Privacy Notice

Scope

This notice covers the yacht charter, yacht sale and marine services marketplace operated at this website: charter enquiries, purchase enquiries and service requests sent by customers, user accounts, and broker or service-provider listings.

It does not cover payments for a charter, yacht purchase or marine service between you and a broker or provider — those payments are settled outside the platform, directly between the parties.

Personal data we process

Charter enquiries (leads): full name, e-mail address, phone number, the yacht and dates you selected, guest count, and any notes you write into the enquiry form. Some form fields (country, preferred contact channel, number of children, optional extras) are used only to validate the enquiry and are not stored.

Purchase enquiries and marine service requests (leads): full name, e-mail address, phone number, the selected yacht or service listing, and the message you write. Country and preferred contact channel are used only to validate the form and are not stored.

Aggregate first-party listing analytics: the yacht listing, event type (detail view or contact click), day and aggregate count. The analytics table contains no user ID or IP address. An IP address is used only transiently in memory to avoid counting the same event repeatedly within one hour and is not written to persistent storage.

User accounts: full name, e-mail address, optional phone number, and a cryptographic digest of your password (the password itself is never stored). E-mail verification and sign-in session records are kept for the duration of their validity; expired ones are deleted in the periodic destruction cycle.

Broker accounts: the brokerage name, the contact details used for managing listings (e-mail and phone), and the listing content you publish.

Acknowledgement records: when you submit a form that processes personal data, we record which version of this notice you acknowledged and when. Your IP address is NOT stored with this record (data minimisation).

Connection data: your IP address is processed transiently in memory for abuse-preventing request rate limiting (it is not written to the database), and it appears in the access logs of the infrastructure (reverse proxy) in front of the site. The application's own logs do not record IP addresses.

AI-assisted features (search assistant, category suggestion, insight generation): the free-text search query you type; for search re-ranking, the public details of the candidate listings (name, type, region, guest capacity, price, location); the yacht or service listing title and description used for category suggestion; and — for insight generation — the numeric analytics figures described above together with the names of the listings they belong to. This data is sent to the AI provider only for the single request that generates the response; the query text itself is not stored in our database — only an aggregate daily call count per user is kept, to enforce the usage limit.

Purposes of processing

Forwarding a charter or purchase enquiry to the broker of the selected yacht, or a marine service request to the provider of the selected service listing, and enabling the relevant party to respond.

Producing aggregate first-party counts of yacht detail views and contact clicks so the relevant broker can understand listing performance and the platform can improve its operation. These counters are not used for cross-site tracking, advertising profiles or automated decisions about you.

Creating and managing your account and sign-in sessions, including automatically opening a pending account under the e-mail address you provide when you submit a charter, purchase or service enquiry, so that you can track replies to it without registering separately; you activate this pending account (and choose a password) yourself, whenever you wish, from a link we send to that address.

Sending transactional e-mails: address verification, password reset, and enquiry status notifications. No marketing e-mail is sent.

Keeping the platform secure: request rate limiting and application logs. Application logs do not contain personal data — only technical request metadata.

Providing AI-assisted search suggestions, service-listing category suggestions, and broker analytics insights — each response is generated for your single request and is not used to build a profile of you.

Legal bases

Processing is necessary for the establishment and performance of a contract (KVKK Art. 5/2-c): handling your charter enquiry, purchase enquiry, marine service request and account relationship.

Compliance with legal obligations (Art. 5/2-ç): retaining records where the law requires it.

Legitimate interest (Art. 5/2-f): platform security and operation, including aggregate first-party listing counters, limited to what does not override your fundamental rights.

No processing on this platform currently relies on explicit consent: there is no marketing, advertising analytics or analytics cookie. Aggregate first-party listing counters rely on legitimate interest and contain no persistent user or IP identifier; only strictly necessary cookies are used. That is why our forms carry no consent checkboxes.

Who receives your data

The relevant details of a charter or purchase enquiry are shared only with the broker of the selected yacht; the relevant details of a marine service request are shared only with the provider of the selected service listing, so they can respond to you.

Service providers strictly for operating the platform: hosting, e-mail delivery, and media storage — each limited to its purpose.

Authorised platform staff may access records for support and abuse investigation; this is internal access within the data controller, not a transfer, and such access is logged.

International transfers

Media files (yacht images uploaded by brokers) and database backups are stored on Cloudflare R2, whose infrastructure is located abroad.

Transactional e-mails are delivered through an SMTP relay; Resend is the delivery provider used or planned to be used, and its infrastructure is located abroad.

These transfers are carried out under the procedures of KVKK Article 9. The standard contractual documentation for routine transfers is being completed separately — transfers are not based on your consent, because consent is not the applicable mechanism for routine service-provider transfers.

AI-assisted features send the data described above to a third-party AI provider — Anthropic PBC (the Claude API) or Google (the Gemini API), depending on which one this deployment uses — whose infrastructure is located abroad, solely to generate that single response. Your name, e-mail address and IP address are never included in what is sent; a name or address you write yourself inside a free-text message (for example, a request note) may not be fully removed before sending. According to each provider's applicable API terms at the time of writing, API inputs are not used to train their models; we monitor these terms and will update this notice if they change. This transfer is carried out under the same KVKK Article 9 procedures as the transfers listed above.

Cookies

Only strictly necessary cookies are used — there are no analytics, advertising, or third-party cookies, which is why no cookie banner is shown. The full inventory is in the Cookie Policy page linked in the footer.

Your rights (KVKK Art. 11)

You may ask whether your personal data is processed; request information about the processing; learn its purpose and whether it is used accordingly; know the third parties it is transferred to, in Türkiye or abroad; request correction of incomplete or incorrect data; request deletion or destruction under Article 7; ask that corrections and deletions be notified to recipients; object to results produced exclusively by automated analysis; and claim compensation for damages caused by unlawful processing.