Privacy Notice

Last updated: 15 August 2026

Who is responsible

The controller for personal data processed through https://beforeyoubuyayacht.com is Yacht Advisor FZ-LLC (licence 47028181, registration 0000004080738, Ras Al Khaimah Economic Zone Authority (RAKEZ)), managed by Patric Daccache.

Privacy contact: pd@yacht-advisor.com · +971 58 502 3314

Scope

This notice covers this website, the book list sign-up, the request form for the 93 Questions buyer workbook, the ebook checkout and the technical infrastructure that delivers them. It does not cover third-party websites you reach through links.

Marketing consent is never required to buy the ebook or to download the free workbook.

What data is processed

Book list

First name, email address, marketing consent, the source of the submission, the record status and the date and time it was received.

Workbook request

First name, email address, whether optional marketing consent was given, the resource key of the requested workbook, the source of the submission and the date and time it was received. Marketing consent is not required to receive the workbook.

Checkout and transaction data

The ebook can be paid for with Stripe or with PayPal. The payment form or PayPal flow is operated by the payment service provider you choose. Stripe or PayPal may collect your name, email address, billing address and approximate location, payment method details and fraud and risk signals, and processes these under its own responsibility as a payment service provider. Yacht Advisor FZ-LLC generally receives verified transaction data only: provider and order identifiers, capture or payment-intent identifiers, payer identifier, payment status, amount, currency and limited customer details such as first name and email address, together with a record that you accepted the Terms of Sale and requested immediate delivery. We never receive full card numbers or your PayPal credentials. We additionally store delivery data for your order: the invoice number, whether the delivery and receipt emails were sent, your private download token and download counters.

At checkout you may additionally tick a separate, optional box to receive buyer briefings, listing analysis insights and invitations. That opt-in is verified server-side from the payment provider metadata and stored with your order as evidence, together with the exact version of the wording you agreed to and the date and time it was given. It is never pre-ticked, it is not needed to complete the purchase with either provider, and buyers who purchased before this option existed remain opted out.

Optional buyer questions after purchase

After a completed purchase you may voluntarily answer a short set of questions about your situation: how you would describe yourself, where you are in the process, your expected timeframe, the size range you are interested in, an optional link to a listing, and whether you would like to be contacted about independent advisory support. These answers are optional, are linked to your order for context and do not affect your access to the book. A listing link is stored only if you enter one, and it is accepted only as a normal http or https web address. If you tick the advisory box, that specific request is recorded so Patric Daccache can contact you about that conversation and nothing else. These answers are processed by our hosting and database providers listed below, and are never shared with brokers or any other party for their own marketing.

Which edition you already own

The workbook form contains an optional question about which edition of the book you already have (Amazon hardcover, direct EPUB, or none yet). It is stored with your workbook request purely so the material can be kept relevant.

Amazon hardcover readers

The hardcover is sold by Amazon under Amazon’s own terms and privacy practices. Amazon does not provide this site with buyer identities, email addresses or any marketing permission. A hardcover reader appears in our records only if they independently submit this site’s workbook form or another form here.

Technical delivery and security logs

Hosting, content delivery and database providers may process IP address, user agent, requested URL, request time and diagnostic or security data in order to deliver the site and protect it from abuse.

Analytics (only after you opt in)

If you accept analytics, Google Analytics may process the page URL, referrer and traffic-source classification, device and browser information, an approximate location derived from IP address, and interaction events such as button clicks and form completions. Google receives this data as a processor and may itself process personal data such as your IP address and online identifiers; we do not claim otherwise. No analytics data is processed if you reject or do not decide.

Purposes and legal bases

• Delivering the requested workbook and responding to your request: performance of the requested service, or steps taken at your request.
• Book launch and yacht-buying marketing messages: your consent only.
• Optional buyer questions answered after purchase, and any advisory contact you request there: your consent and steps taken at your request.
• Processing your purchase, releasing the download and keeping proof of the accepted Terms of Sale and immediate-delivery request: performance of the purchase contract.
• Keeping accounting and tax records of transactions: compliance with legal obligations.
• Analytics: your consent only.
• Security, abuse and fraud prevention, and establishing or defending legal claims: our legitimate interests, and legal obligations where applicable.

Who receives the data

• Lovable and its infrastructure providers, for hosting and application delivery.
• Cloudflare, for content delivery and security where used by the production domain.
• Supabase and its subprocessors, for the database and private file storage.
• Stripe and PayPal, as the payment service providers for the ebook checkout, each for the payment you actually make through them.
• Resend, for the delivery and receipt emails for your order.
• Google Analytics, only after you have accepted analytics.
• Professional advisers and authorities, only where legally required.

Data may be processed outside your country. Where a transfer requires safeguards, these rely on the contractual or other lawful mechanisms offered by the providers concerned. We do not state a specific storage region unless it has been verified.

How long data is kept

• Marketing records: until consent is withdrawn or the address becomes unusable, subject to keeping the minimum record needed to evidence consent or comply with law.
• Workbook request records: only as long as needed to operate and secure the resource service and to establish or defend legal claims.
• Security and server logs: according to the operational retention periods of the hosting, CDN and database providers.
• Analytics: according to the retention controls configured in Google Analytics.
• Transaction and accounting records: for the retention period required by applicable accounting and tax law.
• Optional buyer answers and any listing link: until you ask us to delete them, or until they are no longer relevant to the purpose above.
• Consent evidence: for as long as needed to demonstrate that a consent was validly given, and for the limitation period for related claims.

Your rights

Subject to applicable law you may request access to your data, correction, deletion, restriction of or objection to processing, and portability where applicable. You may withdraw consent at any time, which does not affect processing carried out before withdrawal. You may also complain to the competent data protection authority.

Send requests to pd@yacht-advisor.com. We may need to verify your identity before disclosing or deleting data.

Cookies and local storage

• A strictly necessary local preference is stored on your device to record your analytics choice. It is not sent to any server.
• Google Analytics is not loaded before you give affirmative consent.
• If you accept, Google Analytics may set the cookies _ga and _ga_<container-id>, which distinguish visitors and maintain session state for measurement. Google’s default maximum lifetime for these cookies is two years, subject to configuration or earlier deletion.
• No advertising or cross-site advertising cookies are used.

You can reopen Cookie settings here or from the footer at any time and withdraw consent. On withdrawal, analytics stops sending data and first-party _ga cookies for this site are deleted where technically possible.

Automated decision-making

There is no automated decision-making or profiling that produces legal or similarly significant effects.

Children

This site is intended for professional and adult audiences and is not directed at children under 18.

Security

The workbook and ebook files are stored in private storage and are never published at a permanent public address. Downloads are released through short-lived signed links. Stored lead records are not readable through the public website.

Applicable data protection law

Processing is carried out with reference to UAE Federal Decree-Law No. 45 of 2021 concerning the protection of personal data. Where the EU or UK General Data Protection Regulation applies to a particular visitor or processing activity, the rights and legal bases described above apply accordingly. We do not claim that the GDPR applies to every visitor.

Changes and contact

This notice may be updated when the site or its providers change; the date at the top shows the current version. Questions: pd@yacht-advisor.com.