Last updated: 21 September 2026
1. Introduction
1.1 Waypoint Yachts Ltd. (“Waypoint”, “we”, “us”, “our”), a company incorporated in the Turks and Caicos Islands and trading as PRIVÉ Luxury Yachts (“PRIVÉ”), is the controller responsible for personal data collected through prive-yachts.com (the “Website”) and in the course of our charter operations.
1.2 This Privacy Policy explains what personal data we collect, the purposes for which we use it, the parties with whom we share it, how long we retain it, and the rights available to you.
1.3 By using the Website, submitting an enquiry or chartering a vessel from us, you acknowledge that your personal data will be handled as described in this Policy.
2. Personal data we collect
2.1 Information you provide to us. We collect the following categories of personal data directly from you:
(a) Enquiry data — first and last name, email address, telephone number, number of guests, preferred activity, requested dates and the content of your message, submitted through the enquiry and “Check Availability” forms on the Website or by telephone or email;
(b) Charter and guest data — the names of guests in your party, dietary requirements and allergies, and any mobility, medical or certification information (including diving qualifications) that you or your party volunteer where relevant to the safe conduct of the charter;
(c) Payment data — billing name, billing address and confirmation of payment. Card details are captured and processed directly by our payment service providers. We do not receive, process or store full payment card numbers;
(d) Recruitment data — where you apply for a position with us, your curriculum vitae and any personal data contained in it or in your correspondence;
(e) Correspondence — records of communications between you and us, including emails, messages and notes of telephone calls.
2.2 Information collected automatically. When you visit the Website we may collect your IP address, approximate geographic location, browser type and version, device and operating system, referring website, the pages you view, and the date, time and duration of your visit. This information is collected by means of cookies and similar technologies (clause 5).
2.3 Sensitive personal data. We do not seek sensitive personal data. Where you voluntarily disclose health, dietary, allergy or medical information so that we may provide for your safety and comfort on board, we process that information solely for that purpose and on the basis of your consent.
3. Purposes and legal bases for processing
3.1 We process personal data for the following purposes:
(a) to respond to enquiries, check availability and provide quotations — being steps taken at your request prior to entering into a contract;
(b) to arrange, confirm and deliver charters, excursions and onboard services, and to administer your booking — necessary for the performance of our contract with you;
(c) to safeguard the health and safety of guests and crew, to provision the vessel appropriately and to respond to emergencies at sea — necessary for our legitimate interests in operating safely and, where applicable, to protect vital interests;
(d) to take payment and to maintain accounting, invoicing, tax, insurance and statutory records — necessary to comply with legal obligations to which we are subject;
(e) to operate, secure, maintain and improve the Website and to understand how it is used — necessary for our legitimate interests in running an effective business;
(f) to send marketing communications about our vessels, charters and offers — where you have consented to receive them (clause 4);
(g) to assess applications for employment and engage crew and staff — necessary for our legitimate interests in recruitment and, where applicable, for steps prior to entering an employment contract;
(h) to establish, exercise or defend legal claims and to enforce our Terms of Use and charter terms — necessary for our legitimate interests.
3.2 Where we rely on legitimate interests, we have considered whether those interests are overridden by your interests, rights and freedoms, and have concluded that they are not.
4. Marketing communications
4.1 We send marketing communications only where you have asked to receive them or have enquired about our services and have not objected.
4.2 You may withdraw your consent at any time, without charge, by using the unsubscribe facility in any marketing email or by writing to us at the address in clause 15.
4.3 Operational messages relating to a booking you have made — such as confirmations, itineraries, safety information and changes to arrangements — are not marketing communications and will continue to be sent.
5. Cookies and similar technologies
5.1 Strictly necessary cookies enable core functions of the Website, including page navigation, form submission and security. The Website cannot function properly without them.
5.2 Analytics cookies help us understand how visitors find and use the Website, which pages are viewed and where visitors leave, so that we may improve it. This information is aggregated and used for statistical purposes.
5.3 Advertising and social media cookies may be set by third parties to measure the effectiveness of our advertising and to present relevant advertisements to you on other websites.
5.4 Most browsers allow you to refuse or delete cookies through their settings. Disabling strictly necessary cookies may prevent parts of the Website from working.
5.5 Third parties that set cookies through the Website process your data in accordance with their own privacy policies, over which we have no control.
6. Disclosure of personal data
6.1 We disclose personal data only as follows:
(a) to the captains and crew of our vessels, to the extent necessary to deliver your charter safely;
(b) to service providers acting on our instructions, including our website developer and host, email and customer-management providers, payment service providers, marina and berthing operators, dive, fishing, watersports and excursion partners, caterers and provisioners, and ground transport providers;
(c) to our professional advisers, auditors, insurers and insurance brokers, where necessary for the purposes described in clause 3;
(d) to port, customs, immigration, maritime, law-enforcement and other governmental authorities, where required by law or by the lawful operation of a vessel;
(e) to a purchaser or prospective purchaser of our business or assets, subject to appropriate confidentiality undertakings.
6.2 We do not sell personal data, and we do not disclose personal data to third parties for their own independent marketing purposes.
7. International transfers
7.1 Waypoint operates from the Turks and Caicos Islands. Certain of our service providers, including our website host, email provider and payment processors, are located in the United States or elsewhere outside the Turks and Caicos Islands. Personal data may therefore be transferred to, stored in and processed in those jurisdictions.
7.2 Where we make such a transfer, we take reasonable steps to satisfy ourselves that the recipient is bound by contractual obligations of confidentiality and security consistent with this Policy.
8. Retention
8.1 We retain personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with the following periods:
(a) enquiries that do not result in a booking — 24 months from the last contact;
(b) charter, booking, accounting and tax records — 7 years from the end of the relevant financial year, or such longer period as applicable law requires;
(c) recruitment applications from unsuccessful candidates — 12 months from the conclusion of the recruitment process;
(d) marketing contact details — until you withdraw your consent or object.
8.2 We may retain personal data for a longer period where it is necessary to establish, exercise or defend a legal claim.
9. Security
9.1 We maintain technical and organisational measures appropriate to the risk, including restricted access to systems and records, password protection, encryption of data in transit where available, and confidentiality obligations imposed on crew, staff and service providers.
9.2 No transmission of information over the internet is entirely secure. While we take reasonable measures to protect personal data, we cannot guarantee the security of data transmitted to the Website, and any such transmission is at your own risk.
10. Your rights
10.1 Subject to applicable law, you may ask us to:
(a) confirm whether we hold personal data about you and provide a copy of it;
(b) correct personal data that is inaccurate or incomplete;
(c) delete personal data that we no longer have a lawful reason to retain;
(d) restrict or object to our processing of your personal data;
(e) provide your personal data in a portable electronic format, or transmit it to another provider, where technically feasible;
(f) withdraw any consent you have given, without affecting the lawfulness of processing carried out before withdrawal.
10.2 To exercise any of these rights, write to us using the details in clause 15. We may ask you to verify your identity before responding. We will respond within 30 days of receiving a valid request, or notify you if more time is reasonably required.
10.3 The Turks and Caicos Islands do not presently have a dedicated data protection authority. We nevertheless afford the rights set out in clause 10.1 as a matter of policy, in addition to your rights under section 9 of the Constitution of the Turks and Caicos Islands and at common law. If you are dissatisfied with our response, you may raise the matter with us at the address in clause 15 or pursue such remedies as are available to you at law.
11. Children
11.1 The Website is not directed at children, and we do not knowingly collect personal data from any person under the age of 18 through it.
11.2 Bookings must be made by an adult. Where a charter party includes minors, the lead guest is responsible for providing their information and for the accuracy of it.
12. Third-party websites
12.1 The Website may contain links to third-party websites. We are not responsible for the content or privacy practices of those websites, and this Policy does not apply to them.
13. Changes to this Policy
13.1 We may amend this Policy from time to time. The date at the head of this document records when it was last revised. Material changes will be notified on the Website.
14. Governing law
14.1 This Policy and any dispute arising out of or in connection with it are governed by the laws of the Turks and Caicos Islands, and the courts of the Turks and Caicos Islands have exclusive jurisdiction.
15. Contact us
Questions, requests and complaints relating to this Policy should be addressed to:
Waypoint Yachts Ltd.
trading as PRIVÉ Luxury Yachts
Blue Haven Marina
Providenciales
Turks and Caicos Islands, British West Indies
Email: [email protected]
Toll Free: +1 844 752 4247
Telephone: +1 649 232 8999 · +1 649 232 2000 · +1 649 232 3000