Privacy Policy

Privacy Policy

Last updated: [add date]

This Privacy Policy explains how SkipperCity, operated by Blackbird One Ltd. (“we”, “us”, “our”),
collects, uses and protects your personal data when you visit our websites, contact us, or book a yacht charter through us.

We are committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws,
including the EU General Data Protection Regulation (“GDPR”) where applicable.

1. Who we are (data controller)

In short: SkipperCity, Blackbird One Ltd., is responsible for your personal data.

The data controller for this website and our booking services is:

Blackbird One Ltd.
(SkipperCity yacht charter brand)
5 Secretary’s Lane
Gibraltar GX11 1AA
Company Number: 114712
VAT No: GI665887
Email: info@skippercity.com

References in this policy to “SkipperCity”, “we”, “us” or “our” mean Blackbird One Ltd. as operator of the SkipperCity websites and booking services.

2. To whom this policy applies

In short: if you visit our site or contact us, this applies to you.

This policy applies to:

• Visitors to our websites (including our SkipperCity 2026 pages),
• People who send us inquiries or request offers,
• Clients who book yacht charters or related services through us, and
• Subscribers to our newsletters or other marketing communications.

3. What personal data we collect

In short: we collect only the data we need to communicate with you, prepare offers and arrange your charter.

Depending on how you interact with us, we may collect the following categories of personal data:

• Identification and contact data – name, surname, email address, phone number, country, preferred language.
• Inquiry and booking details – travel dates, departure base, preferred boat type, number of persons, budget, special requests.
• Crew and document details – names and dates of birth of crew members, passport/ID information, skipper’s license and VHF license details (if applicable).
• Contract and payment data – information related to your booking (boat selected, charter operator, price, invoice and payment status). We typically do not store full payment card details.
• Communication data – messages you send us via contact forms, email, phone, chat or social media.
• Technical and usage data – IP address, browser type, device information, pages visited, time and duration of visit, referral sources.
• Marketing preferences – your preferences regarding receiving newsletters and promotional offers.

4. How we collect your data

In short: mostly when you give it to us directly, plus standard website analytics and cookies.

We collect personal data in the following ways:

• Directly from you when you:
  • Send an inquiry or booking request through our website forms,
  • Communicate with us by email, phone, messaging apps or social media,
  • Sign a charter contract or Pro-forma Invoice via us,
  • Subscribe to our newsletter or request other marketing materials.
• From charter-operators and partners when:
  • They confirm or modify your booking,
  • They need crew list or document details to fulfil your charter.
• Automatically through:
  • Cookies and similar technologies on our websites,
  • Analytics tools (for example, site traffic statistics).

5. Why we use your data (purposes and legal bases)

In short: to answer your inquiries, arrange your charter, improve our services and comply with the law.

We process your personal data for the following purposes and legal bases:

• To respond to inquiries and prepare offers
  – to answer your questions, provide information on boats and destinations, and prepare tailor-made offers.
  Legal basis: performance of pre-contractual measures (GDPR Art. 6(1)(b)); legitimate interest.
• To arrange and manage bookings
  – to process your booking, issue invoices, share necessary details with charter-operators and crew, and manage changes and communication related to your charter.
  Legal basis: performance of a contract (GDPR Art. 6(1)(b)); legal obligation (Art. 6(1)(c)).
• To comply with legal obligations
  – to keep accounting records, fulfil tax and maritime regulations, respond to lawful requests from authorities, etc.
  Legal basis: legal obligation (GDPR Art. 6(1)(c)).
• To improve our website and services
  – to analyse how visitors use our site and offers, improve user experience and content, and maintain IT security.
  Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
• To send marketing communications
  – to send you newsletters, special offers and updates about our services, where permitted.
  Legal basis: your consent (GDPR Art. 6(1)(a)), or legitimate interest for existing customers where allowed by law.
• To handle claims and disputes
  – to manage complaints, support you in disputes with charter-operators, and defend our legal rights.
  Legal basis: legitimate interest (GDPR Art. 6(1)(f)).

6. Who we share your data with

In short: only with parties who need your data to organise your charter or support our service.

We do not sell your personal data. We may share it only with:

• Charter-operators and local partners – yacht charter companies, boat owners, marinas and local agents who need your data to confirm and provide your charter and related services.
• Skippers and crew – if you book a professional skipper, hostess or other crew via us or via the charter-operator.
• Payment and banking providers – to process your payments and manage refunds where applicable.
• IT and hosting providers – who provide hosting, email, CRM, backup and maintenance services for our websites and booking tools.
• Analytics and marketing service providers – for website statistics, email campaigns and similar services, always under appropriate data protection safeguards.
• Professional advisers – such as lawyers or accountants, where necessary to protect our rights and comply with obligations.
• Public authorities – when required by law or necessary to protect vital interests (e.g. coast guard, border police, tax authorities).

7. International data transfers

In short: some partners may be outside the EU/EEA; we use safeguards where required.

Because yacht charters often involve companies and partners in different countries, your personal data may be transferred to jurisdictions
outside the EU/EEA. When we transfer data to a country without an adequacy decision, we will use appropriate safeguards, such as
standard contractual clauses or equivalent measures, or ensure that the transfer is otherwise permissible under GDPR (for example, because
it is necessary for the performance of your charter contract).

8. How long we keep your data

In short: only as long as needed for bookings, legal duties and our legitimate interests.

We retain personal data only for as long as necessary for the purposes described in this policy, in particular:

• Inquiry data – usually up to 2 years after our last meaningful communication, if no booking is made.
• Booking and contract data – for the duration of the charter and then for the period required by applicable financial, tax and maritime laws.
• Crew list and document data – for as long as required by local regulations and Charter-Operator obligations.
• Newsletter and marketing data – until you unsubscribe or withdraw consent, subject to a short technical retention period.
• Technical logs and analytics data – for limited periods needed for security and analytics (typically from several months up to a few years, depending on the system).

When data is no longer needed, we will delete it or anonymise it, unless we are legally obliged to keep it longer.

9. Cookies and similar technologies

In short: we use cookies to make the site work and to understand how it is used.

Our websites use cookies and similar technologies to:

• Enable basic website functions and remember your choices,
• Improve the performance and security of the site,
• Analyse traffic and usage patterns,
• Support marketing and remarketing where applicable.

For more details about the types of cookies we use, how long they are stored and how you can manage your cookie preferences,
please see our separate Cookie Policy.

10. Marketing communications

In short: you choose if you want our newsletters and offers.

If you subscribe to our newsletter or explicitly agree to receive offers, we will use your contact data to send you:

• News about destinations, boats and sailing tips,
• Special offers and discounts,
• Updates about SkipperCity and related services.

You can opt out of marketing emails at any time by:

• Clicking the “unsubscribe” link in any of our marketing emails, or
• Contacting us at info@skippercity.com.

Even if you opt out of marketing, we may still send you non-promotional messages related to your bookings or important legal and service information.

11. Your data protection rights

In short: you can ask us to show, correct, delete or limit your data, and you can object in some cases.

Subject to applicable law, you have the following rights regarding your personal data:

• Right of access – to know whether we process your personal data and to obtain a copy.
• Right to rectification – to have inaccurate or incomplete data corrected.
• Right to erasure – to request deletion of your data in certain circumstances (“right to be forgotten”).
• Right to restriction of processing – to limit how we use your data in some situations.
• Right to data portability – to receive your data in a structured, commonly used and machine-readable format and transmit it to another controller.
• Right to object – to object to processing based on legitimate interests, including profiling, and to object at any time to processing for direct marketing.
• Right to withdraw consent – where processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us using the details in section 1. We may need to verify your identity before fulfilling your request.

12. Security of your data

In short: we use appropriate technical and organisational measures to protect your data.

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration,
unauthorised disclosure of, or access to personal data. These measures include:

• Using reputable hosting and IT providers,
• Limiting access to personal data to staff and partners who need it,
• Using secure communication channels where appropriate,
• Regularly updating our systems and monitoring for vulnerabilities.

However, no system can be completely secure. We cannot guarantee absolute security of data transmitted over the internet, but we strive to protect it to the best of our ability.

13. Third-party websites

In short: our site may link to other sites; their privacy rules may differ.

Our websites may contain links to third-party websites, plug-ins or services (for example, partners, marinas, tourism boards or social networks).
These websites are not under our control and are governed by their own privacy policies. We are not responsible for the privacy practices of such third parties,
and we encourage you to read their policies when you visit them.

14. Children’s data

In short: we do not target children, but we may need limited data for crew lists.

Our services are not directed at children under 16. We do not knowingly collect personal data directly from children.
However, for crew lists and legal requirements, we may receive information about minors travelling as part of your charter crew
(for example, names and dates of birth) via the main contracting adult. This data is used only for fulfilling legal and charter obligations.

15. Changes to this Privacy Policy

In short: if we change this policy, we will post the new version here.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or services.
The updated version will be published on this page with a new “Last updated” date.
For significant changes, we may also inform you by email or via our website, where appropriate.

16. How to contact us and lodge a complaint

In short: talk to us first; you can also contact a data protection authority.

If you have any questions or concerns about this Privacy Policy or our handling of your personal data,
please contact us at:

Email: info@skippercity.com
Postal address: Blackbird One Ltd., 5 Secretary’s Lane, Gibraltar GX11 1AA

You also have the right to lodge a complaint with your local data protection authority, in particular in the EU/EEA member state
where you live, where you work or where you consider that your rights have been infringed.

This Privacy Policy is intended as a clear and user-friendly description of our privacy practices and does not constitute legal advice. We recommend that you have it reviewed by a qualified legal professional before final publication.