PRIVACY POLICY — YOTCLUB OÜ
Last updated: [20.06.2026]
1. WHO WE ARE
YotClub OÜ (“YotClub”, “we”, “us”) is a company registered in Estonia (registration number 14070961, registered address: Tuukri tn 19-315, Tallinn, 10152, Estonia). We organize and arrange sailing yacht trips — both private charters and cabin charters — and act as the data controller for the personal data described in this policy.
If you have any questions about this policy or how we handle your data, contact us at travel@yotclub.com.
2. WHAT DATA WE COLLECT
We collect only the data needed to discuss, book, and deliver your yacht trip. Depending on the stage of your booking, this may include:
Contact and inquiry data

Name
Phone number
Email address
Messaging app identifiers (e.g. WhatsApp number, Telegram username), if you contact us through these channels
Details of your inquiry (destination, dates, number of guests, preferences)

Booking and contract data

Billing details necessary to issue an invoice
Trip details (yacht, dates, route, additional services such as skipper or cook)

Crew list data (passport data)

For trip participants, we collect: full name, date of birth, nationality, passport number and expiry date.
This data is collected solely to prepare the official crew list required by the charter company and, where applicable, port or maritime authorities. We ask for it only once a booking is confirmed, not at the inquiry stage.
Website usage data

Our website (yotclub.com) uses Google Analytics to understand general visitor traffic. This only operates with your consent, given via the cookie banner on the site. If you decline or do not interact with the banner, no analytics cookies are set.
We do not collect payment card data — payments are made by bank transfer directly to our account, and we do not process or store card details.
3. HOW WE COLLECT YOUR DATA
YotClub does not use online forms, account registration, or online checkout. We collect personal data through direct communication with our team: phone calls, email, and messaging apps (WhatsApp, Telegram, or similar, where you choose to contact us this way).
Because we rely on these channels, please note that messaging apps are operated by third parties (e.g. Meta, Telegram) under their own privacy terms. We have no control over how these platforms handle data in transit, and we encourage you to review their respective privacy policies.
4. WHY WE USE YOUR DATA (LEGAL BASIS)

Responding to your inquiry before a contract exists — legitimate interest
Preparing and managing your booking contract — performance of a contract
Preparing the crew list and submitting it to the charter company — performance of a contract
Issuing invoices and keeping accounting records — legal obligation (Estonian accounting law)
Website analytics (Google Analytics) — consent

We do not use your data for automated decision-making or profiling.
5. WHO WE SHARE YOUR DATA WITH
Charter companies. To prepare your trip, we share crew list data (and relevant contact details) with the charter company operating the yacht you have booked. Charter companies are independent businesses, not part of YotClub, and act as separate data controllers for the data they receive.
Skippers, where engaged directly by YotClub. If a skipper is arranged by us rather than by the charter company, we share the minimum data needed for them to prepare the trip.
Zoho CRM. We use Zoho Corporation’s CRM platform to store and manage client contact and booking information. Zoho acts as our data processor, and does not use your data for its own purposes.
Authorities. Where legally required (e.g. port authorities, customs, tax authorities), we may be required to share relevant data.
We do not sell personal data, and we do not share it with advertisers or marketing networks.
6. INTERNATIONAL DATA TRANSFERS
Because yacht trips take place worldwide, the charter company operating your chosen yacht may be located outside the European Economic Area (EEA) — for example, in Turkey, Montenegro, or Caribbean destinations, as well as within the EU/EEA (e.g. Croatia, Greece, Italy).
Where a charter company is located within the EEA, no additional safeguard is required.
Where a charter company is located outside the EEA, the transfer of your crew list data is necessary to perform the contract you have asked us to arrange — specifically, to book the yacht and destination you selected (under Article 49(1)(b) of the GDPR). We only transfer the minimum data necessary for this purpose, and only to the specific charter company involved in your trip.
7. HOW LONG WE KEEP YOUR DATA

Passport / crew list data: deleted within 30 days after your trip ends, unless a dispute, insurance claim, or legal matter is open at that time.
Contact, contract, and invoice data: retained for 7 years, in line with Estonian accounting and tax record-keeping requirements.
Inquiry data that does not lead to a booking: deleted within 12 months of your last contact with us, unless you ask us to keep it for a future trip.

8. YOUR RIGHTS
Under the GDPR (and equivalent rights if you are not in the EU), you have the right to: access your data, correct inaccuracies, request deletion where we’re not legally required to keep it, object to processing based on legitimate interest, restrict processing, receive a portable copy of your data, withdraw consent at any time, and lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.
To exercise any of these rights, contact us at travel@yotclub.com. We will respond within one month.
9. SECURITY
We take reasonable technical and organizational measures to protect your data, including access controls on our CRM system and limiting passport data access to staff directly involved in preparing your trip. No method of transmission is fully secure, and we recommend avoiding sharing passport scans over unsecured channels where possible.
10. COOKIES
Our website uses Google Analytics to understand visitor traffic. This is the only cookie or tracking technology in use. Google Analytics only runs after you provide consent via our cookie banner. You can change your choice at any time using the Cookie Settings link in the website footer.
We do not use advertising or marketing cookies.
11. CHANGES TO THIS POLICY
We may update this policy from time to time. The current version is always available at yotclub.com/privacy. Material changes will be communicated to clients with an active booking.
12. CONTACT US
YotClub OÜ

Tuukri tn 19-315, Tallinn, 10152, Estonia

Email: travel@yotclub.com