Data Confidentiality Statement and Data Privacy Policy

Last updated: 07.10.2026

1. Who we are (data controller)

The data controller is:

Blackbird One Ltd.
5 Secretary’s Lane
Gibraltar GX11 1AA
Company number: 114712
Tax Identification Number (TIN): 665887
Email: info@blackbird-one.com

We handle personal data in accordance with applicable data protection laws, including the Gibraltar GDPR and the EU General Data Protection Regulation (“GDPR”) where it applies.

2. What this policy covers

This policy applies to visitors of blackbird-one.com, to anyone who contacts Blackbird One Ltd., and to clients who send an inquiry or book a yacht charter through Blackbird One Ltd. or its brands SkipperCity.com and Yachtco.net.

Each brand’s website also publishes its own privacy policy, which describes in full detail what that website does – its forms, cookies and the named service providers it uses (for SkipperCity, the SkipperCity Privacy Policy). For anything that happens on that website, its policy applies together with this one.

3. This website

blackbird-one.com is an information page. It has no forms, sets no cookies, uses no analytics or tracking, and loads no content from other companies – its fonts and images are served from our own server.

Like every web server, ours records technical access logs – your IP address, the time of the request, the page requested and your browser type. We use them only to keep the website running and secure, and keep them for a limited period. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).

4. When you contact us

If you email or call us, we use the details you give us – your name, contact details and your message – to answer you. Legal basis: steps taken at your request before a contract (GDPR Art. 6(1)(b)), or our legitimate interest in answering you (Art. 6(1)(f)).

5. Inquiries and bookings

When you send an inquiry or book a charter, we collect what is needed to arrange it:

• Identification and contact data – name, email address, phone number, country.
• Inquiry and booking details – travel dates, sailing area or base, boat, number of guests, whether you want a skipper or cook, budget, and anything you write in your message.
• Crew and document details – names and dates of birth of crew members, passport or ID details, and skipper’s licence and VHF certificate details, when the charter company asks for them.
• Contract and payment data – the boat, charter company, price, payment method and payment status of your booking, and any cancellation or refund. Card payments are made on our payment provider’s secure page; we never see or store your full card number.
• Communication data – the messages you send us by email, phone, WhatsApp or through our forms.

We use this data:

• to answer inquiries and suggest boats – legal basis: steps taken at your request before a contract (GDPR Art. 6(1)(b));
• to arrange and manage bookings – placing a hold on the boat, passing your details to the charter company, taking your payment and sending you the emails that belong to your booking – legal basis: performance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c));
• to comply with legal obligations – accounting records, tax and maritime rules, and lawful requests from authorities – legal basis: legal obligation (Art. 6(1)(c));
• to handle claims and disputes – complaints, support in a dispute with a charter company, and defending our legal rights – legal basis: legitimate interest (Art. 6(1)(f)).

We send newsletters only to people who subscribe and then confirm their subscription through the link we email them, and every newsletter has an unsubscribe link. Even if you opt out of marketing, we may still send you non-promotional messages about your booking.

6. Who receives your data

We do not sell your personal data. We share it only with:

• Charter companies – the company that owns or manages the boat you hold or book receives your name, email address, phone number and country, and later the crew list and documents it needs to provide your charter.
• The charter booking system – the professional booking system the charter companies use, through which we check availability and place holds and bookings with them.
• Our skippers and cooks – if you book one through us, they receive the names, contact details and party details they need for your charter.
• Payment providers and our banks – the card payment provider processes card payments on its own payment page, and our banks receive the details of a bank transfer you send us.
• Professional advisers – such as lawyers or accountants, where necessary to protect our rights and meet our obligations.
• Public authorities – when required by law or necessary to protect vital interests (for example coast guard, border police or tax authorities).

The brand’s privacy policy names each provider used on that website.

7. International transfers

Our server is in Slovenia, in the EU. Some service providers are based outside the EU/EEA, in particular in the United Kingdom and the United States, and charter companies may be located in the country where your charter starts. When personal data is transferred to a country without an adequacy decision, we rely on appropriate safeguards – such as the EU–US Data Privacy Framework where the provider is certified under it, or standard contractual clauses – or on the transfer being otherwise permitted, for example because it is necessary for the performance of your charter contract.

8. How long we keep your data

• Inquiry data – usually up to 2 years after our last meaningful communication, if no booking is made.
• Booking and contract data – for the duration of the charter and then for the period required by applicable financial, tax and maritime laws.
• Crew list and document data – for as long as required by local regulations and the charter company’s obligations.
• Newsletter data – until you unsubscribe or withdraw consent, subject to a short technical retention period.
• Server access logs – for a limited period needed for operation and security.

When data is no longer needed, we delete or anonymise it, unless we are legally obliged to keep it longer.

9. Your rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right of access – to know whether we process your personal data and to obtain a copy.
• Right to rectification – to have inaccurate or incomplete data corrected.
• Right to erasure – to request deletion of your data in certain circumstances. We keep only what the law requires us to keep, such as accounting records.
• Right to restriction of processing – to limit how we use your data in some situations.
• Right to data portability – to receive your data in a structured, commonly used and machine-readable format.
• Right to object – to processing based on legitimate interests, and at any time to processing for direct marketing.
• Right to withdraw consent – where processing is based on your consent, at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us using the details in section 1. We may need to verify your identity before fulfilling your request.

10. Security of your data

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access – including encrypted connections (HTTPS) on our websites, card details entered only on the payment provider’s page and never on our servers, access to personal data limited to the people who need it, and regular updates and monitoring of our systems. No system can be completely secure, but we strive to protect your data to the best of our ability.

11. Children’s data

Our services are not directed at children under 16, and we do not knowingly collect personal data directly from children. For crew lists and legal requirements, we may receive information about minors travelling as part of your charter crew (for example names and dates of birth) via the main contracting adult. This data is used only to meet legal and charter obligations.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices, legal requirements or services. The updated version is published on this page with a new “Last updated” date. For significant changes, we may also inform you by email where appropriate.

13. Contact and complaints

If you have any questions about this policy or about how we handle your personal data, contact us at info@blackbird-one.com or by post at Blackbird One Ltd., 5 Secretary’s Lane, Gibraltar GX11 1AA.

You also have the right to lodge a complaint with a data protection authority: the Gibraltar Regulatory Authority, which supervises data protection in Gibraltar where we are registered, or the authority in the EU/EEA member state where you live, where you work or where you consider that your rights have been infringed.