Last updated 14 October 2026

Privacy policy

Who is responsible?

Doxa Collection Ltd (NI662185), the provider of Boat Rental Sites, is responsible for the personal information described here. Registered office: 3 Red Fort Drive, Carrickfergus, Antrim, United Kingdom, BT38 9EN. Email hello@boatrentalsites.com with privacy questions or rights requests.

Information you provide

Our forms collect your name, business name, country, fleet size, work email and enquiry type. Website enquiries may include a selected mockup, website plan and additional languages; SEO and Ads enquiries may include search priorities, plan interest, current campaigns and an advertising budget. You can also provide an existing website or listing, plan interest, preferred request type and a note. Campaign parameters in the URL and the button or section used to reach the form help identify the source and context of your enquiry. Campaign values travel in links and the form submission; they are not saved in an attribution cookie.

Please share business information relevant to your request, rather than payment details, passwords or sensitive guest information. No checkout is active and this form does not collect card details. You can contact us by email instead.

Why we use it and our lawful bases

We use enquiry information to answer your request, prepare the requested mockup or call, and discuss an agreed website or optional marketing service. Where you are asking about a contract with you personally, such as a sole trader, our basis is steps taken at your request before entering a contract and then performance of that contract. For contacts acting on behalf of a company, our basis is our legitimate interest in responding to relevant business enquiries and managing that business relationship.

Our legitimate interest in detecting spam and protecting the website covers necessary security processing. Contractual service records are used to supply the agreed service; financial records are kept where required by legal obligations. Optional analytics relies on your cookie consent. Submitting an enquiry does not subscribe you to a newsletter or grant advertising consent.

Delivery, hosting and access

Hostinger hosts this website and the hello@boatrentalsites.com mailbox. Enquiries are sent to our Cloudflare Worker, with Cloudflare Turnstile for spam prevention. Resend sends the enquiry to hello@boatrentalsites.com and peter@digitaldeckhand.com, and sends a confirmation quoting your message to your email address. This form does not subscribe you to marketing.

Cloudflare D1 records the timestamp, delivery status, enquiry content and context, IP address and browser/request information. Blocked spam records contain security metadata rather than your contact details or message. Your IP address is not included in the enquiry email. Malformed requests and requests from unapproved websites may be rejected before a database record is created.

Cloudflare KV stores IP-based rate-limit timestamps with a one-hour expiry. Workers Logs records operational request information and errors; our Worker does not deliberately write your form content to these logs. Resend processes the email content and delivery records. Email open and click tracking are not enabled. Hostinger also processes connection and server information needed to deliver and protect the website and mailbox.

Peter and authorised development or support personnel access information needed to answer enquiries and maintain the service. The form Worker, database, rate-limit storage and Turnstile widget are in Peter’s Cloudflare account. Peter and Andrei have administrator access to the Digital Deckhand Resend team. Access is limited to the work required for the service.

International processing

Our form database has United States jurisdiction and its primary region is Western North America. Resend sends emails from North Virginia, United States. Cloudflare’s other services, our hosting and email providers, and their authorised subprocessors may process information in other countries. The database’s US setting does not make all processing US-only.

We use providers’ data processing terms for information handled on our behalf. Their published terms set out safeguards for relevant international transfers, including standard contractual clauses and the UK addendum where applicable: Cloudflare, Resend and Hostinger. Contact hello@boatrentalsites.com for information about the safeguards relevant to your enquiry.

Retention and deletion

Unconverted enquiries and correspondence: normally 12 months after the last substantive enquiry discussion, then deleted or anonymised unless there is a documented ongoing need. An authorised team member reviews both enquiry inboxes monthly. This mailbox review is separate from the form database cleanup.
Active raw D1 submissions: a daily cleanup at 03:00 UTC deletes records older than 30 days. A record normally remains for about 30–31 days, depending on the time it was submitted.
KV rate-limit timestamps expire after one hour. Cloudflare Workers Logs on our Free plan retain operational logs for three days. Resend retains email data and delivery logs for 30 days on our Free plan.
Database recovery history is separate from active records. Our D1 Time Travel recovery window is seven days, so recoverable copies may outlast active deletion by up to seven days. Separate exports have restricted access and a defined short expiry. Restored records are brought back into the deletion schedule.
Routine customer service correspondence: for the active service and normally 12 months after it ends. Relevant records needed for disputes or legal obligations are restricted and retained separately for the justified period.
Invoices, contracts and supporting accounting records: normally six years from the end of the company financial year they relate to, or longer where required. This does not mean every raw enquiry is kept for six years.
Your cookie preference: local storage for up to 180 days, unless you replace it sooner using Cookie settings.

We keep information only for the purposes described here. A legal hold is limited to relevant records and reviewed; it does not extend routine retention of all enquiries. Provider-controlled hosting and security records follow the provider’s service and security retention rules, described in its data processing terms.

Customer-site exit: arrange any supplied-content or enquiry-data export before the service end. The hosted site and working customer-site files are removed at that date; there is no post-exit website recovery window. Residual backup copies expire according to the retention arrangements recorded for the customer service. Necessary billing and legal records are retained separately.

Optional analytics and advertising

This site uses a separate Boat Rental Sites Google Analytics 4 property, measurement ID G-ZDKGZSZ650. The Google tag loads only after you accept analytics. Google Analytics processes browser and device information, pseudonymous browser identifiers, page views and approved event labels to help us understand visits and enquiries. Google also receives connection information, including an IP address used to derive approximate location; GA4 does not log or store that IP address. Google may process information outside the UK, using the safeguards described in its data processing terms and standard contractual clauses.

Our tag limits Analytics cookies to 60 days without renewal on activity, disables Google Signals and advertising personalisation, and sends a page URL containing only permitted campaign labels plus a referrer without query values. Event and user retention in the property are set to two months; standard aggregate reports follow Google's separate retention rules. You can reject analytics or withdraw consent in Cookie settings. We do not sell this information or link this property to advertising platforms.

Our own events exclude your name, email, business name, website link and free-text note. Automatic form measurement is disabled; only the confirmed successful form response counts as generate_lead. There is no advertising pixel, enhanced conversion collection or user ID. Google advertising consent remains denied in this direct Analytics setup.

Your rights

You can ask us for access, correction, deletion or restriction, and for portability where it applies. You can object to processing based on legitimate interests, including direct marketing. You can withdraw optional cookie consent through Cookie settings. These rights depend on the applicable basis and circumstances; we may need proportionate information to verify your identity. We aim to respond within one month, explaining any permitted extension.

You can complain to the UK Information Commissioner’s Office or another relevant supervisory authority. No automated decision with legal or similarly significant effects is made by this lead form. We update this notice when the actual processing changes and show its review date above.