The short version: We collect only what's needed to process your booking. We don't sell your data. We use Netlify and Stripe to process forms and payments — both are GDPR compliant. You have the right to access, correct, or delete your data at any time.
Zamá Charters is operated by Cristian Ortiz Suárez, a sole trader (enskild firma) registered in Sweden. We are the data controller for all personal data collected through zamacharters.com.
Contact: bookings@zamacharters.com
When you submit a booking request or contact us, we collect:
| Data | Why We Need It |
|---|---|
| Full name | To identify your booking and communicate with you |
| Email address | To send booking confirmations and pre-trip details |
| Phone / WhatsApp number | For direct communication about your charter |
| Charter details (date, experience, group size) | To fulfill your booking |
| Special requests | To prepare your experience appropriately |
| Country of origin | For booking coordination purposes |
When you visit zamacharters.com, standard web server logs may collect your IP address, browser type, pages visited, and time of visit. This data is held by Netlify (our hosting provider) and is used for security and performance monitoring. We also use Google Analytics 4 to understand how visitors use the site (pages visited, approximate location, device and browser type, and interaction events such as clicks on our booking and WhatsApp buttons). Google Analytics sets cookies and processes this data on our behalf under Google’s privacy policy. We also use Google Ads conversion measurement to see which of our ads lead to booking requests, deposits or WhatsApp messages. Both run only if you accept them in our cookie banner; until then Google receives no cookies from us, only cookieless, anonymised signals (Google Consent Mode).
Payment card details are processed entirely by Stripe. Zamá Charters never sees, stores, or handles your card number, CVV, or banking details. Stripe stores payment data on PCI DSS-compliant infrastructure.
We use your personal data only for the following purposes:
We do not use your data for: unsolicited marketing emails, third-party advertising, data brokering, or profiling.
After your charter, we may send a single follow-up email asking for a review. You can opt out of this by replying to any email with "unsubscribe" or contacting us directly. We do not send newsletters or marketing emails without your explicit consent.
We use the following third-party services that may process your data:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Netlify | Website hosting and form collection | netlify.com/privacy |
| Stripe | Payment processing | stripe.com/privacy |
| Zoho Mail | Email communications | zoho.com/privacy |
| WhatsApp (Meta) | Direct client communication | whatsapp.com/legal |
| Google Analytics 4 | Website usage analytics (only with your consent) | Google Privacy Policy |
| Microsoft Clarity | Anonymous heatmaps and session replays showing how pages are used, with form fields masked (only with your consent) | Microsoft Privacy Statement |
| Google Ads | Measuring which ads lead to bookings (only with your consent) | Google Privacy Policy |
| Google Fonts | Website typography | Google Privacy Policy |
Netlify and Stripe are GDPR-compliant and operate under EU Standard Contractual Clauses for data transfers. No personal data is sold or shared with third parties for marketing purposes.
Booking form submissions are stored on Netlify's servers (US-based, GDPR-compliant infrastructure). Booking records are retained for a minimum of 7 years as required by Swedish accounting law (Bokföringslagen). After this period, records are deleted.
Zamá Circle (optional). If you join the Zamá Circle on our website, we store your name, email, and, if you give them, your next occasion, rough date and preferred city, in Netlify Forms. We use them only to email you about your next trip with us (a few emails a year), on the basis of your consent. You can unsubscribe or ask us to delete them at any time by replying to any email or writing to bookings@zamacharters.com; we delete Circle details after 24 months without contact.
Email communications are retained for the duration of the business relationship and up to 3 years thereafter. WhatsApp messages are subject to Meta's retention policies.
As a data subject under the EU General Data Protection Regulation (GDPR), you have the following rights:
To exercise any of these rights, contact us at bookings@zamacharters.com. We will respond within 30 days.
If you are unsatisfied with our response, you have the right to lodge a complaint with Integritetsskyddsmyndigheten (IMY), Sweden's data protection authority, at imy.se.
Zamá Charters uses the following cookies and similar technologies:
_ga, _ga_*, up to 2 years): measure site traffic and how visitors use our pages. Set only if you accept statistics._clck, _clsk, up to 1 year): heatmaps and session replays of how visitors move through our pages, with text typed into forms masked. Set only if you accept statistics._gcl_au, _gcl_aw, up to 90 days): tell us which Google ad led to a booking request, deposit or WhatsApp message. Set only if you accept ad measurement.When you first visit, a banner asks for your choice. Reject all and Accept all are equally easy, and you can choose each category separately. We store your choice in your browser for 12 months. You can change or withdraw it at any time: open cookie settings, or use the “Cookies” link at the bottom of every page.
We do not use the Facebook/Meta Pixel, remarketing or personalised advertising, and we do not sell your data.
Zamá Charters does not knowingly collect personal data from children under 16 years of age without parental consent. Our booking services are intended for adults. If you are a parent or guardian and believe your child has submitted personal data to us, contact us immediately at bookings@zamacharters.com and we will delete the data promptly.
Cristian Ortiz Suárez / Zamá Charters
Malmö, Sweden
Email: bookings@zamacharters.com
WhatsApp: +52 55 6137 0247 (main) · +46 76 428 89 52