Privacy Policy

1. Who we are

BoatQuest is a trading name of AirOMair Ltd (SC328639), registered in Scotland. We are the data controller for personal data processed through this platform. For our registered address or company number, contact us at hello@boatquest.co.uk.

2. Data we collect

• Account data: Email address and authentication tokens when you create an account.
• Usage data: Search queries, boats viewed, reports generated, and saved boats — used to personalise your experience.
• Payment data: We do not store card details. All payment processing is handled by Stripe, who are PCI-DSS compliant.
• Newsletter: Email address if you subscribe to our newsletter or market updates.
• Technical data: IP address, browser type, and device type for security and analytics purposes.

3. How we use your data

• To provide and improve the BoatQuest service
• To send transactional emails (magic links, receipts, alerts you configure)
• To send our newsletter if you have opted in
• To detect fraud and ensure platform security
• To comply with legal obligations

4. Legal basis (UK GDPR)

We process your data under: contract (to provide the service you signed up for), legitimate interests (security, fraud prevention, improving the platform), and consent (newsletter subscriptions).

5. Data sharing

We share your data only with the following processors, each bound by a Data Processing Agreement:

• Supabase — database and authentication hosting
• Stripe — payment processing
• Resend — transactional email delivery
• Anthropic — AI-powered report generation (prompts may include boat listing data but never personal identifying information)
• Vercel — web hosting

We do not sell your data to third parties.

6. Data retention

We retain your account data for as long as your subscription is active, plus 90 days after cancellation to allow for reactivation. After that period your personal data is deleted. Search and usage history associated with your account is also removed at that point. You may request earlier deletion at any time (see Your Rights below).

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Data portability (receive your data in a machine-readable format)
• Withdraw consent for newsletter communications at any time
• Lodge a complaint with the ICO at ico.org.uk

To exercise any right, email privacy@boatquest.co.uk. We will respond within 30 days.

8. Cookies

We use functional cookies required for authentication and preferences, and optional analytics cookies. We do not use advertising or tracking cookies. See our Cookie Policy for full details.

9. Contact

For any privacy-related queries: privacy@boatquest.co.uk