Privacy Policy

1. Who We Are

Pura Vida Yachts ("we," "us," or "our") is a custom yacht shipyard located at Icmeler Kume Evleri No:18, Bodrum / Muğla, Türkiye. We are the data controller for personal information collected through this website (puravidayachts.com).

You can contact us at any time at info@puravidayachts.com or by post at the address above.

2. Data We Collect

2.1 Contact Form

When you submit an enquiry through our contact form, we collect the following information:

• Required: Full name, email address, message content.
• Optional: Phone number, country of residence, subject category, yacht of interest.

We collect only the information you voluntarily provide. You are not obligated to supply optional fields.

2.2 Technical / Log Data

Like most websites, our hosting provider (Cloudflare Pages) may automatically collect basic technical data when you visit, including your IP address, browser type, referring page, and pages viewed. This data is used solely for security and performance purposes and is subject to Cloudflare's Privacy Policy. We do not purchase or combine this data with other sources to identify individual visitors.

2.3 Data We Do Not Collect

We do not run advertising pixels, third-party analytics scripts, or social-media tracking on this website. We do not collect payment information. We do not process special-category data (as defined in GDPR Article 9).

3. How We Use Your Data

We use the information you submit via the contact form to:

• Respond to your enquiry or request.
• Provide information about yacht specifications, availability, or pricing.
• Schedule calls or shipyard visits when requested.
• Maintain records of pre-contractual communications if a commercial relationship develops.

We do not use your contact details for unsolicited marketing without your explicit consent. If you have enquired about a specific yacht or build project, we may follow up once by email or phone to ensure your query was resolved. You can opt out of any follow-up at any time by replying to an email with "unsubscribe" or by contacting info@puravidayachts.com.

4. Legal Basis for Processing

Where the GDPR applies to data subjects in the European Economic Area, our legal basis for processing contact-form data is:

• Legitimate interests (GDPR Article 6(1)(f)): responding to inbound business enquiries from prospective clients is a legitimate interest that does not override the rights and freedoms of individuals who have voluntarily initiated contact.
• Pre-contractual steps (GDPR Article 6(1)(b)): where an enquiry relates to a potential purchase or commission, we may process data as necessary to take steps at your request prior to entering a contract.

Processing is also consistent with Turkey's Law on Protection of Personal Data (KVKK No. 6698), under which we act as the veri sorumlusu (data controller).

5. Third-Party Processors

5.1 Formspree

Our contact form submissions are handled by Formspree, Inc., a form-processing service acting as a data processor on our behalf. When you submit a form, your data passes through Formspree's servers and is forwarded to our email address. Formspree processes data in accordance with its Privacy Policy and is GDPR-compliant. We have selected Formspree as a processor because it operates under Standard Contractual Clauses for international transfers where applicable.

5.2 Cloudflare Pages

This website is hosted on Cloudflare Pages. Cloudflare may process your IP address and request metadata to deliver web content and provide DDoS protection. See Cloudflare's Privacy Policy for details.

5.3 Google Maps

Our contact page embeds a Google Maps iframe to display our shipyard location. If you interact with the map, Google may set cookies and collect data about your interaction. See Google's Privacy Policy for details. The map iframe is loaded with loading="lazy" and only fully activates when scrolled into view.

5.4 Google Fonts

This website loads typefaces from Google Fonts. Your browser makes a request to Google's servers to download the font files; this may expose your IP address to Google. See Google's Privacy Policy.

6. Cookies

This website does not set any first-party cookies. We do not use analytics cookies, advertising cookies, or session-tracking cookies.

Third-party cookies may be set by Google Maps and Google Fonts (see Section 5 above) if you interact with those embedded services. These are third-party cookies outside our direct control.

Because we set no first-party cookies, we do not display a cookie consent banner for our own processing. If you wish to manage or block third-party cookies, you can do so through your browser's privacy settings.

7. Data Retention

We retain contact-form submissions in our email inbox for as long as necessary to resolve your enquiry and, where a commercial relationship develops, for the duration of that relationship plus any period required by applicable law (e.g., Article 82 of the Turkish Commercial Code requires retention of certain commercial books and correspondence for 10 years).

Enquiries that do not lead to a commercial relationship are deleted or anonymised within 24 months of the last meaningful communication, unless you request earlier deletion.

8. Your Rights

Where the GDPR applies, you have the following rights in relation to your personal data:

• Right of access (Article 15): Request a copy of the personal data we hold about you.
• Right to rectification (Article 16): Ask us to correct inaccurate or incomplete data.
• Right to erasure (Article 17): Request deletion of your data where there is no overriding legal basis for us to retain it.
• Right to restriction (Article 18): Ask us to restrict processing in certain circumstances.
• Right to data portability (Article 20): Receive your data in a structured, commonly used format where processing is based on consent or contract.
• Right to object (Article 21): Object to processing based on legitimate interests; we will cease processing unless we can demonstrate compelling legitimate grounds.
• Right to lodge a complaint: You have the right to complain to your national data protection supervisory authority. In Turkey, this is the Kişisel Verileri Koruma Kurumu (KVKK) . EEA residents may also contact their local supervisory authority.

To exercise any of these rights, please contact us using the details in Section 12 below. We will respond within 30 days.

9. International Transfers

Our primary operations are based in Türkiye. Data submitted via the contact form passes through Formspree's infrastructure, which may involve servers in the United States. Formspree uses Standard Contractual Clauses (SCCs) as the transfer mechanism for EU/EEA personal data in accordance with GDPR Chapter V, and we have entered into a Data Processing Agreement (DPA) with them to ensure the secure and lawful transfer of this data.

10. Children's Privacy

This website is not directed at children under the age of 16, and we do not knowingly collect personal data from anyone under 16. If we become aware that a child under 16 has submitted personal data to us, we will delete it promptly. If you believe a child has contacted us, please notify us at info@puravidayachts.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or the services we use. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Continued use of our website after an update constitutes acceptance of the revised policy.

12. Contact for Privacy Requests

For any privacy-related request — including subject access requests, data deletion, or general enquiries about how we handle your data — please contact us:

We aim to acknowledge all privacy requests within 5 business days and to resolve them within 30 calendar days in line with GDPR requirements.