Privacy Notice

1. Controller and contact

The public brand is YachtsLifeMaster, with its business location in Cancún, Mexico. The controller’s legal identity and address remain pending above. The public contact number is +52 998 144 8495. The address contact@yachtslifemastercancun.yachts is provisional and must not be presented as an actual privacy contact.

2. Information this website collects

A booking request asks for your name, email, phone/WhatsApp number with international prefix, yacht, Cancún date and time, duration, party size and destination or help choosing a route. A comment is optional. The selected language is recorded, and a reference, creation date, request status and, where relevant, hold expiration are generated. We do not request the other guests’ names.

To prevent duplicates and manage notifications, we retain a submission identifier, a fingerprint of the request data and message records: recipient, subject, content, status, attempts and delivery errors. The owner can read your contact details and comment in the protected panel and booking notification.

The form does not request bank details, cards, identification documents, payment receipts or sensitive information. Do not include health or other sensitive information in the comment. Payment is agreed directly with the owner. In the private panel, the owner records quote versions and their conditions, currency, deposit, balance and due dates, payment method instructions, and amounts, dates and references for verified payments; demo payments are marked as simulated. Financial details are retained in the private panel; automated emails in this phase contain no amounts or payment instructions.

3. How we use information

Necessary purposes are to review availability and capacity, handle and follow up on your request, contact you, administer holds and expirations, and communicate receipt, changes, confirmation or cancellation. Information also helps prevent duplicate submissions and protect access to the owner panel.

This demo does not include marketing subscriptions, profiling or data sales. The comment can be left blank. Without the required information, a request cannot be processed through the form.

4. Access, email and external links

Requests and messages are stored in PostgreSQL and accessed through the owner’s protected panel. In preview mode, emails stay in a private inbox and are not sent through an external provider. Test mode with sending redirects them to a controlled recipient. If Resend is enabled for real delivery, it will process the information needed to deliver messages to the customer and owner. The owner must review contracts, processing countries and applicable transfers before enabling that service.

WhatsApp and Instagram links are optional and lead to external services governed by their own privacy notices. WhatsApp opens a prefilled message with the selected yacht and may include your reference from the request confirmation screen; you decide whether to send it. No tracking widgets from these services are embedded in this demo.

Production hosting and its technical logs —including Vercel if retained as a provider— must be confirmed by the owner. The server receives the connection address to limit requests and may generate operational or error logs; an IP address is not stored as a booking field.

5. Preferences and sessions

Your Español/Português/English choice is stored in the browser’s local storage (ylm-lang) and in a preference cookie with the same name that lasts one year. This remembers your language; you can delete it through browser settings or change it with the selector. A first visit without a preference uses Mexican Spanish, while explicit Spanish links retain Spanish.

Owner access uses an HttpOnly session cookie (ylm_session) lasting eight hours and a protected session reference in the database. No advertising cookies or third-party analytics tools are integrated in the current code; the owner must check the hosting configuration before publishing the final notice.

6. Retention and security

The demo retains requests and messages until they are deleted from the database; booking deletion is not automated. Before using real data, the owner must define and document the necessary retention period, blocking/deletion criteria and backups. Panel access requires authentication, and server secrets are not included in the public website.

7. Privacy rights and requests

You may request access, rectification, cancellation or opposition (ARCO), withdraw consent, or limit use and disclosure where applicable. The owner must complete the actual privacy email, identity verification procedure and response periods. While this draft is under review, the public phone number can be used to ask the owner for the privacy contact; it does not replace an approved final procedure. Do not send identification or sensitive information to a provisional email.

8. Updates and booking conditions

The final version and subsequent changes will be made available on this page; the date and notification method must be approved by the owner. Spanish is the draft’s base text, and this English version is a translation for review.

This notice covers privacy and does not set deposit amounts, penalties, refunds or cancellation policies. Those conditions must be confirmed directly by the owner before payment. In the demo, a request does not confirm a date: confirmation is recorded when the owner confirms the booking in the panel.