Privacy Policy

Last updated 1 August 2026

This policy explains how heyboat Ltd ("heyboat", "we") collects and uses personal data when you use our marketplace, and when we contact charter operators about listing their boats.

1. Who we are

heyboat Ltd is the data controller for the personal data described in this policy. Contact us at [email protected].

2. Data we collect

  • Account data — name, email, phone, and password when you register as a traveller or charter partner.
  • Booking & enquiry data — the details you submit when you enquire about or book a charter.
  • Charter operator data — for boats we list on operators' behalf, we hold business contact details (name, business email, phone, website) gathered from publicly available sources, so we can invite the operator to claim their listing.
  • Usage data — technical logs and analytics needed to run and secure the service.

3. How and why we use it

We process personal data to operate the marketplace, process bookings and payments, respond to enquiries, and communicate with charter operators about listing their boats. Our legal bases are: performance of a contract (bookings), your consent (marketing to travellers), and legitimate interests (running and growing the marketplace, including business-to-business outreach to charter operators).

4. Charter operator outreach & your choices

If we've listed your boats and contacted you, you can opt out at any time using the unsubscribe link in our email, or by emailing us. On request we will stop contacting you and remove your listings and contact details from heyboat. We do not sell your data.

5. Sharing

We share data only with service providers who help us run heyboat (e.g. hosting, email delivery, and payment processing via Stripe), and where required by law. These providers act on our instructions under appropriate safeguards.

6. Retention & security

We keep personal data only as long as needed for the purposes above or to meet legal obligations, and we apply appropriate technical and organisational measures to protect it.

7. Your rights

Subject to applicable law, you may request access to, correction of, or erasure of your personal data, object to processing, or request portability. To exercise any right, contact [email protected]. You may also complain to your local data protection authority.

8. Changes

We may update this policy from time to time. We'll post the revised version here with a new "last updated" date.