Information we collect

•     Your name, email address, telephone number and any professional contact details you provide.

•     Information submitted through our website forms, enquiry forms or booking forms.

•     Your yacht search criteria, intended use, cruising plans, budget, preferred yacht type, ownership requirements, viewing plans and yacht location preferences.

•     Correspondence, call notes, and the bespoke curated materials we prepare for you — for example, a Stage 1 briefing document — as part of a paid advisory engagement such as a strategy call, Yacht Review, Pre-Viewing Strategy, delivery, relocation, or owner-support service. These materials are prepared specifically for your circumstances as part of a service; we do not sell generic, off-the-shelf digital products.

•     Purchase, payment and invoicing information connected with services you engage us for.

•     Technical information about how you use our website, including browser type, device information, IP address and cookie-related information collected through our hosting provider or analytics tools.

Please avoid sending us sensitive personal information (for example, financial account numbers or health information) through website forms or ordinary email unless we have agreed a secure method with you.

How we use your information

•     Respond to enquiries and arrange conversations.

•     Prepare and deliver bespoke advisory services and curated materials based on your specific requirements.

•     Arrange and provide strategy calls, Yacht Reviews, Pre-Viewing Strategies, deliveries, relocations and owner-support services.

•     Manage the client relationship, invoicing and business records.

•     Protect the security and proper operation of our website and business.

•     Meet legal, tax, accounting and regulatory obligations.

•     Send marketing communications only where you have separately opted in, or otherwise as permitted by law.

Our legal bases for processing (UK & EU GDPR)

•     Contract: to provide services you have engaged us for and manage the related relationship.

•     Legitimate interests: responding to enquiries, maintaining business records, protecting our business and improving our website — only where this does not override your rights.

•     Legal obligation: meeting tax, accounting, legal and regulatory requirements.

•     Consent: optional marketing emails and non-essential cookies. You may withdraw consent at any time.

Automated decision-making and profiling

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

Who we share your information with

We do not sell personal information, and we do not share personal information for cross-context behavioural advertising. We may share limited personal information with trusted providers where necessary to operate our business and deliver services, including:

•     Our website hosting and e-commerce platform provider.

•     Payment providers used to process transactions.

•     Email, file-storage, accounting, scheduling and video-call providers.

•     Professional advisers, insurers, legal advisers and accountants where reasonably required.

•     Independent specialists, suppliers or service providers introduced in connection with a yacht project, but only where necessary and appropriate to the service being discussed.

Where we introduce you to an independent third party, that provider is responsible for its own services, privacy practices, contracts and insurance.

International data transfers

Some providers we use are based outside the UK and EEA, including in the United States. Where we transfer personal information internationally, we rely on one or more recognised safeguards, such as:

•     The UK Extension to the EU-U.S. Data Privacy Framework (the “UK-U.S. Data Bridge”) or the EU-U.S. Data Privacy Framework itself, where the receiving U.S. organisation is self-certified and the transfer falls within its scope;

•     The UK International Data Transfer Agreement (IDTA) or EU Standard Contractual Clauses, together with a transfer risk assessment, where the Data Privacy Framework does not apply; or

•     Other adequacy regulations recognised by the UK government or the European Commission.

As at the date of this policy, the EU-U.S. Data Privacy Framework and its UK Extension remain in effect, though they are subject to an ongoing legal challenge before the EU courts. We monitor developments and will update our transfer arrangements if this framework is invalidated or narrowed, as happened with its predecessor, Privacy Shield, in 2020.

How long we keep your information

•     General enquiries and website-form submissions: normally up to 24 months after the last meaningful contact.

•     Client-service information, advisory records and relevant correspondence: normally up to six years after the end of the client relationship.

•     Purchase, invoice and accounting records: normally at least six years from the end of the relevant company financial year, unless a longer period is required by law or reasonably necessary for a legal claim, insurance matter or dispute.

•     Marketing-consent records: retained until you withdraw consent or we stop using the relevant marketing list.

Cookies

Our website uses essential cookies needed for it and the checkout process to function correctly, and may use optional analytics or marketing cookies where enabled with your consent. You can manage non-essential cookies at any time through the cookie banner or cookie settings on our website. Where a browser or device sends a recognised opt-out preference signal, such as Global Privacy Control (GPC), we will honour it for the purposes that signal covers under applicable law.

Your rights — UK and EU residents

Depending on the circumstances, you may have the right to:

•     Request access to the personal information we hold about you.

•     Ask us to correct inaccurate or incomplete information.

•     Ask us to erase information where there is no valid reason for us to retain it.

•     Ask us to restrict how your information is used.

•     Object to certain processing, including direct marketing.

•     Request a portable copy of information you have provided to us.

•     Withdraw consent where we rely on consent.

To exercise any of these rights, email anthony@anthonyaustin.yachts. You also have the right to complain to a supervisory authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the data protection authority in the country where you live, work, or where the alleged infringement occurred.

Your rights — U.S. residents

Depending on your state of residence, and to the extent the applicable law's thresholds apply to our business, you may have the right to:

•     Know what personal information we hold about you and how it is used.

•     Correct inaccurate personal information.

•     Delete personal information, subject to certain exceptions.

•     Opt out of the sale or sharing of personal information and of targeted advertising — we do not sell personal information for money, and do not share it for cross-context behavioural advertising.

•     Limit the use of sensitive personal information.

•     Receive a portable copy of your data.

•     Not be discriminated against for exercising any of these rights.

•     Appeal a denied request, and designate an authorised agent to submit a request on your behalf.

To exercise any of these rights, email anthony@anthonyaustin.yachts. We may need to verify your identity before responding. For transparency: several U.S. state privacy laws (including the CCPA/CPRA) only formally apply to businesses meeting specific revenue or data-volume thresholds, which our business may not meet. We are extending these rights as a matter of good practice regardless of whether a given threshold is met.

Children's privacy

Our services are intended for adults arranging yacht purchases, deliveries or ownership support, and are not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

Marketing

We will not add you to a marketing list simply because you make an enquiry, purchase a service, or arrange a call. Marketing emails include an unsubscribe link, and we comply with applicable marketing laws, including the UK/EU rules on electronic communications (PECR) and the U.S. CAN-SPAM Act — for example, using accurate sender information, including a valid postal address, and promptly honouring opt-out requests. You can unsubscribe at any time using the link in the relevant email or by contacting anthony@anthonyaustin.yachts.

Security

We take reasonable organisational and technical steps to protect personal information from unauthorised access, misuse, loss or disclosure. Access is limited to those who need the information for legitimate business purposes. No system can guarantee absolute security — please avoid sending highly sensitive personal or financial information through ordinary email unless we have agreed a suitable secure method.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, systems or legal responsibilities. The latest version will always be available on our website.

Contact us

For privacy questions, requests or concerns, please contact:

Anthony Austin Yachts Ltd

109 Portland Street, C/O Lai & Co, Manchester, England, M1 6DN

anthony@anthonyaustin.yachts

www.anthonyaustin.yachts