Legal

Privacy Policy

Last updated: August 2026

1. Who We Are

AURA Private Yachting operates private boat cruises in the Ionian Sea, Greece. Our registered trading address is Eleftheriou Venizelou 5, Preveza 481 00, Greece. For data-related enquiries, contact us at: info@auraprivateyachting.com.

2. Data We Collect

When you make a booking, we collect: your full name, email address, phone number, number of guests, cruise date, departure point, chosen destination, selected extras (e.g. champagne, catering), payment type, and any personal notes or occasion details you provide. If you use our VIP portal, we additionally store seating, dietary, and activity preferences. If you submit an enquiry via the contact form, we collect your name, email address, and message. If you subscribe to our newsletter or join a waiting list, we collect your name, email address, and optionally your phone number. We do not store payment card details — all payments are processed by Stripe and governed by Stripe's own privacy policy.

3. How We Use Your Data

We use your data to fulfil your booking, send booking confirmations, issue pre-cruise information, and contact you in case of schedule changes. If you have separately subscribed to our newsletter, we send occasional updates about new routes and offers. You may unsubscribe at any time via the link in any email.

4. Legal Basis

Processing is necessary for the performance of a contract (Art. 6(1)(b) GDPR) when you make a booking. Where you have given consent — for example for our newsletter — processing is based on Art. 6(1)(a) GDPR. You may withdraw consent at any time without affecting any prior processing.

5. Data Sharing

We do not sell or rent your personal data. We share data only with the following service providers who help us operate the website: Stripe (payment processing), Resend (transactional email), Google LLC (AI chatbot — Gemini 2.5 Flash), Meta Platforms (Facebook Pixel — remarketing/analytics, only with your consent), Tawk.to (live chat widget), Sentry (error monitoring — captures error events including IP address and browser information; EU endpoint: de.sentry.io), Vercel Blob (encrypted database backup storage; Vercel Inc., USA), and our own secure database hosted within the EU. Where your data is transferred outside the European Union/EEA (for example, to Google LLC in the USA for AI assistant processing, or to Vercel Inc. in the USA for backup storage), we ensure that: an adequacy decision of the European Commission exists, or appropriate safeguards are applied (e.g. Standard Contractual Clauses), or one of the GDPR's specific derogations applies.

6. Retention

Booking records are retained for seven years to comply with Greek tax law. Newsletter subscriber data is held until you unsubscribe. Contact form enquiries are retained for up to two years. Waiting list entries are deleted after twelve months or upon availability notification, whichever is sooner. VIP preference data is retained for the duration operationally necessary and deleted thereafter. We do not apply automatic time-based deletion of abandoned booking records; you may request erasure at any time under your right to erasure (Art. 17 GDPR).

7. Cookies

We use a first-party analytics cookie (Google Analytics 4) and, where you have given consent, a Facebook Pixel cookie for remarketing and audience analytics. No advertising or tracking cookies are placed without your explicit consent via our cookie banner. You can withdraw consent at any time by clearing cookies or adjusting browser settings. See our Cookie Policy for full details.

8. Your Rights

Under GDPR, you have the right to access, rectify, erase, restrict or object to processing of your personal data, and the right to data portability. To exercise any of these rights, email us at info@auraprivateyachting.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

9. Security

We implement industry-standard technical and organisational measures to protect your data, including HTTPS encryption, HttpOnly session cookies, and regular security reviews. No internet transmission is 100% secure; we cannot guarantee absolute security.

10. GPS Vessel Tracking

For passenger safety purposes, our vessel transmits GPS position data to our secure platform. A maximum of 500 position records are retained at any time; older records are automatically deleted on a rolling basis. This data is used exclusively for real-time vessel monitoring and is not shared with third parties.

11. AI Chatbot

Our website features an optional AI assistant. Messages you enter are transmitted via encrypted connection to Google LLC (USA) and processed by the Gemini 2.5 Flash model. We do not store conversation history in our own database. Processing by Google is governed by Google's privacy policy (policies.google.com/privacy). Avoid sharing sensitive personal data (card numbers, passport numbers, etc.) with the AI assistant. Note: This service operates on the free tier of Google AI Studio; therefore your messages may be used by Google to improve its models, in accordance with its terms of use (ai.google.dev/gemini-api/terms). If you prefer not to share your messages for this purpose, please do not use the AI assistant.

12. Abandoned Bookings

If you begin a booking but do not complete payment, we may temporarily store the information you have entered (such as your name, email address, and preferred date) in order to send a single recovery email reminder. No automatic time-based deletion of this data occurs; you may request erasure at any time by contacting us at info@auraprivateyachting.com.

13. Contact Form

If you contact us via our contact form, we retain your name, email address, and message for up to two years in order to manage your enquiry and any follow-up correspondence.

14. Newsletter & Waiting List

If you subscribe to our newsletter, you will receive a 10% discount code and occasional updates about new routes and offers. You may unsubscribe at any time via the link in any email. If you join our waiting list for a specific date, we retain your contact details until that date passes or until we notify you of availability, whichever is sooner (and in any event no longer than twelve months). You may request removal from our waiting list at any time.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website. The date at the top of this page shows when the policy was last revised.

16. Minors

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data without parental consent, please contact us at info@auraprivateyachting.com and we will delete that data promptly.

17. Social Media

AURA Private Yachting maintains profiles on Instagram, Facebook, and TikTok. Following or interacting with us on these platforms is subject to that platform's own terms of service and privacy policy, not this one. We are not responsible for how third-party platforms handle your data.