Skip to content

Legal

Privacy Policy

This policy explains what personal data we collect when you use yachtsmarketplace.com, why we collect it, who we share it with, and how you can control it.

Last updated 1 January 2026

Who we are

Yachts Marketplace operates yachtsmarketplace.com. For the purposes of the UK GDPR and the EU General Data Protection Regulation, we are the data controller for the personal data described in this policy.

Registered address: [Registered address — to be completed], [Country]. Company registration number: [Company registration number]. You can reach us at hello@yachtsmarketplace.com.

What we collect

We collect two categories of data, and only these two.

Data you give us directly

  • Your name, email address and, if you provide it, your telephone number, when you submit a broker enquiry or contact form.
  • The content of the message you send us, including any details about the yacht or dates you are interested in.

Data collected automatically

  • Standard server log data — IP address, browser type, referring page and timestamp — retained for security and troubleshooting.
  • A single cookie recording whether you have dismissed our cookie notice. See the Cookie Policy for detail.

We do not collect payment details. We are not the merchant of record for any charter or purchase, and no card information is ever entered on this site.

Why we use it, and our lawful basis

  • To respond to your enquiry. Lawful basis: steps taken at your request prior to entering a contract, and our legitimate interest in answering people who contact us.
  • To operate and secure the site. Lawful basis: legitimate interest in keeping the service available and free from abuse.
  • To comply with legal obligations, where we are required to retain or disclose records.

We do not use your data for automated decision-making or profiling, and we do not sell it. We will not add you to a marketing list without asking you first.

Affiliate links and third-party sites

Some links on this site take you to charter partners such as Boatbookings and Borrow A Boat. When you follow one, a tracking parameter identifies us as the referring site so that a commission can be attributed. That parameter does not contain any information about you.

Once you leave yachtsmarketplace.com, the partner's own privacy policy and cookie practices apply, not ours. If you go on to make a booking with them, they collect your booking and payment details directly — we never see them. We encourage you to read their policies before booking. Our affiliate disclosure explains the commercial relationship in full.

Who processes data on our behalf

We keep the list of processors deliberately short. Each one is bound by a data processing agreement and may only act on our instructions.

  • Amazon Web Services — hosting and infrastructure.
  • Supabase — the database that stores enquiry records and site content.

Where data is transferred outside the UK or the European Economic Area, that transfer is covered by Standard Contractual Clauses or an equivalent approved safeguard.

How long we keep it

Enquiry records are retained for 24 months from your last contact with us, after which they are deleted. Server logs are retained for 90 days. If you ask us to delete your data sooner, we will, unless we are legally required to keep it.

Your rights

Under the UK and EU GDPR you have the right to access a copy of your data, correct it if it is wrong, have it deleted, restrict or object to how we use it, and receive it in a portable format. Where we rely on consent, you may withdraw it at any time.

Email hello@yachtsmarketplace.com to exercise any of these. We respond within one month. If you are not satisfied with our response you may complain to your national supervisory authority — in the UK, the Information Commissioner's Office at ico.org.uk.

Security

The site is served over HTTPS. Enquiry data is stored in a database protected by row-level security, with no public read access; administrative credentials are held in an encrypted secrets store and never in code or in the browser. No system is perfectly secure, but we design so that a mistake in one layer does not expose your data.

Children

This site is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.

Changes to this policy

If we change how we handle personal data we will update this page and revise the date at the top. Material changes will be highlighted on the homepage.