Key privacy points (quick summary)
- Controller: Blackbird One Ltd., registered in Gibraltar and trading as SkipperCity, is responsible for your data.
- We collect what you give us when you enquire, place a hold, book or subscribe, plus anonymous measurement of how the site is used.
- Your data is used to answer your enquiry, arrange your charter, take your payment and meet our legal obligations.
- Booking details go to the charter company that runs your boat, through the charter booking system it uses, and to the providers named in section 6. We never sell personal data.
- Our website, database and email run on our own server in Slovenia, in the EU.
- Analytics cookies and session recordings run only if you accept them; the newsletter only after you confirm your subscription.
- You can access, correct, delete or restrict your data and object to certain processing.
This Privacy Policy explains what we collect, why we collect it, who receives it, how we protect it, and which rights you have.
Privacy Policy
Last updated: 06.10.2026
This Privacy Policy explains how SkipperCity, a trading name of Blackbird One Ltd. (“we”, “us”, “our”), collects, uses and protects your personal data when you visit our website, contact us, or book a yacht charter through us.
We handle your personal data in accordance with applicable data protection laws, including the Gibraltar GDPR and the EU General Data Protection Regulation (“GDPR”) where it applies.
1. Who we are (data controller)
In short: Blackbird One Ltd. is responsible for your personal data.
The data controller for this website and our booking services is:
Blackbird One Ltd. (trading as SkipperCity) 5 Secretary’s Lane Gibraltar GX11 1AA Company Number: 114712 Tax Identification Number (TIN): 665887 Email: info@skippercity.com
The full company details are on our Company and Banking Details page.
2. To whom this policy applies
In short: if you visit our site or contact us, this applies to you.
This policy applies to:
- Visitors to our website,
- People who send us an enquiry, ask for a price alert or join a waiting list for a boat,
- Clients who place a hold on a boat or book a charter or related services through us,
- Subscribers to our newsletter, and
- Partners who apply to or take part in our affiliate programme.
3. What personal data we collect
In short: only what we need to answer you, arrange your charter and run the site.
Depending on how you use our services, we may collect:
- Identification and contact data – name, email address, phone number, country.
- Enquiry and booking details – travel dates, sailing area or base, boat, number of guests, whether you want a skipper or cook, budget, and anything you write in your message.
- Crew and document details – names and dates of birth of crew members, passport or ID details, and skipper’s licence and VHF certificate details, when the charter company asks for them.
- Contract and payment data – the boat, charter company, price, payment method and payment status of your booking, and — if you ask to cancel — when you asked, the reason you give and any refund we send. Card payments are made on Stripe’s payment page; we never see or store your full card number.
- Communication data – the messages you send us by email, phone, WhatsApp or through our forms.
- Technical and usage data – IP address, browser and device type, pages visited, the site you came from, and the time of your visit. When you agree to your charter contract on your booking page, we keep the time, your IP address and your browser type with the booking as the record of that agreement.
- Marketing preferences – whether you subscribed to our newsletter, and when you confirmed or cancelled it.
- Partner data – for affiliate partners: contact details, the bookings and visits credited to your referral code, the payout details you give us, and — when you accept the partner agreement — its version, the time, your IP address and your browser type, as the record of that agreement.
4. How we collect your data
In short: mostly from you, plus the charter companies, our partners’ links and anonymous measurement.
We collect personal data:
- Directly from you – when you use one of our forms (quote request, price alert, waiting list, checkout, newsletter, partner application), when you email or call us, and when you send us documents for your charter.
- From charter companies – when they confirm or change your booking, or need a crew list or documents for your charter.
- From our partners’ links – if you arrive through an affiliate partner’s referral link, we record which partner sent you (see our Cookie Policy).
- Automatically – through anonymous measurement of how the site is used and, if you accept them, analytics cookies (section 9).
5. Why we use your data (purposes and legal bases)
In short: to answer your enquiry, arrange your charter, improve our service and comply with the law.
We process your personal data for the following purposes and on the following legal bases:
- To answer enquiries and suggest boats – when you send an enquiry, we email you a confirmation straight away and, a few minutes later, a list of boats that fit what you asked for, each checked with the charter company’s booking system; we then send four sample route maps, and answer your replies personally. Legal basis: steps taken at your request before a contract (GDPR Art. 6(1)(b)).
- To arrange and manage bookings – to place a free hold (an “option”) on the boat you chose, pass your details to the charter company, take your payment, keep your booking page up to date and send you the emails that belong to your booking. Legal basis: performance of a contract (GDPR Art. 6(1)(b)); legal obligation (Art. 6(1)(c)).
- To sign you in to your booking page – by emailing you a sign-in link instead of using a password. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
- To send price alerts and waiting-list news you asked for – a price alert tells you when prices for the week you chose are first published; a waiting list either emails you when a boat that was under option becomes free or, from the checkout, puts you in line for it with the charter company in your name and holds it for you if it is released. Legal basis: your consent (GDPR Art. 6(1)(a)) for price alerts, which you confirm by email; steps taken at your request (Art. 6(1)(b)) for a waiting list.
- To comply with legal obligations – to keep accounting records, meet tax and maritime rules, and answer lawful requests from authorities. Legal basis: legal obligation (GDPR Art. 6(1)(c)).
- To improve our website and keep it secure – to measure how the site is used, find errors, and protect our forms from abuse (for example with a CAPTCHA check and limits on how often a form can be sent). Legal basis: legitimate interest (GDPR Art. 6(1)(f)); for analytics cookies and session recordings, your consent (Art. 6(1)(a)).
- To send our newsletter – only after you subscribe and confirm your subscription through the link we email you. Legal basis: your consent (GDPR Art. 6(1)(a)).
- To ask for a review after your charter – we may email you to ask how your charter went and invite you to review it. Legal basis: legitimate interest (GDPR Art. 6(1)(f)); you can opt out with one click.
- To run our affiliate programme – to credit a booking to the partner whose link brought you to us and pay the partner’s commission, and to manage partners’ accounts. Legal basis: legitimate interest (GDPR Art. 6(1)(f)); for partners, performance of the partner agreement (Art. 6(1)(b)).
- To handle claims and disputes – to manage complaints, support you in a dispute with a charter company, and defend our legal rights. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
6. Who we share your data with
In short: the charter company that runs your boat, and the named services that help us run the site and take payments.
We do not sell your personal data. We share it only with:
- Charter companies – the company that owns or manages the boat you hold, book or wait for receives your name, email address, phone number and country, and later the crew list and documents it needs to provide your charter.
- The charter booking system – the professional booking system the charter companies use, through which we check availability and place holds and bookings with them; the details above pass through it.
- Our skippers and cooks – if you book a skipper or cook through us, they receive the names, contact details and party details they need for your charter.
- Stripe – processes card payments on its own payment page.
- WhatsApp (Meta) – only if you message us there; it carries your messages and the phone number you use.
- Our banks – Finom (Netherlands) and The Currency Cloud (United Kingdom) receive the name, account and reference of a bank transfer you send us.
- PostHog – our analytics provider, hosted in the EU. It receives anonymous usage measurement, error reports and, only if you accept analytics cookies, cookie-based measurement and session recordings in which the text you type is masked.
- Cloudflare – its Turnstile check runs on some of our forms to tell people from automated abuse, and receives technical information about your browser and your IP address.
- Google Fonts – the fonts on our pages are loaded from Google’s servers, which receive your IP address and browser details.
- Tripadvisor and OpenStreetMap – only if you click to load our Tripadvisor reviews or to show a map; your browser then connects to them.
- Professional advisers – such as lawyers or accountants, where necessary to protect our rights and meet our obligations.
- Public authorities – when required by law or necessary to protect vital interests (for example coast guard, border police, tax authorities).
Our website, database and email are hosted on our own server in Slovenia.
7. International data transfers
In short: most of your data stays in the EU; where it leaves, we use the safeguards the law requires.
Our server is in Slovenia and PostHog hosts our analytics in the EU. Some of the providers named in section 6 are based outside the EU/EEA, in particular in the United Kingdom and the United States (for example Stripe, Cloudflare, Google, Meta for WhatsApp and Tripadvisor). When personal data is transferred to a country without an adequacy decision, we rely on appropriate safeguards — such as the EU–US Data Privacy Framework where the provider is certified under it, or standard contractual clauses — or on the transfer being otherwise permitted, for example because it is necessary for the performance of your charter contract.
8. How long we keep your data
In short: only as long as needed for bookings, legal duties and our legitimate interests.
We retain personal data only for as long as necessary for the purposes described in this policy, in particular:
- Enquiry data – usually up to 2 years after our last meaningful communication, if no booking is made.
- Booking and contract data – for the duration of the charter and then for the period required by applicable financial, tax and maritime laws.
- Crew list and document data – for as long as required by local regulations and the charter company’s obligations.
- Newsletter and marketing data – until you unsubscribe or withdraw consent, subject to a short technical retention period.
- Partner data – your partner account, payout details, commissions, payouts and the record of the partner agreement you accepted: for as long as you take part in our affiliate programme, and then for six years after the end of the financial year of our last payment to you (our accounting and tax records). Visits recorded for a partner’s referral link: 18 months.
- Technical logs and analytics data – for limited periods needed for security and analytics (typically from several months up to a few years, depending on the system).
When data is no longer needed, we delete or anonymise it, unless we are legally obliged to keep it longer.
9. Cookies and similar technologies
In short: no analytics cookies without your consent; a few cookies the site needs to work.
Until you accept analytics in our cookie banner, our measurement is anonymous and uses no cookies: we cannot recognise you across visits. If you accept, PostHog sets cookies that recognise your browser on later visits and may record your session, with the text you type masked. You can change your choice at any time through the “Cookie settings” link at the bottom of every page.
Some cookies and browser storage are needed for the site to work — to remember your cookie choice, to keep you signed in to your booking page, and to remember which partner’s referral link brought you to us. We use no advertising or remarketing cookies.
The full list, with what each item does and how long it lasts, is in our Cookie Policy.
10. Marketing communications
In short: you choose whether you receive our newsletter.
Our newsletter is sent only to people who subscribe and then confirm the subscription through the link we email them. It brings you:
- News about destinations, boats and sailing tips,
- Special offers from our search,
- Updates about SkipperCity and related services.
You can stop marketing emails at any time by:
- Clicking the “unsubscribe” link in any of our marketing emails, or
- Contacting us at info@skippercity.com.
Unsubscribing stops our newsletter and our review requests together. Even if you opt out of marketing, we may still send you non-promotional messages about your bookings or important legal and service information.
11. Your data protection rights
In short: you can ask us to show, correct, delete or limit your data, and you can object in some cases.
Subject to applicable law, you have the following rights regarding your personal data:
- Right of access – to know whether we process your personal data and to obtain a copy.
- Right to rectification – to have inaccurate or incomplete data corrected.
- Right to erasure – to request deletion of your data in certain circumstances (“right to be forgotten”). We keep only what the law requires us to keep, such as accounting records.
- Right to restriction of processing – to limit how we use your data in some situations.
- Right to data portability – to receive your data in a structured, commonly used and machine-readable format and transmit it to another controller.
- Right to object – to object to processing based on legitimate interests, and to object at any time to processing for direct marketing.
- Right to withdraw consent – where processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us using the details in section 1. We may need to verify your identity before fulfilling your request.
12. Security of your data
In short: we use appropriate technical and organisational measures to protect your data.
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data. These measures include:
- Encrypted connections (HTTPS) on every page of our website,
- Card details entered only on Stripe’s payment page, never on our servers,
- Signing in to your booking page through an emailed link rather than a password that could be guessed or reused,
- Limiting access to personal data to the people who need it,
- Regularly updating our systems and monitoring for vulnerabilities.
However, no system can be completely secure. We cannot guarantee absolute security of data transmitted over the internet, but we strive to protect it to the best of our ability.
13. Third-party websites
In short: our site may link to other sites; their privacy rules may differ.
Our website may contain links to third-party websites or services (for example, marinas, tourism boards or social networks). These websites are not under our control and are governed by their own privacy policies. We are not responsible for the privacy practices of such third parties, and we encourage you to read their policies when you visit them.
14. Children’s data
In short: we do not target children, but we may need limited data for crew lists.
Our services are not directed at children under 16. We do not knowingly collect personal data directly from children. However, for crew lists and legal requirements, we may receive information about minors travelling as part of your charter crew (for example, names and dates of birth) via the main contracting adult. This data is used only for fulfilling legal and charter obligations.
15. Changes to this Privacy Policy
In short: if we change this policy, we will post the new version here.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or services. The updated version will be published on this page with a new “Last updated” date. For significant changes, we may also inform you by email or via our website, where appropriate.
16. How to contact us and lodge a complaint
In short: talk to us first; you can also contact a data protection authority.
If you have any questions or concerns about this Privacy Policy or our handling of your personal data, please contact us at:
Email: info@skippercity.com Postal address: Blackbird One Ltd., 5 Secretary’s Lane, Gibraltar GX11 1AA
You also have the right to lodge a complaint with a data protection authority: the Gibraltar Regulatory Authority, which supervises data protection in Gibraltar where we are registered, or the authority in the EU/EEA member state where you live, where you work or where you consider that your rights have been infringed.