting rules require.
• Server logs are kept for a short period, only as long as needed to look into a security incident.
• The random identifiers used for visit measurement expire 30 days after your last visit to the site.

We limit access to your data to the people and services listed above, keep server logs briefly and only for security purposes, and rely on a hosting setup built to keep the site and its data available and protected. Bookings are never paid for on the website itself, so no payment card data ever passes through our systems.

Under the GDPR you can ask us to:

• give you access to the data we hold about you;
• correct it if it is inaccurate;
• erase it, where we are not required to keep it for a reason such as tax rules;
• restrict or object to certain uses, including processing based on our legitimate interest;
• give you the data you provided in a portable format.

To use any of these rights, write to [email protected]. We may ask you to confirm your identity before acting on your request, and we will respond within one month. If you live in the European Union and believe we have not handled your data correctly, you may lodge a complaint with the data protection authority of your country of residence.

Our charters and this website are addressed to adults making travel arrangements, and we do not knowingly collect data from children. We may update this page as our services or the tools we use change; the version published on primeyachtclub.com is always the current one.