Privacy Policy

Who is responsible for your data

BoatNow is operated by ΒΡΑΤΖΙΑΣ ΑΘΑΝΑΣΙΟΣ (Sole Proprietorship, Greece), VAT No 156307235, ΠΑΠΑΠΕΤΡΟΥ 25, ΤΚ:55131, ΚΑΛΑΜΑΡΙΑ, Greece. ΒΡΑΤΖΙΑΣ ΑΘΑΝΑΣΙΟΣ is the data controller for the personal data described on this page and can be reached at info@boatnow.gr.

Information we collect

Account details you provide (name, email, phone), booking information, and technical data such as IP address and device type.

How we use it

To operate the marketplace: process bookings, communicate with you and the boat owner, prevent fraud, and improve the service.

Sharing

We share booking details with the relevant boat owner and with Stripe for payment processing. We do not sell your data.

Service providers we use

We use the following providers to run BoatNow. They process data only on our instructions and only for the purposes below:

• Lovable Cloud (Supabase infrastructure) — website hosting, database, account authentication and file storage.
• Cloudflare — content delivery, traffic protection and abuse prevention for boatnow.gr.
• Stripe — payment processing and payouts to boat owners. Card details are entered on Stripe's own hosted pages and are never received or stored by BoatNow. If you are signed in and choose, on Stripe's payment page, to save a payment method for future bookings, Stripe stores those payment credentials on its own systems; BoatNow holds only a Stripe customer identifier linked to your account, so Stripe can show you your saved payment methods next time. The legal basis is performance of your booking contract, and — for keeping a payment method for future use — the explicit consent you give on Stripe's page. A saved payment method is kept until you remove it on Stripe's payment page or your BoatNow account is deleted.
• Meta Platforms (WhatsApp Business Cloud API) — operational WhatsApp messages to boat owners and suppliers about their bookings.
• Twilio — SMS messages to boat owners and suppliers, used as a fallback when WhatsApp delivery fails.
• Resend — transactional email such as booking confirmations and reminders.
• Open-Meteo — weather and sea-condition forecasts. Receives your IP address and the map coordinates requested when weather is displayed.
• OpenStreetMap / CARTO — map tiles for the area map and live weather map. Receives your IP address and the tiles requested.

Some of these providers may process data outside the European Economic Area. Where that happens, transfers rely on the safeguards offered by those providers, such as the European Commission's Standard Contractual Clauses. We do not load fonts, scripts or stylesheets from Google's servers; website fonts are served from boatnow.gr itself.

Analytics and advertising

We do not use Google Analytics, Google Tag Manager, Meta Pixel, advertising or retargeting tags, or session-recording tools. We do not sell or share personal data with advertising networks.

Partner referral attribution

BoatNow works with referral partners such as hotels and agencies. If you arrive through a partner link that contains a referral reference, we store an item called bn_ref in your browser's local storage for up to 30 days. It contains the partner reference and the time it was recorded, so that the correct partner receives the commission agreed with us if you go on to book. It is not used for advertising, ad targeting or cross-site tracking, and it is not shared with advertising networks. If you do not use a partner link, it is never created.

We make no claim here that this storage is exempt from consent requirements. Whether it requires prior consent under Greek and EU ePrivacy rules is subject to a separate legal and consent assessment that is currently in progress. If consent is found to be required, we will introduce a consent mechanism for it and update this page before continuing to rely on it.

Your rights

Under the GDPR you can request access, correction, deletion, restriction or portability of your data, and you can object to certain processing. Email info@boatnow.gr and we will respond within one month. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα).

Cookies

We use strictly necessary cookies for security and to keep you signed in, plus limited browser storage for functional purposes. We set no analytics or advertising cookies. The complete, itemised list with purposes, lifetimes and categories is in our Cookie Policy.