Privacy Policy

Last updated: 03/10/2026

1. Introduction

BoatBay ("we", "us", "our") is committed to protecting your privacy and complying with data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our boat marketplace platform.

2. Data Controller

BoatBay is the data controller responsible for your personal data. For any questions regarding this Privacy Policy or our data practices, please contact us at info@boat-bay.co.uk.

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, email address, telephone number, and password when you register
• Listing Information: Boat details, descriptions, photographs, pricing, and location when creating listings
• Transaction Information: Payment details for reservation fees (processed securely by Stripe)
• Communications: Messages sent through our platform, feedback, and support enquiries
• Profile Information: Any additional information you choose to add to your profile

3.2 Information We Collect Automatically

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages viewed, features used, search queries, time spent on pages, referral sources
• Location Data: Approximate location based on IP address
• Cookies and Similar Technologies: As described in Section 7

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract Performance: To provide our services, manage your account, and facilitate listings and reservations
• Legitimate Interests: To improve our platform, prevent fraud, ensure security, and send relevant communications
• Legal Obligations: To comply with applicable laws and regulations
• Consent: For marketing communications and non-essential cookies (where required)

5. How We Use Your Information

We use your personal data to:

• Create and manage your account
• Process and display your boat listings
• Facilitate communication between buyers and sellers
• Process reservation payments and refunds
• Send transactional emails (listing confirmations, messages, reservation updates)
• Provide customer support and respond to enquiries
• Improve our platform and develop new features
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service
• Send marketing communications (with your consent, which you can withdraw at any time)
• Analyse usage patterns and conduct research

6. Information Sharing and Disclosure

6.1 Public Information

Information in your listings (boat details, photographs, location, contact information) is publicly visible to all platform users and may be indexed by search engines.

6.2 Service Providers

We share data with trusted third-party service providers who assist us in operating our platform:

• Stripe: Payment processing for reservations
• Email Service Providers: To send transactional and marketing emails
• Cloud Hosting Providers: For data storage and platform infrastructure
• Analytics Providers: To understand platform usage and improve our services

These providers are contractually obligated to protect your data and use it only for specified purposes.

6.3 Legal Requirements

We may disclose your information if required by law, court order, or regulatory authority, or to:

• Protect our rights, property, or safety
• Enforce our Terms of Service
• Investigate fraud or security issues
• Respond to legal requests

6.4 Business Transfers

If BoatBay is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyse usage, and deliver relevant content.

7.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function (authentication, security, preferences)
• Analytics Cookies: Help us understand how users interact with our platform
• Functionality Cookies: Remember your preferences and settings
• Advertising Cookies: May be used to deliver relevant advertisements (with your consent)

7.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect platform functionality. You can manage non-essential cookies through our cookie consent banner.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Secure password hashing
• Regular security assessments and updates
• Access controls and authentication
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Data Retention

We retain your personal data for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal, tax, and accounting obligations (typically 7 years for financial records)
• Resolve disputes and enforce our agreements
• Prevent fraud and abuse

When data is no longer needed, we will securely delete or anonymise it. Active listings are retained until you delete them. Inactive accounts may be deleted after prolonged inactivity with prior notice.

10. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restriction: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent for processing based on consent at any time
• Right to Lodge a Complaint: Contact the Information Commissioner's Office (ICO) if you believe your rights have been violated

To exercise these rights, please contact us at info@boat-bay.co.uk. We will respond within one month.

11. Children's Privacy

BoatBay is not intended for children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly. If you believe we have information about a child, please contact us immediately.

12. International Data Transfers

Your data is primarily stored and processed in the United Kingdom. If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

13. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

14. Marketing Communications

With your consent, we may send marketing emails about new features, special offers, and platform updates. You can unsubscribe at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your preferences in your account settings
• Contacting us at info@boat-bay.co.uk

Note: You will continue to receive essential transactional emails related to your account and listings.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by:

• Posting the updated policy on our platform
• Updating the "Last updated" date
• Sending an email notification for significant changes

Your continued use of BoatBay after changes take effect constitutes acceptance of the revised policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: info@boat-bay.co.uk

17. Supervisory Authority

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: www.ico.org.uk
Phone: 0303 123 1113