Privacy Policy

The controller of your personal data is the company that operates HopABoat. The full company details are in the Legal Notice.

For any question about this policy or about your data, write to privacy@hopaboat.com.

Boat owners are independent businesses. Once they receive your booking details, they are separately responsible for how they use them to carry out the trip.

Account data. When you create an account we store your name, email address, phone number if you give one, your chosen language and a protected (hashed) form of your password. We never store the password itself.

Sign-in with Google or Apple. If you sign in this way, we receive from the provider an identifier for your account with them, your email address and, where they provide it, your name. We do not receive your password for that service.

Booking data. For each booking we store the trip, the date and time, the number of guests, the name and mobile number of the lead guest, any note you write for the skipper, the price and the status of the booking, including cancellations and the reasons given.

Boat owner data. If you list a boat, we store your business or boat name, your phone number, the description of yourself that you provide, and the content of your listings: texts, photos, schedules, meeting points and prices. We also keep records of the bookings you receive and of the commission that is due to HopABoat.

Reviews. If you review a trip, we store your rating and comment and publish them on the trip page together with your name.

Messages to us. If you contact our support, we keep the correspondence.

Technical data. Our servers automatically log technical information such as the IP address, the type of browser and device, the pages requested and the time of access. We also use a small number of strictly necessary cookies, described below.

We do not collect payment card or bank details. If you pay by card, your payment data is processed by our payment provider Paddle; we receive only the payment status and a transaction reference.

• To create and manage your account and to process bookings, cancellations and reviews. Legal basis: performance of the contract with you, namely our terms of use.
• To send you the emails and text messages that belong to a booking: confirmations, answers to requests, cancellations and reminders. Legal basis: performance of the contract.
• To calculate and collect the commission that boat owners owe to HopABoat, and to keep business records. Legal basis: performance of the contract with the owner and our legal obligations.
• To review listings, answer support requests and resolve complaints between guests and owners. Legal basis: performance of the contract and our legitimate interest in a reliable marketplace.
• To keep the service secure, to prevent misuse and fraud and to find and fix faults. Legal basis: our legitimate interest in a safe and working service.
• To comply with laws that apply to us, for example accounting and tax rules or lawful requests from authorities. Legal basis: legal obligation.

We do not use your data for automated decisions that have legal effects on you, and we do not sell personal data.

The boat owner. When you book or send a request, the owner of that trip receives the lead guest’s name and mobile number, the number of guests and your note. They need this to run the trip and to reach you on the day.

The guest. Listings show the owner’s business or boat name and the content of the listing. Once a booking is confirmed, the guest also sees the owner’s phone number.

The public. Listings and reviews are public. A review is shown with the reviewer’s name.

Service providers. We use carefully chosen companies that process data on our behalf and only on our instructions, in these categories: website and database hosting, email delivery, text message (SMS) delivery, storage of files and photos, and sign-in providers (Google and Apple, if you choose to sign in with them).

Authorities and legal advisers. We disclose data where the law requires it or where it is necessary to establish, exercise or defend legal claims.

If HopABoat or its business is transferred to another company, your data may pass to that company under the terms of this policy.

Some of our service providers may process data on servers outside Montenegro and outside the country where you live. Where this happens, we make sure that the transfer is permitted under the applicable data protection law and that your data is protected by appropriate safeguards, such as contractual commitments by the recipient. You can ask us for more information at privacy@hopaboat.com.

• Account data: for as long as you have an account. If you ask us to delete the account, we delete or anonymise it, except for what we must keep under the points below.
• Booking and commission records: for the period required by the accounting and tax rules that apply to us, and for as long as claims arising from a booking can be made.
• Listings: until the owner deletes them or closes the account.
• Reviews: for as long as the trip is listed, unless you ask us to remove yours.
• Support correspondence and technical logs: for a limited period, only as long as needed to answer you, keep the service secure and investigate faults.
• The sign-in cookie expires after 30 days; links for resetting a password expire after two hours.

Subject to the conditions set by the applicable data protection law, you have the right to:

• access the personal data we hold about you and receive a copy of it;
• have incorrect or incomplete data corrected – much of it you can change yourself in your account settings;
• have your data deleted when we no longer have a reason to keep it;
• object to processing that is based on our legitimate interests, and ask us to restrict processing;
• receive the data you gave us in a commonly used, machine-readable format (portability);
• withdraw any consent you have given, with effect for the future.

To use any of these rights, write to privacy@hopaboat.com from the email address of your account. We may ask for more information to confirm your identity. We answer within the period set by law.

You also have the right to lodge a complaint with the data protection authority responsible for you.

HopABoat uses only strictly necessary cookies: one that keeps you signed in, one that remembers your language, one that remembers your display currency and a short-lived one that protects sign-in with Google or Apple. We do not use advertising or analytics cookies, which is why you do not see a consent banner. The Cookies page lists each cookie and how long it lasts.

HopABoat accounts are intended for adults. We do not knowingly create accounts for children. Children can of course take part in trips booked by an adult; we do not ask for their names or other details. If you believe a child has created an account, write to privacy@hopaboat.com and we will delete it.

We update this policy when the service or the law changes. The date at the top shows the latest version. If a change significantly affects how we use your data, we will tell you by email or with a notice on the website before it takes effect.

Questions, requests and complaints about personal data: privacy@hopaboat.com.