Privacy Policy

1. Who We Are

Zamá Charters is operated by Cristian Ortiz Suárez, a sole trader (enskild firma) registered in Sweden. We are the data controller for all personal data collected through zamacharters.com.

Contact: bookings@zamacharters.com

2. What Data We Collect

Data You Provide Directly

When you submit a booking request or contact us, we collect:

Data	Why We Need It
Full name	To identify your booking and communicate with you
Email address	To send booking confirmations and pre-trip details
Phone / WhatsApp number	For direct communication about your charter
Charter details (date, experience, group size)	To fulfill your booking
Special requests	To prepare your experience appropriately
Country of origin	For booking coordination purposes

Data Collected Automatically

When you visit zamacharters.com, standard web server logs may collect your IP address, browser type, pages visited, and time of visit. This data is held by Netlify (our hosting provider) and is used for security and performance monitoring. We also use Google Analytics 4 to understand how visitors use the site (pages visited, approximate location, device and browser type, and interaction events such as clicks on our booking and WhatsApp buttons). Google Analytics sets cookies and processes this data on our behalf under Google’s privacy policy.

Payment Data

Payment card details are processed entirely by Stripe. Zamá Charters never sees, stores, or handles your card number, CVV, or banking details. Stripe stores payment data on PCI DSS-compliant infrastructure.

3. How We Use Your Data

We use your personal data only for the following purposes:

• Booking fulfillment — confirming, managing, and coordinating your charter
• Pre-trip communication — sending marina location, captain details, and what to bring
• Payment processing — collecting deposits and balances via Stripe
• Customer support — responding to questions before, during, and after your trip
• Legal compliance — retaining records as required by Swedish tax law

We do not use your data for: unsolicited marketing emails, third-party advertising, data brokering, or profiling.

Follow-Up Communications

After your charter, we may send a single follow-up email asking for a review. You can opt out of this by replying to any email with "unsubscribe" or contacting us directly. We do not send newsletters or marketing emails without your explicit consent.

4. Third-Party Services

We use the following third-party services that may process your data:

Service	Purpose	Privacy Policy
Netlify	Website hosting and form collection	netlify.com/privacy
Stripe	Payment processing	stripe.com/privacy
Zoho Mail	Email communications	zoho.com/privacy
WhatsApp (Meta)	Direct client communication	whatsapp.com/legal
Google Analytics 4	Website usage analytics	Google Privacy Policy
Google Fonts	Website typography	Google Privacy Policy

Netlify and Stripe are GDPR-compliant and operate under EU Standard Contractual Clauses for data transfers. No personal data is sold or shared with third parties for marketing purposes.

5. Data Storage & Retention

Booking form submissions are stored on Netlify's servers (US-based, GDPR-compliant infrastructure). Booking records are retained for a minimum of 7 years as required by Swedish accounting law (Bokföringslagen). After this period, records are deleted.

Email communications are retained for the duration of the business relationship and up to 3 years thereafter. WhatsApp messages are subject to Meta's retention policies.

6. Your Rights Under GDPR

As a data subject under the EU General Data Protection Regulation (GDPR), you have the following rights:

• Right of access — you can request a copy of all personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your data (subject to legal retention requirements)
• Right to restriction — you can ask us to limit processing of your data
• Right to data portability — you can request your data in a machine-readable format
• Right to object — you can object to processing for direct marketing at any time

To exercise any of these rights, contact us at bookings@zamacharters.com. We will respond within 30 days.

If you are unsatisfied with our response, you have the right to lodge a complaint with Integritetsskyddsmyndigheten (IMY), Sweden's data protection authority, at imy.se.

7. Cookies

Zamá Charters uses the following cookies and similar technologies:

• Functional cookies — used by Netlify for form spam prevention and session management. These are necessary for the website to function and cannot be disabled.
• Stripe cookies — placed when you access the payment flow. These are required for secure payment processing.
• Google Analytics 4 cookies — used to measure site traffic and how visitors interact with our pages. You can opt out at any time using the Google Analytics opt-out browser add-on or by blocking cookies in your browser settings.

We do not use Facebook Pixel or any third-party advertising or retargeting technology.

8. Children's Privacy

Zamá Charters does not knowingly collect personal data from children under 16 years of age without parental consent. Our booking services are intended for adults. If you are a parent or guardian and believe your child has submitted personal data to us, contact us immediately at bookings@zamacharters.com and we will delete the data promptly.

9. Contact & Data Requests