NetBoats

Privacy Policy

Last updated: July 2026

1. Who We Are

NetBoats ("NetBoats", "we", "us", "our") operates the boat marketplace at netboats.co.uk. We are the data controller for personal data collected through this Site. If you have any privacy queries, please contact us.

2. What Data We Collect

We may collect the following personal data:

  • Account data: name, email address, phone number
  • Listing data: boat details and photos you submit
  • Communication data: messages sent via our contact form or enquiry system
  • Usage data: pages visited, search queries, browser type, IP address
  • Payment data: billing information processed securely via Stripe (we do not store card details)

3. How We Use Your Data

We use your personal data to:

  • Provide and operate the NetBoats marketplace
  • Process listing payments and subscriptions
  • Send account-related notifications and OTP codes
  • Respond to enquiries and support requests
  • Improve the Site through aggregated analytics
  • Comply with legal obligations

4. Legal Basis for Processing

We process your data under the following lawful bases (UK GDPR Art. 6):

  • Contract: to provide the services you signed up for
  • Legitimate interests: to improve the Site and prevent fraud
  • Legal obligation: to comply with applicable law
  • Consent: for any optional marketing communications

5. Data Sharing

We do not sell your personal data. We may share it with:

  • Service providers: Convex (database hosting), Stripe (payments), email delivery services — all under data processing agreements
  • Law enforcement: when required by law or to protect rights and safety
  • Business transfers: in the event of a merger or acquisition, with appropriate safeguards

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined above, or as required by law. Account data is retained for the life of your account and up to 7 years after closure for legal and accounting purposes. Contact form submissions are retained for up to 2 years.

7. Your Rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request erasure ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise any of these rights, please contact us. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Cookies

We use essential cookies to operate the Site (authentication, session management). We may also use analytics cookies to understand usage patterns. You can manage cookies through your browser settings, though disabling essential cookies may affect functionality.

9. Security

We implement appropriate technical and organisational measures to protect your personal data. However, no internet transmission is entirely secure. Please protect your account credentials and notify us immediately if you suspect unauthorised access.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date and, where changes are significant, notify registered users by email.