Privacy Policy
Last updated: March 2026
BoatLocal (“we”, “our”, or “us”) is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable Dutch and European privacy laws. This Privacy Policy explains how we collect, use, store and protect your personal information when you use our platform at boatlocal.nl.
1. Who We Are
BoatLocal is an online marketplace connecting customers with boat tour operators in Amsterdam, Netherlands. Our registered address is Amsterdam, Netherlands. For privacy-related enquiries, contact us at: privacy@boatlocal.nl
2. Data We Collect
We may collect the following categories of personal data:
- Account information: Name, email address, password (hashed)
- Booking data: Date, time, number of guests, selected cruise, payment reference
- Contact data: Messages sent through our platform or WhatsApp
- Device & usage data: IP address, browser type, pages visited, session duration
- Cookies: See the Cookies section below
We do not store full payment card details — payments are processed securely via Stripe, which has its own privacy policy.
3. How We Use Your Data
- To process and confirm bookings made through our platform
- To communicate with you about your booking (confirmation emails, reminders)
- To provide customer support
- To improve our website and services through anonymised analytics
- To comply with legal obligations (e.g. tax and accounting requirements)
- To send marketing communications only if you have opted in
Our legal basis for processing is: performance of a contract (bookings), legitimate interests (improving services), and consent(marketing).
4. Data Retention
We retain booking data for 7 years to comply with Dutch tax regulations. Account data is retained until you request deletion. Analytics data is anonymised after 14 months. You may request deletion of your data at any time (see Your Rights below).
5. Your Rights (GDPR)
Under the GDPR, you have the right to:
- Access your personal data (Article 15)
- Rectification of inaccurate data (Article 16)
- Erasure (“right to be forgotten”) (Article 17)
- Restriction of processing (Article 18)
- Data portability (Article 20)
- Object to processing for direct marketing (Article 21)
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at privacy@boatlocal.nl. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
6. Sharing Your Data
We share data with third parties only where necessary:
- Boat operators: Your booking details are shared with the operator you book with
- FareHarbor: Booking system used by our partner operators (their own privacy policy applies)
- Stripe: Payment processing (PCI-DSS compliant)
- Supabase: Database and authentication infrastructure (EU-hosted)
- Vercel: Hosting infrastructure
We do not sell your personal data to third parties.
7. Cookies
We use the following types of cookies:
- Strictly necessary: Session cookies required for the platform to function
- Analytics: Anonymous usage data to improve the site (can be disabled)
- Preferences: Remember your language and display settings
You can manage or disable cookies in your browser settings. Disabling cookies may affect the functionality of some features.
8. Contact
For any questions about this Privacy Policy or how we handle your data, contact: