Privacy Policy — Yacht Charter Saint-Tropez

The controller for personal data processed through yachtchartersttropez.com is Yacht Charter Saint-Tropez, the brand under which this charter brokerage operates in Saint-Tropez. For any question about this policy, a booking, or your personal data, write to [email protected]. This is also the address to use if you want to exercise any of the rights described below.

We collect personal data directly from you, and a small amount of technical data automatically as you browse the site.

• Enquiry form: name, email, phone number if you give it, the yacht you are interested in if you choose one, your requested charter start and end dates, number of guests, your free-text message, plus the page URL and referrer the form was sent from.
• Email, phone and WhatsApp: whatever you tell us when you contact us directly through these channels, including any details you share to refine a quote.
• WhatsApp click records: when you tap a WhatsApp button on the site, we record the page URL, referrer, site language and the prefilled message text in our own booking system before WhatsApp opens. The conversation that follows happens inside WhatsApp itself, which is operated by Meta under its own privacy policy, not ours.
• Visit measurement: our own script, served from our own domain, records pages viewed, time on page, referring website, any campaign parameters in the link (UTM or ad click identifiers), device type, browser, operating system, screen size, browser language and a country derived from your IP address. We do not store the IP address itself, and the site sets no cookies for this purpose.
• Server logs: our hosting provider's standard logs capture IP address, time, requested page and browser for a short period, for security purposes.
• If you book a confirmed charter, we also need the full names of all guests for the crew list that French port authorities require us to hold for safety and maritime regulation reasons.

We use personal data only for the purposes below, each resting on a specific legal basis under GDPR.

• Replying to your enquiry and preparing a quote: necessary pre-contractual steps taken at your request.
• Managing a confirmed charter, including the crew list we submit to port authorities: necessary to perform the charter contract and to comply with our legal obligations as a charter operator.
• Keeping booking records for the period required by French tax and accounting rules: legal obligation.
• Server logs and fraud or abuse monitoring: our legitimate interest in keeping the site and our business secure.
• Visit measurement and linking a visit to the enquiry or WhatsApp click it led to: our legitimate interest in understanding which channel brought you to us, so we can run the site and respond to enquiries efficiently.

We do not use personal data for automated decision-making, we do not sell it, and we do not send marketing emails unless you ask us to.

Access to personal data is limited to people and services who need it to do their job.

• Our own team, who read and reply to enquiries through an internal messaging tool linked to our booking system.
• The captain or skipper who will run your charter, once a booking is confirmed, so the right person has your guest list, dates and any special requests.
• Our hosting provider, which serves the static website and keeps the server logs described above.
• Google, when the site loads web fonts from Google Fonts — this exposes your IP address to Google for that request.
• The jsDelivr content delivery network, which serves the intl-tel-input library used for the phone-number field in our enquiry form.
• WhatsApp (Meta), for any conversation you choose to start through a WhatsApp button; that exchange is governed by WhatsApp's own privacy policy.

None of these third parties sets cookies on our behalf, and we do not share personal data with anyone for their own marketing purposes.

Our booking system, team and hosting operate within the normal course of running a Saint-Tropez charter business and we do not knowingly route your enquiry or booking data outside the European Economic Area for our own processing. Where a third-party service such as Google Fonts, jsDelivr or WhatsApp may process data on infrastructure located outside the EEA, that processing is carried out under that provider's own safeguards and privacy terms, as referenced above.

A few small entries are kept in your browser, none of which contain your name, email or phone number.

• One local-storage entry remembers that you closed the cookie notice.
• One session-storage entry remembers which yacht you clicked on, so the enquiry form can be prefilled; it is deleted when you close the tab or send the form.
• One local-storage entry holds random visitor and session identifiers used for our own visit measurement; it expires 30 days after your last visit and you can clear it from your browser settings at any time.

No cookies are set by the site itself.

Enquiries that do not turn into a confirmed charter are deleted after 24 months. Records relating to a confirmed booking, including guest names used for the crew list, are kept for as long as French tax and accounting law requires us to retain them. Server logs are kept for a short period for security purposes only.

We limit access to personal data to the team members and service providers described above and keep server logs only briefly for security monitoring.

You have the right to:

• access the personal data we hold about you;
• ask us to correct or complete it;
• ask us to delete it, subject to our legal retention obligations for booking records;
• ask us to restrict or object to certain processing;
• receive the data you gave us in a portable format;
• withdraw consent at any time where processing is based on consent.

To exercise any of these rights, write to [email protected]. We will respond within one month and may ask you to confirm your identity first. If you believe your rights have not been respected, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) at www.cnil.fr.

Our charters and this website are addressed to adults arranging their own or a group's time on the water in Saint-Tropez, and we do not knowingly collect personal data from children. We may update this policy as our practices evolve; the version published on yachtchartersttropez.com is the one that applies, and we encourage you to check it before sending an enquiry.