Privacy Policy
This policy explains what personal data Stargoyacht collects when you use stargoyacht.com, book a yacht or create an account, why we use it, and the choices you have.
This page is translated for your convenience. If there is any difference, the English version applies.
Who we are
Stargoyacht is operated by STARGOTOURISM LLC, Şişli, Istanbul, Türkiye. We arrange private yacht charters on the Bosphorus. For any question about your data, write to info@stargoyacht.com or message us on WhatsApp at +90 554 987 88 84.
What we collect
- Booking details: your name, WhatsApp number, email, the yacht, date, time, number of guests, occasion, extras and any notes you write.
- Account details (only if you create an account): your name, email, a securely hashed password, and anything you add to your profile, such as your country, birthday, wedding anniversary and saved yachts.
- Google sign-in (only if you choose “Continue with Google”): your name, email address and profile picture from your Google account. See Google user data below.
- Payments: card payments are processed by Stripe. We never see or store your full card number. We keep the payment reference and amount.
- Technical data: your IP address (to prevent abuse and fraud) and a sign-in cookie that keeps you signed in. Your saved yachts and sign-in status are also remembered in your browser’s local storage.
Google user data (“Continue with Google”)
You can create a Stargoyacht account or sign in with your Google account. This section explains exactly how we handle the data we receive from Google.
- Data we access: only your basic Google profile, through the openid, email and profile permissions: your name, your email address (and whether Google has verified it), your profile picture and your Google account ID. We do not ask for or access your Gmail, contacts, calendar, Drive or any other Google data, and we never see your Google password.
- How we use it: only to create your Stargoyacht account and sign you in, to show your name and picture in the site header and in your account, to fill in your name and email on your bookings, and to send you the service emails about your bookings and account described above. We do not use Google user data for advertising, and we do not use it to train AI or machine-learning models.
- Sharing: we do not sell, rent or share Google user data with anyone. It is not transferred to third parties, except to our hosting provider (Bluehost), which stores it for us, to Brevo only to deliver the emails you ask for or that your bookings need, or when the law requires it.
- Storage and protection: the data is stored in our database, over HTTPS, and only our team can access it.
- Keeping and deleting it: we keep it while your account exists. When you delete your account (My account → Security → Delete account), your name, email, picture and Google account ID are deleted from our account records straight away. You can also email info@stargoyacht.com to ask for deletion, and you can remove Stargoyacht’s access at any time at myaccount.google.com/permissions.
Stargoyacht’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How we use it
- To take, confirm and run your booking, and to contact you about it on WhatsApp or by email.
- To send service emails: booking confirmations, a reminder before your trip, cancellations, password resets and security notices.
- After your trip, to ask you for a review.
- Only if you agree in your account: offers, and a reminder before your birthday or anniversary. You can switch this off at any time in your profile.
- To keep our records for accounting and legal duties, and to protect the site against misuse.
We do not sell your personal data and we do not use it for advertising profiles.
Who we share it with
- Stripe: to process card payments.
- Brevo: to send our emails.
- Google: for “Continue with Google”, and to store our internal booking sheet.
- Yacht operators and our crew: only the details needed to run your trip (name, phone, date, time, guests and requests).
- Authorities: when the law requires it.
Our website and database are hosted by Bluehost. Some of these providers may process data outside Türkiye under their own data protection safeguards.
How long we keep it
We keep your account until you delete it. Booking and payment records are kept as long as accounting and tax law requires, even if you delete your account. Email logs and security logs are kept for a limited time and then removed.
Your rights
You can see and correct your details in My account, and delete your account yourself under Security. You can also ask us for a copy of your data, a correction, or deletion, or object to how we use it, by writing to info@stargoyacht.com. These rights apply under the Turkish Personal Data Protection Law (KVKK) and, where it applies, the EU GDPR.
Security
Our site uses HTTPS. Passwords are stored only as secure hashes, and links sent by email expire. Access to booking data is limited to our team.
Children
Accounts are for adults. Guests under 18 may join a trip booked by an adult.
Changes
If we change this policy, we will update the date at the top of this page.