Last Updated: 14 March 2026
1. Introduction
Joy Yachting ("we", "our", "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our website (joyyachting.com) and our yacht charter services. We comply with the General Data Protection Regulation (GDPR) and applicable Turkish data protection laws (KVKK).
2. Data We Collect
We may collect and process the following categories of personal data:
- Identity Data: Full name, date of birth, nationality, passport or ID details (required for yacht charter regulations).
- Contact Data: Email address, phone number, postal address.
- Booking Data: Charter dates, yacht preferences, number of guests, special requests.
- Payment Data: Credit/debit card details and billing information, processed securely through Stripe and/or Klarna.
- Technical Data: IP address, browser type, device information, pages visited, and cookies.
- Communication Data: Records of correspondence via email, WhatsApp, Telegram, or our contact forms.
3. How We Use Your Data
We use your personal data for the following purposes:
- To process and manage your yacht charter booking.
- To comply with maritime regulations requiring passenger identification.
- To process payments securely via Stripe and Klarna.
- To communicate with you regarding your booking, inquiries, and customer support.
- To send promotional offers and newsletters (only with your explicit consent).
- To improve our website and services through analytics.
- To comply with legal obligations.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to fulfil your charter booking.
- Legal Obligation: Compliance with maritime and tax regulations.
- Legitimate Interest: Improving our services and website security.
- Consent: Marketing communications and non-essential cookies.
5. Cookies
Our website uses the following types of cookies:
- Strictly Necessary Cookies: Essential for website functionality (session management, security).
- Functional Cookies: Remember your preferences such as language and currency.
- Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). These are only set with your consent.
You can manage your cookie preferences through the cookie consent banner displayed on your first visit, or by adjusting your browser settings at any time.
6. Payment Processing
We use Stripe and Klarna as our payment processors. When you make a payment, your payment details are transmitted directly to these processors via encrypted connections. We do not store your full credit card number on our servers. Please review the privacy policies of Stripe and Klarna for information on how they handle your data.
7. Data Sharing
We may share your personal data with:
- Yacht owners and crew (name, guest count, and special requests for charter preparation).
- Port authorities and coast guard (passport/ID details as required by maritime law).
- Payment processors (Stripe, Klarna) for transaction processing.
- IT and hosting providers who assist in operating our website.
We do not sell your personal data to third parties.
8. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Booking records are retained for a minimum of 5 years for tax and regulatory compliance. Marketing consent records are kept until you withdraw consent.
9. Your Rights
Under the GDPR, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data (subject to legal retention requirements).
- Right to Restrict Processing: Request limitation of how we use your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time for consent-based processing.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data transmitted between your browser and our website is encrypted using SSL/TLS. Access to personal data is restricted to authorised personnel only.
11. International Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including Turkey. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
- Email: bookings@joyyachting.com
- Phone: +90 532 177 93 48
- Address: Bodrum, Mugla, Turkey
You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.