1. Who we are
This policy explains how Ultimate Yachts (UK) Ltd, trading as Ultimate Indonesian Yachts (“UIY”, “we”, “us” or “our”), collects and uses personal information. We are the controller of the personal information described in this policy.
We are a private limited company registered in England and Wales under company number 09489786, with our registered office at Castlebrook House, Castlebrook, Compton Dundon, Somerton, England, TA11 6PR.
If you have any questions about this policy or your information, please contact us at [email protected].
2. The information we collect
When you make an enquiry, we collect your name, email address and, if you choose to give it, your phone number, together with anything you tell us about the charter you have in mind.
When your charter is confirmed, we collect the following for each guest in your party:
- passport details;
- food and drink preferences, including any dietary requirements or allergies;
- diving certification and experience; and
- medical information relevant to the charter and to any diving or other activities.
When you visit our website, we and our service providers collect technical information such as your IP address, browser type and the pages you visit. See section 11 for more on cookies.
3. How we use your information, and our legal basis
To respond to your enquiry and advise you on a charter. We do this because it is necessary to take the steps you have asked us to take before booking, and to provide our services to you.
To arrange and confirm your charter, including passing guest details to the Operator of the yacht. We do this because it is necessary to provide the services you have asked us to provide. Where the lead booker gives us information about other guests, we rely on our legitimate interest in arranging the charter that has been booked for them.
To keep booking, invoice and payment records. We do this to meet our legal obligations, including for tax and accounting.
To send you our newsletter and occasional news about yachts and destinations. We do this with your consent. Alternatively, if you are a client or have enquired with us, we may do so in our legitimate interest, having given you the chance to opt out. You can unsubscribe at any time using the link in any email, or by contacting us.
To run, secure and improve our website. We do this in our legitimate interest in operating a secure, working website, and with your consent where cookies require it.
To establish, exercise or defend legal claims. We do this where necessary in our legitimate interest.
4. Medical information
Medical information is a special category of personal information under data protection law, and we treat it with particular care. Some food and drink information, such as allergies, can also reveal health information.
We collect this information only with your explicit consent, and only so that the Operator can prepare for your charter and assess whether diving and other activities are suitable. You can withdraw your consent at any time by contacting us. If you do, the Operator may be unable to accommodate certain requirements or allow certain activities.
If there is a medical emergency and you are unable to consent, we may share relevant information where it is necessary to protect your vital interests.
5. Information about other people in your party
If you give us information about other guests, please make sure they know you are doing so and have seen this policy. Where guests are under 18, we collect their information from a parent or guardian.
6. Who we share your information with
The Operator of your yacht. We share confirmed guest information only with the Operator of the yacht you are chartering. Once the Operator receives it, the Operator is responsible for how it uses and protects that information.
Our service providers. We use trusted providers for services such as secure document storage, email, messaging, our newsletter and website hosting and analytics. They act only on our instructions and may not use your information for their own purposes. [CONFIRM: add or remove categories to match the tools UIY uses]
Our bank and payment providers, when you make a payment to us.
Professional advisers and authorities, such as our accountants, lawyers or insurers, or where we are required to by law.
We do not sell your personal information.
7. International transfers
Our yachts operate in Indonesia, and our team works from Europe and Indonesia. To arrange your charter, your information will therefore be transferred to, and accessed from, countries outside the United Kingdom, including Indonesia, where data protection laws may differ from those in the UK.
We transfer information to Operators in Indonesia because it is necessary to arrange the charter you have asked for. Where our service providers store or process information outside the UK, we rely on the safeguards recognised under UK data protection law. You can contact us for more information about these safeguards.
8. How long we keep your information
We keep personal information only for as long as we need it:
- Enquiries that do not lead to a booking: five years from our last contact with you.
- Passport, medical, diving and food and drink information: deleted within six months of the end of your charter, unless we need it for an ongoing claim or dispute.
- Booking, invoice and payment records: as long as we are required to keep them for tax and accounting purposes, usually six years.
- Newsletter details: until you unsubscribe.
9. How we protect your information
Guest information is stored securely, access is limited to members of our team who need it to arrange your charter, and it is shared only with the relevant Operator. No method of storing or transmitting information is completely secure, but we take appropriate steps to protect the information we hold.
10. Your rights
You have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- ask us to delete your information;
- ask us to restrict how we use your information;
- object to our use of your information where we rely on legitimate interests, and to direct marketing at any time;
- ask us to transfer information you have given us to another organisation; and
- withdraw your consent at any time, where we rely on consent.
Some of these rights apply only in certain circumstances. To exercise any of them, please contact us at [email protected]. We may need to confirm your identity first, and we will respond within the time required by law.
11. Cookies
Our website uses cookies and similar technologies. Some are necessary for the website to work. Others help us understand how the website is used and measure our advertising, and we use these only with your consent.
We manage cookie consent using CookieYes. When you first visit the website, you can accept or reject non-essential cookies, and you can change your choice at any time through the cookie settings on the website.
This website is protected by the Google Privacy Policy and Terms of Service apply.
12. Complaints
If you have a concern about how we handle your information, please contact us first at [email protected]. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk. If you live in another country, you may also be able to complain to your local data protection authority.
13. Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed.
This document was last updated on September 29, 2026.
