Privacy Policy
Last updated 26 October 2026
Who we are
Liberty Yachts charters yachts in Dubai and the wider United Arab Emirates. We are the controller of the personal data described here.
Office M06, The Arcade, Al Garhoud, Deira, Dubai, United Arab Emirates (PO Box 78599)hello@liberty-yachts.com
What we collect
When you send an enquiry
Your phone number, with the country code you chose for it; your full name; your email address, if you give one; whether you want a day trip or an overnight stay, and for how many nights; the date, start time and length of charter you want; how many guests are coming; which yacht, itinerary or event package you were looking at; and any extras you tick. We use the number to reply on WhatsApp or by phone, and the email address, if you gave one, to reply by email. Earlier enquiries may also record a package. We also record which page of this site you sent it from, so we know which pages are useful. We also record where you came to this site from: the kind of website or app that sent you here (for example a search engine, an AI assistant or social media), as your browser or the link reports it, or that you came directly. If you arrived from one of our adverts we also record the advert click identifier, the website you followed the link here from and the time you arrived. All of this is kept with the enquiry.
When you send a message from the contact page
Your message; your email address or phone number, whichever you gave, with the country code you chose for a number; your name, if you give it; and which page you sent it from. We use them to reply, and keep them for the period set out below.
When you tap a WhatsApp button
We record that the button was tapped, which yacht you were looking at, which page you were on, where you came to this site from (as above), and — if you arrived from one of our adverts — the advert click identifier, the website you followed the link here from and the time you arrived, all taken from the cookie described below and kept with the enquiry. If no message follows, the record of the tap is normally deleted after 30 days.
When you message us on WhatsApp
We see your phone number, whatever profile name you have set, and what you write to us, and we record your number and name with your enquiry, together with anything recorded when you tapped the button. WhatsApp itself is run by Meta and the messages travel over their service under their terms, not ours.
Automatically, when you visit
Your IP address and browser details reach our servers and our security provider as part of loading any web page, and are kept in logs. When you arrive from another website, or from one of our Google adverts, we note where you came from in a cookie — see below.
Cookies
These are the cookies this site sets itself.
| Cookie | What it is for | How long it lasts |
|---|---|---|
ly_click |
Remembers where you came to this site from — the kind of website or app that sent you, and for one of our Google adverts the advert click identifier — so that if you enquire three pages later we know how you found us and which advert paid for it. For an advert it also holds the website you followed the link here from and the time you arrived, so we can spot an advert identifier being copied and circulated by somebody else. | 90 days |
ly_consent |
Remembers your answer in the cookie bar (Accept or Decline). Strictly necessary. | 180 days |
| Session cookie | Keeps your place while you use the site. Strictly necessary. | 120 minutes |
XSRF-TOKEN |
Stops other websites submitting our forms on your behalf. Strictly necessary. | 120 minutes |
These services also run on our pages. Some set their own cookies; the rest receive your IP address because your browser has to fetch a file from them. Each one handles that data under its own privacy policy, not ours:
- Google Analytics — counts visits and how pages are used. Sets cookies.
- Google Ads — measures which adverts lead to enquiries.
- Google Maps — where a map is shown on our contact page. Sets cookies.
- Vimeo — hosts the videos on our home page. Receives your IP address.
- jsDelivr — delivers part of our video player. Receives your IP address.
- Cloudflare Turnstile — checks that an enquiry or message was sent by a person rather than an automated script. Receives your IP address and information about your browser.
Google Analytics and Google Ads set cookies from your first visit, unless you choose
Decline in the cookie bar. If you are in the European Union, the European Economic
Area, the United Kingdom or Switzerland, they wait until you choose Accept instead.
The Meta Pixel sends nothing until you choose Accept, wherever you are. While Google's
cookies are off, its tag may still tell Google, without cookies, that a page was viewed
or an enquiry was sent, which Google uses only in totals. You
can change your choice at any time with Cookie settings at the bottom
of every page. The cookie bar does not cover our own
ly_click cookie (above): it is set whatever you choose,
so that we know how an enquiry found us.
You can refuse or delete all of these in your browser settings. You can turn off personalised advertising directly with Google and Meta.
Why we use it, and on what basis
We use the data described above to answer enquiries and messages, quote prices, arrange and run charters, recognise returning customers (we keep a customer record that links your enquiries and charters together), measure how people find us and which of our adverts and pages produce enquiries, check that an advert click identifier has not been copied and circulated by somebody else, keep automated abuse off the site, comply with the law, and establish or defend legal claims.
- To arrange the charter you ask for. Answering your enquiry, quoting a price and running the charter you book.
- With your consent. Advertising and analytics cookies: Google's unless you choose Decline in the cookie bar (in the European Union, the European Economic Area, the United Kingdom and Switzerland, only if you choose Accept), and Meta's only if you choose Accept. Sending an enquiry or a message, or tapping a WhatsApp button, is your consent to us using what you send to reply to you. You can withdraw your consent at any time by writing to us; this does not affect anything done before you withdrew it, and we may then be unable to answer your enquiry or arrange a charter.
- Where the law requires or permits it. Keeping charter and tax records, responding to lawful requests from authorities, and establishing or defending legal claims.
Who we share it with
- The operator of the yacht you charter. The details they need to run the trip, such as the lead guest's name, the number of guests and the timing.
- Google and Meta. Their measurement tags run on our pages and record that a page was viewed and, when you send an enquiry, that one was sent (with our enquiry reference), against their own cookies.
- Google, for measuring adverts. We send Google a hashed (coded) form of your phone number, and of your email address if you gave one, rather than the details as you typed them, with our enquiry or booking reference. Google matches it against details already linked to Google accounts, so that it can tell which advert led to your enquiry. Hashing is not encryption: someone who already has your number or address can recognise it. For enquiries sent through our form, we also tell Google, with the advert click identifier if there was one, whether the enquiry passed our automated checks - and if we later mark it as not a real prospect (not genuine, outside the area we serve, or with no budget for a charter), or remove it, we tell Google to discount it. If you arrived from one of our adverts, tapped a WhatsApp button and then messaged us, we tell Google that the advert led to a real enquiry, with the advert click identifier, and if we later mark it as not a real prospect or remove it, we tell Google to discount it. If an enquiry sent through our form becomes a charter, we tell Google that it did, with the advert click identifier if there was one, and the charter's value to us - and if the charter is cancelled or its value changes, we tell Google. The same goes for a WhatsApp enquiry that began with one of our adverts, again with the advert click identifier.
- Our suppliers — website hosting, our security and delivery network, and email.
- Authorities, courts and our professional advisers, where the law requires it or to establish or defend legal claims.
- A buyer or successor of our business, if all or part of it is sold or transferred.
Sending data outside the UAE
Google, Meta, our hosting, security and email providers, and the other services listed under Cookies operate internationally, so some of the data above is processed and stored outside the United Arab Emirates. They handle it under their terms of service and data-processing terms, and their own security measures.
How long we keep it
We keep personal data for as long as we need it for the purposes above. Normally that is:
- An enquiry or message that never became a charter: 3 years from your most recent one, unless you chartered with us at another time. Long enough to recognise you if you come back next season and to compare one year against the last.
- If you chartered with us: 8 years from the charter, or longer where UAE law requires us to keep the records.
We may keep data longer where the law requires or permits it, including to establish or defend legal claims. After that we delete or anonymise it.
Your rights
Under the UAE Personal Data Protection Law you can ask us for information about the data we hold about you, and ask us to correct, complete or erase it, to restrict or stop processing it, or to send it to you in a portable form, within the limits that law sets. Where we rely on your consent, you can withdraw it at any time.
Write to hello@liberty-yachts.com and we will respond within the time the law requires.
Children
This site is for adults booking charters. We do not knowingly collect data from anyone under 18. Children are welcome aboard as guests of a booking made by an adult.
Changes to this policy
We may change this policy at any time. The date at the top shows when it last changed, and the policy on this page is the one that applies.