Privacy Policy

The controller is Cannes Yachts For Rent, the brand under which this website and our Cannes-based charter service operate. We do not publish a company registration number or a street address on this site; if you need either for a contract or an invoice, simply ask us and we will provide what is needed for your booking.

For anything to do with your personal data, or with this policy, write to [email protected]. We read and answer this mailbox ourselves.

Most of what we hold about you comes directly from you:

• the enquiry form, which asks for your name, email address, phone number (optional), the yacht of interest (optional), your preferred charter dates, the number of guests, and any message you want to add. The form also quietly sends us the page you were on and the site that referred you, so we understand which page prompted your request;
• anything you tell us by email, by phone, or by WhatsApp when you write to us directly;
• if you tap a WhatsApp link on the site before starting your chat, we note the page you came from, the referring site, the language of the page, and the pre-filled message, so that the conversation that follows on WhatsApp picks up seamlessly. The chat itself then takes place on WhatsApp, under Meta's own privacy terms, not ours;
• standard technical logs generated automatically when you visit the site, such as your browser, device and the pages requested.

We also use a small number of browser storage entries: one remembers that you closed the cookie notice, one temporarily remembers which yacht you clicked on so the enquiry form can be pre-filled for you and is removed as soon as you close the tab or send the form, and one holds random, non-identifying visit and session identifiers that expire after 30 days and that you can clear at any time. None of these entries contain your name, email or phone number, and the site itself does not set cookies.

We use your information for clear, limited purposes:

• to reply to your enquiry and prepare a written quote, which is a step taken at your request before any contract is formed;
• to manage a confirmed charter, which rests on the contract agreed once your booking is confirmed in writing;
• to keep our site and booking system secure, which we do on the basis of our legitimate interest in protecting our business and our clients from misuse;
• to meet the legal obligations that apply to a yacht charter operator in France, including, once a charter is confirmed, passing the names of guests on board to the captain so that a crew list can be prepared and, where required, presented to the relevant port or maritime authority. This is a standard safety and administrative requirement for any vessel putting to sea from Cannes and the surrounding marinas, and we only use the names you give us for this purpose.

Access to your data is kept tight:

• our own team, who read enquiries through an internal messaging tool so we can respond quickly;
• the captain or skipper who will actually run your charter, who receives the guest names and dates needed to prepare the crew list once a booking is confirmed;
• our hosting provider, which stores the site and the booking system on our behalf and has no reason to look at your data beyond keeping the service running;
• Google, which serves the web fonts used on our pages and, in doing so, receives the visitor's IP address, and jsDelivr, which delivers the small library that formats phone numbers in our enquiry form; neither sets cookies for us;
• WhatsApp, operated by Meta, if you choose to begin a conversation with us there; that exchange is then governed by WhatsApp's own privacy policy.

We never sell your personal data, and we never use it to make automated decisions about you.

Our hosting, booking system and team operate within the ordinary course of running a Cannes-based charter business, and we do not deliberately route your data outside the European Economic Area. Google Fonts and WhatsApp, however, are operated by companies based outside the EU, and loading a font or opening a chat with them can involve a transfer of data such as your IP address to their servers. These providers rely on the safeguards built into their own services for such transfers; we do not add any transfer of our own beyond what using their service naturally involves.

If your enquiry does not turn into a booking, we delete it after 12 months. If it does, we keep the booking record for as long as French tax and accounting rules require us to, since these records support the invoices and accounts of a charter business. Server logs are kept only briefly, long enough to investigate any security issue, and the visit-measurement identifier in your browser expires automatically after 30 days of inactivity.

Enquiries and bookings are stored in our own booking system rather than scattered across inboxes, and access to our internal messaging tool is limited to the people who need it to answer you. Our site is a static website, which limits the ways it can be attacked, and our hosting provider keeps standard security logs that let us spot and respond to unusual activity quickly.

Under the GDPR and the Loi Informatique et Libertés, you can ask us to:

• give you access to the personal data we hold about you;
• correct it if it is inaccurate or incomplete;
• delete it, where we are not required to keep it for a booking already confirmed;
• restrict or object to certain uses, in particular where we rely on our legitimate interest;
• receive the data you gave us in a portable format;
• withdraw, at any time, any consent you previously gave us, for example to receive news from us.

To exercise any of these rights, write to [email protected]. We reply within one month, and we may ask you to confirm your identity first, simply to make sure we are speaking to the right person about your own data.

If you believe we have not handled your personal data properly, we would rather you tell us first at [email protected] so we can put things right. You also have the right to lodge a complaint directly with the Commission Nationale de l'Informatique et des Libertés (CNIL), the French supervisory authority, at www.cnil.fr.

Our charters and this website are addressed to adults arranging their own travel, and we do not knowingly collect personal data from children. If you believe a child has sent us information, please contact us so we can remove it.

We may update this policy as our site or our booking process evolves. The version published on this page is the one that applies, and we encourage you to glance at it again before sending us a new enquiry if some time has passed since your last visit.