Privacy

Effective 20 October 2026 · Version 2026-10-21.1

Who we are and how to contact us

S COLLECTION GROUP UK LTD operates Yacht Itinerary, company number 17068521, 20 Wenlock Road, London, N1 7GU, England. Contact s@the-s-collection.com about your information or a privacy request.

We are responsible for our account, support, security and billing administration. A brokerage is responsible for the guest information it chooses to enter and the sharing instructions it gives us. Contact your brokerage about its itinerary content; we can help route a request. This notice does not replace a brokerage’s own privacy information or any required data-processing agreement.

Information and purposes

We process account identifiers, contact and brokerage details, roles, saved destinations, coordinates, trip notes, vessel details, fuel assumptions and content you enter to provide and protect the workspace. We process support messages to answer requests. Hosting and service providers also receive normal connection and security information, such as IP addresses and request details.

For account and service information necessary to perform a contract directly with you, we rely on performance of that contract. For business contacts, staff access, support and proportionate service security, our legitimate interests are operating a reliable service, communicating with the customer and preventing misuse. Where we retain information to meet an applicable legal obligation, that obligation is the basis. A brokerage must establish its own basis for guest information it supplies.

When paid billing is enabled, Stripe collects payment details through its hosted payment flow. Our application stores payment-service references and subscription status rather than full card details. Necessary account details are required to provide a private workspace; optional itinerary and guest details are supplied by the brokerage.

Who can see your information

Workspace membership and roles control broker access. Platform administrators have broader access to operate the service. Publishing creates a guest snapshot that anyone with its link can open. Notes and budget information depend on the broker’s choices. A recipient can forward the link or retain an export. Turning sharing off cannot retrieve downloaded copies.

We use hosting and backup services from Hostinger and support email routed through Gmail. When configured for paid service, Stripe handles payment processing. We may also disclose information where required by law or necessary to address an actual security incident or legal claim.

Maps, search and images

Country, town and marina searches send the search words to Photon/OpenStreetMap when you pause while typing or submit a search. Exact coordinate text is parsed on the page. Nearby information for map pins uses Wikipedia. These lookup requests do not include your full itinerary, account identifier, private notes or fuel prices.

ArcGIS satellite imagery and the optional OpenStreetMap layer receive requests for the map area you view. Wikipedia, Wikimedia and other image hosts may receive requests when external content loads. A brokerage can add its own image host. Those providers can receive your IP address and normal connection metadata. Inter fonts and the application’s approximate coastline-routing data are served from this website.

External providers may operate infrastructure outside the UK. Contact us for information about the providers involved in a particular request. We do not claim that all processing stays in the UK or that an unverified international-transfer arrangement has been approved. Provider and transfer arrangements must be reviewed before enabling the paid onboarding that depends on them.

Cookies and account storage

WordPress and hosting services use authentication and security mechanisms to provide signed-in access. The itinerary application keeps working state in page memory and saves it to your brokerage on the server. This notice does not treat opening a page as consent to optional tracking or marketing. If optional tracking is introduced, its purpose and any required choice must be provided separately before use.

Retention, export and deletion

We keep workspace information while the account is active to provide the service. After paid access ends, you have 30 days to request an assisted export. On account closure we arrange removal of private itinerary content from the working service within 90 days, unless a documented legal preservation requirement applies. This is a support-led process, not an automatic deletion triggered by cancelling a subscription. Contact us to close an account or request deletion.

Archiving keeps a trip recoverable. Manually disabling a guest link removes its current stored guest snapshot; sharing metadata and the private trip remain. Link expiry alone does not erase its stored snapshot. Account closure and deletion requests are handled separately.

Billing and accounting evidence is kept separately for the applicable statutory, accounting or dispute period. Support correspondence is retained while needed to resolve the request and substantiate the outcome; security records while needed to investigate and protect the service. We review continued need rather than keeping these records indefinitely without a purpose. Any preservation exception is documented.

Backups are separate from the working service and are removed through the hosting provider’s backup rotation rather than erased individually at the instant of a request. We record completed deletion requests so a recovery can be handled without deliberately reintroducing deleted live information. We do not promise a backup deletion deadline that has not been verified with the provider.

Your rights and requests

You may ask for access, correction, deletion, restriction or portability where the relevant right applies. We may need proportionate identity or brokerage-authority checks before disclosing or changing information. Rights depend on the purpose and legal basis; a preservation obligation may affect what can be deleted. Where processing depends on consent, you can withdraw that consent.

Your right to object

You can object to processing based on our legitimate interests. Explain your circumstances when contacting s@the-s-collection.com so we can consider the request.

You may complain to the UK Information Commissioner’s Office. You can contact us first so we can try to resolve your concern. This notice does not waive any rights available under applicable law.

Policy records and current availability

Where policy acceptance is required, we store your signed-in account, workspace, UTC time, document version and exact document snapshot. This provides evidence of what was presented and accepted; it is not marketing consent. Billing information is processed when a paid subscription is offered and purchased. Material changes to these documents require a new version.