Privacy Policy

Last Updated: 2026-02-01

Introduction

Malum Yachting ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website or charter services.

Information We Collect

Website Analytics

This website collects personal data to power our site analytics, including:

• Information about your browser, network, and device
• Web pages you visited prior to coming to this website
• Your IP address
• Clicks, internal links, and pages visited
• Scrolling behavior and searches
• Timestamps

We share this information with Squarespace, our website hosting provider, to learn about site traffic and activity. We use Google Analytics 4 via Google Tag Manager to analyze website traffic and user behavior. This service collects data including page views, session duration, device information, and user interactions. Google Analytics uses cookies to track this information. You can control whether Google Analytics is enabled through our cookie consent banner.

Form Submissions

When you submit information to this website via contact forms or inquiry forms, we collect the data you provide in order to track and respond to your submissions. This may include your name, email address, phone number, and any message or inquiry details you provide.

Contract and Booking Information

When you proceed with a charter booking, we collect and process:

• Contract details and charter agreements
• Electronic signatures via DocuSign
• Payment information and billing details
• Itinerary preferences and planned routes

Guest Preference Forms

When you book a charter with us, we collect detailed personal information via our guest preference form to ensure your safety, comfort, and customized experience. This includes:

• Passport details, nationality, and travel document information
• Dietary requirements, food allergies, and culinary preferences
• Medical conditions, health information, and physical accessibility needs
• Travel itineraries, flight details, and accommodation information
• Emergency contact information
• Personal preferences for meals, beverages, activities, entertainment, and services
• Special occasion details (birthdays, anniversaries, etc.)

How We Use Your Information

We use the collected information to:

• Respond to your inquiries and booking requests
• Process and manage your yacht charter bookings
• Ensure your safety and comfort during the charter
• Customize your onboard experience based on your preferences
• Coordinate with vessel crews, captains, and service providers
• Comply with maritime regulations and safety requirements
• Improve our website and services
• Communicate with you about your bookings or inquiries

How We Share Your Information

We share your information with the following parties as necessary to provide our services:

Service Providers

• Squarespace - Website hosting and form management
• Google Tag Manager and Google Analytics 4 - Website analytics and tracking management
• Google Workspace - Data processing, storage, and form management (Google Sheets, Google Apps Script, Google Drive)
• tawk.to - Chat services (subject to their privacy policy)
• Google Ads - Advertising and conversion tracking (only when advertising consent is granted)
• Ankor - Charter contract template management
• DocuSign - Electronic contract signing and document execution
• Charter Itinerary - Itinerary planning and route management
• mojeRačun 2025 - E-invoice generation and processing as required by Croatian law

Charter-Related Partners

• Vessel crews and captains who will be serving you during your charter
• Yacht owners and operators in our network
• Marina operators and port authorities as required
• Provisioning services, restaurants, and activity providers
• Emergency services if necessary for your safety

We do not sell or rent your personal information to third parties for marketing purposes.

Cookies and Similar Technologies

This website uses cookies and similar technologies, which are small files that download to your device when you visit our website. We use a cookie named "malum_consent" to remember your cookie preferences across pages.

Necessary Cookies

These cookies are always used and allow Squarespace to securely serve this website to you. These are required for the website to function.

Analytics and Performance Cookies

These cookies are used only when you acknowledge our cookie banner and grant Performance consent. When enabled, we use:

• Google Analytics 4 cookies to analyze site traffic and improve our website
• tawk.to cookies to provide chat support services

You can manage these preferences through our cookie banner at any time.

Advertising Cookies

These cookies are used only when you grant Advertising consent through our cookie banner. When enabled, we use Google Ads cookies to measure advertising effectiveness and show relevant ads. These cookies track conversions and ad interactions.

Data Retention

We retain your personal data for the following periods:

• Contact form submissions: 12 months from submission, or until you request deletion
• Guest preference data: For the duration of your charter plus 12 months for customer service purposes, unless you request earlier deletion
• Booking and payment records: As required by applicable tax and accounting regulations (typically 7 years)
• Analytics data: According to Squarespace's data retention policies

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

• Secure data transmission protocols
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

Your Rights

Under applicable data protection laws, including the GDPR, you have the right to:

• Access - Request access to the personal data we hold about you
• Rectification - Request correction of inaccurate or incomplete personal data
• Erasure - Request deletion of your personal data (subject to legal obligations)
• Restriction - Request restriction of processing of your personal data
• Portability - Request transfer of your data to another service provider
• Object - Object to processing of your personal data
• Withdraw Consent - Withdraw consent for data processing where consent was the basis

To exercise any of these rights, please contact us at contact@malumyachting.com.

International Data Transfers

We operate yacht charter services in multiple jurisdictions including Croatia, Italy, Greece, Dubai, and Indonesia. Your personal data may be transferred to and processed in these countries. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us at:

Email: contact@malumyachting.com
Address: Put Vrila 31, 21310 Omiš, Croatia

Supervisory Authority

If you believe we have not addressed your concerns, you have the right to lodge a complaint with the Croatian Data Protection Agency (Agencija za zaštitu osobnih podataka) or your local data protection supervisory authority.

Legal Compliance

As a Croatian company operating within the European Union, we are subject to the General Data Protection Regulation (GDPR) for all personal data processing. This applies regardless of where our services are provided or where our clients are located.