Privacy Policy

1. The short version

No advertising cookies and no third-party trackers unless you accept them. No IP logging or device fingerprinting in our own analytics, which count anonymous visits so we can improve the site, and nothing more. If your browser signals that you don't want to be tracked, our analytics don't track you at all. If you accept advertising cookies, the Meta Pixel and the Google tag load as section 8 describes, and you can withdraw that consent at any time.

2. Who is responsible for your data

DRAFT: to be provided, which runs The Salt Escape, is responsible for the personal details described here, as their controller. Its address and registration details are on our company details page, and you can write to us about your data at any time.

3. How our analytics work

Our analytics are written and hosted by us. When you open the site in a browser tab, we generate a random, anonymous session id and keep it in your browser's sessionStorage for that tab only. It is a throwaway identifier: it is never stored in a cookie, and it is deleted the moment you close the tab.

Using that per-tab id, we record which pages are viewed, which links or buttons are clicked, and a rough time-on-page signal (a periodic "still here" heartbeat), and the campaign that brought you, as the next paragraph says. That is the full extent of it.

If the link you arrived through carries campaign parameters (utm_source, utm_medium, utm_campaign, utm_term and utm_content), we keep them in sessionStorage for that tab, record them with the first page you view, and, if you then make a booking, keep them with that booking, so we know which campaigns bring visits and bookings. Only if you accept advertising do we also keep an ad's click id from that link (gclid from Google, fbclid from Meta); without that consent we never store one, and withdrawing it removes it from the tab. A booking keeps its campaign as long as we keep the booking. [to be confirmed: whether keeping the campaign parameters needs consent too.]

We do not store your IP address, we do not build a device fingerprint, and we cannot follow you across different browsers, devices or tabs. Because the id resets with every new tab, the data cannot be tied back to you as a person.

4. Do Not Track and Global Privacy Control

If your browser or an extension sends a Do Not Track (DNT) or Global Privacy Control (GPC) signal, our analytics switch off entirely for your visit. No session id is created, and nothing is measured or sent. You don't need to do anything else. We honour the signal automatically.

5. What the team can see

Our staff only ever see this information in aggregate: totals such as how many people viewed a destination, which yachts drew the most interest, and how long pages held attention. The admin dashboard shows counts and trends, not individuals; only a booking's own page in the admin shows the campaign that booking came from. There is no profile of you, and nothing that identifies you personally.

6. Information you give us

Separately from analytics, you may choose to give us personal details, for example your name and email when you make a booking, create an account, subscribe to our newsletter or send us a group enquiry. We use those details only to provide the service you asked for: to confirm and manage your booking, to let you sign in, to send the updates you opted into, or to answer your enquiry.

Before departure we also need each guest's full name, date of birth, nationality and passport or ID number, for the crew list the charter company must file with the authorities before a yacht may leave Croatia. Each guest enters their own through the check-in link of the booking. We use them only for that list and for your booking.

We keep this information for as long as needed to run your booking and account, and no longer than the law requires. [to be set: how long we keep booking details, and a group enquiry once it is answered.]

We delete each guest's crew list details 30 days after the end of their charter week. Copies in our backups are deleted as those backups age out and are replaced, [to be set: within how many days of that].

7. Essential cookies

The cookies we set ourselves keep you signed in, carry a registration or a booking you started on to its next step, and remember your choice in the cookie banner and, if you switch, your language. They carry no tracking data, and our cookie notice lists each of them and how long it lasts.

8. Advertising tags, only with your consent

If you choose Accept all in our cookie banner, or turn on Advertising in its settings, we load two advertising tags: the Meta Pixel, from Meta, and the Google tag for Google Ads, from Google. Until you do, neither is loaded, and your browser sends nothing to Meta or Google from our site.

Once loaded, the tags set their own cookies on our site, listed in our cookie notice, and send Meta and Google the pages you visit here, technical details of your browser and device, and the IP address their requests come from. We use what they report to measure how our ads perform and to show our ads to people who visited us. Meta and Google may combine it with what they already know about you, under their own privacy policies. [to be confirmed: our role and theirs as controllers of this data, and its transfer outside the EU.]

If you accept advertising when you make a booking, the booking keeps that choice and the user agent your browser sent with it (the name and version of your browser and system). Once your deposit is paid, our server reports the purchase to Meta through Meta's Conversions API: the deposit's amount and currency, when it was paid, a random id for the event, the address of our booking confirmed page with nothing that identifies your booking, your browser's user agent, and your email address only in hashed form (SHA-256), never as you typed it. We send no name, postal address or IP address. The booking confirmed page reports the same purchase through the Meta Pixel under the same id, so Meta counts it once, and to Google Ads through the Google tag, both only while you accept advertising. If you had not accepted advertising when you booked, nothing about your booking is reported to Meta or Google. [to be confirmed: our legal basis for this report, and how long Meta keeps it.]

Measurement, a separate choice in the cookie settings, also lets the Google tag use its analytics cookies. It applies only while Advertising is on.

You can change or withdraw your choice at any time from Cookie settings, at the bottom of every page. When you withdraw it, the page reloads without the tags. Cookies they already set stay in your browser until they expire or you clear them.

We keep your choice in the consent cookie for 180 days, then ask again. How long Meta and Google keep what their tags collect is up to them: [to be set: their retention periods].

9. Sharing

We share personal details only with the partners that make your booking happen, and only what they need to do their part: Stripe, which processes your payments, and the charter company that provides your yacht, which receives your booking and crew list details. The charter company files the crew list with the authorities, as the law requires. We never sell your data. If you accept advertising cookies, Meta and Google receive what their tags collect, and Meta the report of a paid deposit, as section 8 describes; otherwise we hand nothing to advertisers.

10. Your rights

You can ask us for a copy of the personal details we hold about you, ask us to correct or delete them, or withdraw consent to marketing or to advertising cookies at any time. Our analytics hold no name, email address or IP address, so those requests concern mainly the details you gave us directly and what a booking keeps with them (sections 3 and 8). Contact us and we'll help.

You may also complain to a data protection authority, in particular the one in the country where you live.