Privacy Policy
Last updated: 24 October 2026
1. Who we are
This website, phillipyachtsuncharter.com (the “Website”), is run by YACHTSUN LIMITED, a company registered in Tanzania, with its registered office at Mjini Magharibi-Unguja, West ‘B’, Nyamazi, 71215, Unit F 9/2, Fumba Town, Zanzibar, Tanzania, TIN: 167-510-094 (“Yachtsun”, “we”, “us”).
YACHTSUN LIMITED is the data controller of your personal data, which means we decide why and how it is used.
Contact for any privacy question or request: office@yachtsuncharter.com
2. Which laws apply
- We are based in Tanzania, but we offer our charters and day trips to guests from the European Union and the European Economic Area. Because of this, the EU General Data Protection Regulation (GDPR) applies to how we handle the personal data of people in the EU/EEA (Article 3(2) GDPR).
- We also comply with the Tanzania Personal Data Protection Act, 2022 and its regulations, to the extent they apply to us.
Where the two laws differ, we follow the rule that gives you more protection.
3. What data we collect and why
| When | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| You e-mail us or message us on WhatsApp or by phone | name, e-mail, phone number, the content of your message (dates, group size, preferences, dietary needs you choose to share) | to answer your enquiry and prepare an offer | steps taken at your request before a contract, Art. 6(1)(b) |
| You book a charter, day trip or cabin | name, contact details, details of guests, passport/ID data where required by local authorities or the marina, payment details | to perform the charter contract and meet legal duties (e.g. crew/guest lists for port authorities) | contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c) |
| You visit the Website | IP address, browser and device type, pages visited, time of visit (server logs) | to run the Website securely and fix errors | legitimate interest, Art. 6(1)(f) |
| You accept analytics cookies | pseudonymous usage data via Google Analytics 4 | to understand how the Website is used and improve it | your consent, Art. 6(1)(a) |
| A dispute arises | data needed to establish or defend claims | legal claims | legitimate interest, Art. 6(1)(f) |
We do not sell your data. We do not use automated decision-making or profiling. The Website has no customer accounts and no online shop.
Giving us your data is voluntary, but without contact details we cannot answer your enquiry or book a charter.
4. Cookies and similar technologies
When you first visit, a banner asks for your choice. Analytics cookies are set only if you click “Accept”. Until then, Google Analytics runs in Consent Mode with analytics storage denied, so no analytics cookies are stored.
| Cookie | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| cookie_notice_accepted | this Website (Cookie Notice) | remembers your cookie choice | necessary | ~6 months |
| _ga, _ga_RSQX541WYF | Google (Google Analytics 4) | distinguishes visitors and sessions for statistics | analytics – only after consent | up to 2 years |
| LiteSpeed Cache cookies (e.g. _lscache_vary) | this Website | page caching / speed; normally set only for logged-in administrators | necessary | session |
You can change your choice at any time with the “Cookie settings” link in the footer, or by deleting cookies in your browser.
5. Third-party content on the Website
Some pages load content from other providers. When this happens, your browser connects to their servers and sends them your IP address:
– Google Fonts (Google) – website fonts.
– YouTube (Google) – videos on the yacht pages and the FAQ.
– Google Maps (Google) – the map of Azam Marina on the About us page.
– Trustindex – shows our Google reviews on the home page (loads from cdn.trustindex.io; reviewer photos load from Google).
– WhatsApp (Meta) – if you tap a WhatsApp button, your conversation is also governed by WhatsApp’s own privacy policy.
– Links to our Facebook and Instagram pages (“Phillip Yachtsun Charter”) and to Tripadvisor take you to those sites, which have their own privacy policies. We do not use a Facebook pixel or other social media tracking on the Website.
6. Who we share data with
- Website and e-mail hosting: SEOHOST Sp. z o.o., ul. Obornicka 330, 60-689 Poznań, Poland. Our Website and our e-mail server run on its servers in Poland (EU). It acts as our processor.
- Google (Google Ireland Ltd / Google LLC) – Google Analytics (only with your consent), Google Fonts, YouTube and Google Maps.
- Trustindex – the review widget.
- Meta (WhatsApp) – when you contact us on WhatsApp.
- Our crew and local partners in Zanzibar/Tanzania (marina, transfer, safari or diving partners) – only what is needed to provide the service you booked.
- Public authorities, when the law requires it (for example port, immigration or tax authorities).
7. Where your data is processed and international transfers
- In Tanzania: we run our business from Zanzibar, so data you send us (enquiries, bookings, guest lists) is used by our team in Tanzania. When you send your data to us directly, you are providing it to a company outside the EU. We protect it as described in this policy, and the GDPR rights in section 9 apply to you.
- In the EU: the Website and our mailbox are hosted in Poland (see section 6).
- In other countries: some providers, in particular Google and Meta, may process data in the USA or other countries. These transfers rely on the EU-US Data Privacy Framework (for certified providers) or on the European Commission’s Standard Contractual Clauses included in the providers’ terms.
- Where neither applies, a transfer may take place only when it is necessary to perform your booking or the steps you asked for before it (Art. 49(1)(b) GDPR; section 32(4)(b) of the Tanzania Personal Data Protection Act), or with your explicit consent.
You can ask us for more information about these safeguards or a copy of them at office@yachtsuncharter.com.
8. How long we keep data
- Enquiries that do not lead to a booking: up to 2 years after the last contact.
- Booking and accounting records: as long as tax and accounting law requires.
- Analytics data: 14 months (Google Analytics retention setting).
- Server and security logs: up to 30 days. Website backups: the 2 most recent copies only.
9. Your rights
You have the right to:
– access your data and get a copy of it;
– correct it;
– have it deleted;
– restrict its processing;
– data portability;
– object to processing based on legitimate interest;
– withdraw your consent at any time (this does not affect processing before withdrawal).
To use any of these rights, write to office@yachtsuncharter.com. We reply within one month. For complex requests this can be extended by two more months, in which case we will tell you why within the first month. We may ask you to confirm your identity first.
10. Complaints
If you think we handle your data unlawfully, please contact us first, and we will try to fix it. You also have the right to lodge a complaint with:
– a data protection supervisory authority in the EU/EEA, in particular in the country where you live or work, or where the problem occurred (a list is available on the website of the European Data Protection Board, edpb.europa.eu); or
– the Personal Data Protection Commission (PDPC) of Tanzania, www.pdpc.go.tz.
11. Security
The Website uses an encrypted HTTPS connection. Access to the admin panel is protected, and repeated failed log-in attempts are blocked. Only people who need your data to handle your enquiry or booking can access it. We will never ask you for passwords by e-mail.
12. Changes
We may update this policy. The current version is always on this page, with the “Last updated” date at the top.