Privacy Policy

George Yachts Brokerage House LLC ("George Yachts", "we", "us") is the data controller for personal data collected through georgeyachts.com (the "Site"). We are a limited liability company registered in Wyoming, USA, operating from our office at Charilaou Trikoupi 190A, Kifisia 145 64, Athens, Greece.

George Yachts is a luxury crewed yacht charter broker and intermediary. We arrange charters between clients and third-party yacht owners and central agents; we do not own or operate the yachts, and we do not take payments or process bookings on this Site. The Site generates inquiries only. Any charter is contracted separately, offline, under a MYBA-standard Charter Agreement.

Because we operate from an establishment in Greece, our processing is governed by the EU General Data Protection Regulation (GDPR), Greek Law 4624/2019, and Greek Law 3471/2006 (ePrivacy). Visitors in the United Kingdom are additionally protected by the UK GDPR.

We deliberately collect minimal data:

• Inquiry form: your name, email, phone number, number of guests, indicative budget, and the content of your message.
• Newsletter signup: your email address (and which journal you subscribed to).
• Consultation booking (Calendly): name, email, and scheduling details.
• Automatically: IP address, device/browser information, and usage data - for non-essential analytics, only with your consent (see our Cookie Policy).

We do not intentionally collect special categories of data (GDPR Art. 9). Please do not include health, political, or other sensitive information in free-text fields. Where a charter proceeds, any identity or compliance documentation is handled offline by the relevant central agent or owner under the charter agreement, not collected through this Site.

• To respond to your inquiry and take steps at your request before a charter is arranged - GDPR Art. 6(1)(b) (pre-contractual steps).
• To send our newsletter - Art. 6(1)(a) (consent); withdraw anytime via the unsubscribe link.
• Analytics (Google Analytics 4, Microsoft Clarity) - Art. 6(1)(a) (consent), loaded only after you opt in.
• Site security (Google reCAPTCHA, Cloudflare) and prompt internal lead notification to our broker (Telegram) - Art. 6(1)(f) (legitimate interests), limited to what is necessary and never used to profile you for advertising.
• Legal, tax, and anti-money-laundering compliance - Art. 6(1)(c); and to establish or defend legal claims - Art. 6(1)(f).

We do not carry out automated decision-making or profiling that produces legal effects.

We share data only with vetted providers acting on our instructions under GDPR Art. 28 terms. Some are in, or transfer data to, the United States; those transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses otherwise.

• Vercel - website hosting
• Sanity - content management
• Resend - transactional and newsletter email delivery
• Google Analytics 4 - website analytics (consent-gated)
• Microsoft Clarity - heatmaps and session analytics (consent-gated)
• Google reCAPTCHA - spam and bot protection
• Calendly - consultation scheduling
• Cloudflare - network and security
• Telegram / WhatsApp - internal notification and client communication you initiate

• Inquiries where no charter proceeds: up to 24 months from last contact.
• Where a charter is arranged: for the duration of the relationship plus the period required to meet tax and legal obligations.
• Newsletter email: until you unsubscribe; inactive subscribers are pruned after 24 months.
• Analytics (GA4): 14 months. Microsoft Clarity recordings: 30 days.
• Server and security logs: up to 12 months.

Under the GDPR (Arts. 15-22) you have the right to access, rectification, erasure ("right to be forgotten"), restriction, data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To request erasure you may use our dedicated page at georgeyachts.com/privacy/delete or email Contact us. We respond within one month.

California residents: while we believe we fall below the CCPA's thresholds, we honor your rights to know, delete, and correct your information, and to opt out of any sale or sharing. As stated above, we do not sell or share your personal information, and we do not discriminate against you for exercising these rights.

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies (analytics, session analysis) are set only after you give consent via our cookie banner, which you can change at any time.

The Site and our services are not directed to children, and we do not knowingly collect data from anyone under 16. If you believe a child has provided data, contact us and we will delete it.

We apply appropriate technical and organizational measures to the risk, including TLS/HTTPS encryption in transit, access controls, data minimization, and data-processing terms with our providers. No method of transmission is perfectly secure, but we work to protect your data and review our measures regularly.

For any privacy question or to exercise a right, contact us at Contact us or +30 697 038 0999.

You have the right (GDPR Art. 77) to lodge a complaint with a supervisory authority, in particular the Hellenic Data Protection Authority (1-3 Kifissias Avenue, 115 23 Athens; +30 210 6475600; contact@dpa.gr; www.dpa.gr/en). UK residents may alternatively complain to the UK Information Commissioner's Office (ico.org.uk).

We may update this Policy. The "Last updated" date below will change and material changes will be highlighted on the Site.