Privacy Policy
Last updated: 21 October 2026
This policy explains what personal data Navélia Charters collects when you contact us about a yacht charter, why we collect it, who we share it with, and what rights you have over it. Navélia Charters is the data controller. You can reach us any time at team@naveliacharters.com or at Quai Jean Jaurès 6, 83990 Saint-Tropez, France.
1. What we collect
When you submit an enquiry form on this website, or contact us on WhatsApp, we collect only what we need to answer you: your name, email address, phone number, the dates you are interested in, the size of your party, your indicative budget, and any yacht or destination preferences or messages you send us. WhatsApp conversations also include the message history and the phone number you write from.
We do not ask for, and you should not send us, payment card details, passport scans or any sensitive personal data through the website or WhatsApp.
2. Why we collect it and our lawful basis
We use your details to respond to your charter enquiry, check availability, prepare quotes and itineraries, and follow up about the charter you asked about. Our lawful basis for this is our legitimate interest in responding to a commercial enquiry you initiated, and, once a charter is agreed, the performance of our contract with you.
We only send marketing emails or newsletters if you have given consent, and every such message contains an unsubscribe link. Non-essential cookies and advertising tags are used on the basis of your consent.
3. Who we share it with
We do not sell or trade your data. We share it only with the parties needed to handle your enquiry:
- Our CRM and email provider, which stores enquiries and lets our team reply to you.
- Yacht owners, captains, managers and partner brokers, but only the details required to quote or confirm a specific charter (typically dates, party size and first name), and only when you have asked us about that yacht.
- Our website, hosting and analytics providers, acting on our instructions as processors.
Some of these providers are located outside the European Economic Area. Where that is the case, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.
4. How long we keep it
Enquiries that do not lead to a booking are kept for up to 24 months, so we can recognise you if you come back to us for a future season, and then deleted. Records relating to a completed charter are kept for as long as required by French accounting and tax law, normally 10 years. Marketing consents are kept until you withdraw them. You can ask us to delete your data sooner at any time.
5. Cookies, analytics and advertising
Essential cookies make the site work and are always active. In addition we use, loaded through Google Tag Manager:
- Google Analytics 4, to understand which pages are visited and how people move through the site, in aggregate.
- Google Ads, to measure which adverts lead to enquiries and to show relevant adverts to people who have visited the site.
- Meta Pixel, to measure and target advertising on Facebook and Instagram.
- Microsoft Clarity, page usage and session insights to improve the site.
These services may receive cookie identifiers, campaign data, page and device usage. Google receives a successful enquiry event with the form name, website, currency and indicative EUR budget (or a default reporting value of €500 when no budget is known). This is not a payment or booking value. This event does not include your name, email or phone number. Google and Meta may act as independent controllers for their advertising purposes; Microsoft receives site-usage data for Clarity.
We use Google Consent Mode v2 in Advanced Mode. In the EEA, UK and Switzerland, advertising and analytics storage, advertising user data and personalization default to denied until you accept. Google tags still load and may send cookieless signals for measurement and modeling when consent is denied. Elsewhere those Google signals default to granted unless you decline. Ad clicks and impressions can still be counted without accepting cookies. Other tags must honor applicable consent requirements; Google's consent signals do not automatically control every third-party tag.
Accept and Decline apply to advertising measurement/optimization and site analytics. Your choice, timestamp, visitor reference, region hint and notice version are stored on this browser, retaining earlier acceptance evidence if you later withdraw. Notice version 2026-10-21-v1 offers Accept and Decline for Google, Microsoft Clarity and Meta advertising where configured, with the text: “We use cookies to measure our ads and improve the site.” Reopen Cookie settings in the footer at any time to withdraw or change your choice; changes apply across open tabs. Browser cookie controls and Google's opt-out tools remain available. Declining does not prevent an enquiry.
6. Your GDPR rights
If you are in the EU or UK you have the right to access the data we hold about you, to have it corrected, to have it erased, to restrict or object to how we use it (including objecting to marketing), to receive a copy in a portable format, and to withdraw consent at any time.
To exercise any of these rights, including deletion, email team@naveliacharters.com with the request and the email address or phone number you contacted us from. We respond within 30 days. If you are not satisfied with our response you can complain to your national data protection authority; in France this is the CNIL (cnil.fr).
7. Security
Enquiry data is transmitted over encrypted connections and stored in access-controlled systems limited to the team members who need it. No transmission over the internet can be guaranteed to be completely secure, but we take reasonable technical and organisational measures to protect your data.
8. Changes to this policy
We may update this policy as our services or providers change. The date at the top of this page always shows the current version.