Privacy policy — the short, honest version

Who we are

Santorini Boat Tours (Sirigos Sailing), Vlychada Marina, Thira 847 00, Santorini, Greece — the "data controller" in GDPR language. Contact: info@santoriniboattours.com, +30 694 480 3339.

What this website collects on its own: nothing

Browsing this site places no cookies and no local storage identifiers on your device, loads no fonts, scripts, images or maps from third parties, and sends no analytics beacons. (One tiny exception: the homepage remembers for the length of your visit that you've seen the intro animation, using sessionStorage — it identifies nobody and vanishes when you close the tab.) Our web host keeps standard, short-lived server logs (IP address, page requested, time) for security and error-fixing, as virtually every website host does — legal basis: legitimate interest in running a secure service.

What you may choose to send us

If you submit the booking form, you send us: your name, email, optional phone/WhatsApp number, chosen cruise, date, party size, optional pickup location and message. We use it for exactly one purpose — answering you and arranging your cruise (legal basis: taking steps at your request before entering a contract, GDPR Art. 6(1)(b)).

• It travels by email to our booking inbox; it is not entered into any marketing database.
• We never sell it, rent it, or share it beyond what a booking needs (e.g. telling a driver your pickup point and first name).
• No newsletters, no remarketing — we email you about your booking and then we stop.

If you message us on WhatsApp or by phone instead, that conversation lives under WhatsApp's/your carrier's own privacy terms — choose the channel you prefer.

How long we keep it

Booking correspondence is kept for the current season plus the period Greek tax and maritime rules require for transaction records, then deleted. Enquiries that never become bookings are deleted within 12 months.

Your rights

Under the GDPR you may ask us to access, correct, delete, restrict or export the personal data we hold about you, and you may object to processing based on legitimate interest. Email info@santoriniboattours.com and we'll act within 30 days. If we ever disappoint you, you may complain to the Hellenic Data Protection Authority (dpa.gr) — but do give us the chance to fix it first.

Payments

This website processes no payments and stores no card data. Payment happens on board (cash/card terminal) or by a payment link we send you, processed by the payment provider under its own terms.

Changes

If we ever add a tool that changes any of the above (for example, analytics), this page will say so plainly and the date at the top will change. Until then: no cookies, no trackers, just the sea.