This policy covers what data Yachts For Kings collects, why we collect it, how long we keep it, and what we never do with it. The short version: we run standard web analytics through GA4, we operate a newsletter through ConvertKit, we track affiliate referrals through partner platforms, and we do not sell reader data to anyone. The policy was last reviewed on 2026-05-04 and is reviewed every six months. Data requests under GDPR or CCPA go to legal@yachtsforkings.com with a reply target of 30 days.
What we collect, in detail
Analytics data. We run Google Analytics 4 with IP anonymization enabled. The data captured is page views, session duration, referrer, approximate geographic region at country level, device type, browser, and operating system. We do not capture personal names, email addresses, or specific user-IDs through analytics. The data is retained for 26 months and then automatically deleted.
Newsletter signups. When you subscribe to our quarterly briefing through any form on the site, we collect your email address and the form's source URL. The data is held in ConvertKit. We use the email address only for the newsletter and the source URL only for internal segmentation. We do not share, sell, rent, or trade the list. Unsubscribe is a one-click link in every email and works immediately.
Reader correction emails. When you email editor@yachtsforkings.com with a correction, we keep the email and our reply for 24 months as part of the editorial change log documented on the methodology page. The change log is internal. Reader names are never published.
Affiliate referrals. When you click an affiliate link on this site, a token is set by the partner platform or the broker, not by us. The token identifies us as the referrer. The token does not transmit personal data from this site to the partner. See affiliate disclosure for the full mechanics.
Server logs. Standard web server logs capture IP address, timestamp, URL, response status code, and user agent. We use them for security review and incident response. They are retained for 30 days.
What we do not collect
We do not collect financial information. There is no transaction on this site, so there is no payment data.
We do not collect government identifiers, social security or national insurance numbers, passport numbers, or any equivalent.
We do not collect health information, employment information, or religious or political affiliations.
We do not require account creation to read the site. There is no login wall.
We do not run user-fingerprinting beyond the standard browser data captured by GA4 with IP anonymization. We do not run cross-site behavioral tracking. We do not embed pixels from social networks that track readers across the web.
Cookies
The cookie banner offered on first visit gives three choices: accept all, reject non-essential, or customize. Essential cookies (session and security) cannot be rejected because the site does not function without them. All other cookie categories are opt-in.
The full cookie list is as follows.
| Cookie | Type | Purpose | Retention |
|---|---|---|---|
_ga, _ga_* |
Analytics | Google Analytics session tracking | 13 months |
_gid |
Analytics | Google Analytics user differentiation | 24 hours |
yfk_session |
Essential | Reader session integrity | Session only |
yfk_consent |
Essential | Stores cookie banner choice | 12 months |
convertkit_* |
Newsletter | Newsletter form behavior | 12 months |
| Partner affiliate cookies | Marketing | Set by partner platforms on click-through, not by us | 30 to 90 days per partner |
We do not run advertising cookies. We do not run cross-site retargeting. The site does run a display advertising unit through Mediavine or Raptive on certain page templates (see how we make money). The display partner runs its own cookie disclosure inside the ad unit. Reader opt-out is honored through the ad partner's standard CCPA and GDPR control.
Third parties we share data with
We share data only with the following third parties, and only for the purpose stated.
Google Analytics (Alphabet Inc.) receives anonymized analytics events. The data is governed by Google's privacy policy and our GA4 configuration. We do not enable Google Signals or other identity-resolution features.
ConvertKit (Kit, Inc.) holds the newsletter list. Subscriber email addresses and form source URLs are stored on ConvertKit's infrastructure under their privacy policy.
Cloudflare acts as our DNS and content delivery provider. Cloudflare receives IP addresses and request headers in the ordinary course of delivering the site. Data is processed under Cloudflare's privacy policy.
Mediavine or Raptive receives display advertising data on pages where display is served. The reader can opt out of personalized advertising through the partner's standard control inside the ad unit.
Partner affiliate platforms (GetMyBoat, Click and Boat, Sailo, Viator, BoatBookings, YachtCharterFleet, and the direct broker partners) receive the click-through event when a reader follows an affiliate link. Each partner has its own privacy policy that applies after the click. We do not transmit reader email addresses or reader names to affiliate partners.
We do not share data with social networks. We do not share data with data brokers. We do not share data with advertisers other than the display partner described above.
Your rights under GDPR (EU and UK readers)
If you are in the EU or UK, you have the right to access the data we hold about you, to ask us to correct it, to ask us to delete it, to ask us to restrict our processing, to ask us to transfer it in a portable format, and to object to processing. You also have the right to lodge a complaint with your supervisory authority.
Requests go to legal@yachtsforkings.com. We reply within 30 days. We may ask you to verify identity before processing a deletion or transfer request, as the law requires.
The legal basis for the processing we do: legitimate interest for analytics, server logs, and affiliate tracking; consent for the newsletter and non-essential cookies; contract (with you) for any reader correction email that becomes part of the editorial change log.
Your rights under CCPA (California readers)
If you are a California resident, you have the right to know what data we collect about you, to delete it, to correct it, and to opt out of sale or sharing of your personal information. We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
Requests go to legal@yachtsforkings.com with a 45-day reply target. The same identity verification applies as under GDPR.
Data retention summary
| Data type | Retention |
|---|---|
| GA4 analytics events | 26 months |
| Server logs | 30 days |
| Newsletter subscriber data | Until unsubscribe |
| Reader correction emails | 24 months |
| Editorial change log internal | 24 months |
| Affiliate click-through (held by partner) | 30 to 90 days per partner |
| Cookie consent record | 12 months |
Children's data
Yachts For Kings is not directed at readers under the age of 16. We do not knowingly collect data from anyone under 16. If you believe a child has provided data through our site, email legal@yachtsforkings.com and we will delete it within 30 days.
International transfers
Data is processed in the United States (Google Analytics, ConvertKit, Mediavine or Raptive) and in the European Union (Cloudflare data centers regionally). Transfers from the EU and UK to the US are made under the EU-US Data Privacy Framework and the UK extension to that framework, where the receiving partner is certified, or under Standard Contractual Clauses where it is not.
Security
Reasonable technical and organizational measures are in place. The site is served over HTTPS only. The newsletter and analytics platforms are commercial SaaS with their own security postures. Reader correction emails are stored in a single editorial mailbox with two-factor authentication and no shared access.
We will notify affected readers and the relevant supervisory authority within 72 hours of becoming aware of a personal data breach that is likely to result in a risk to reader rights and freedoms, as GDPR requires.
Changes to this policy
Material changes to this policy are notified by an inline notice at the top of the page for 30 days following the change, and by an email to the newsletter list if the change affects newsletter handling. Non-material edits (typos, link updates, formatting) are published without notice but the page's "Last updated" date is updated.
Contact
Data requests: legal@yachtsforkings.com. Editorial: editor@yachtsforkings.com. Other contact addresses on the contact page.