Privacy Policy

    Last updated : October 2026

    This page explains which personal data we collect on this website, why, who it is shared with, how long we keep it and how to exercise your rights. It applies to fakaravaprivateboat.com. Data protection is governed by France's “Informatique et Libertés” Act of 6 January 1978, which applies in French Polynesia, and by the EU General Data Protection Regulation (GDPR) where it applies.

    1. Data controller

    SARL Fakarava Private Boat

    Pension Vekeveke Village, BP 108, 98763 Fakarava, Polynésie française

    Numéro Tahiti : G72441

    Email : fakaravaprivateboat@gmail.com

    Phone / WhatsApp : +689 87 39 25 05

    We have not appointed a Data Protection Officer (DPO), which is not required for our activity. For any question, write to us at the address above.

    2. What we collect, why, and on what legal basis

    a) Your availability request

    • Data: tour, preferred date, number of guests, name, email; and if you provide them: phone/WhatsApp, where you are staying, useful information (free text).
    • We also record where your visit came from (the link or social network that brought you, the previous page), to know which channels work.
    • Purpose: to answer you, check availability, organise the tour and the pickup.
    • Legal basis: pre-contractual steps taken at your request (Article 6(1)(b) GDPR). For the visit source: our legitimate interest in measuring how well our communication channels work (Article 6(1)(f)).
    • The request is stored in our database, then you send it yourself by WhatsApp or email from your phone or mail app.

    b) Safety information

    The form asks for no health information. When we confirm a trip, we only ask what is needed for your safety on board (ability to swim, pregnancy, reduced mobility, a health issue the captain should know about), with your explicit consent (Article 9(2)(a) GDPR). This information is deleted after the trip. If you write any of it in the form's free-text field, it is handled the same way.

    c) Messages you send us

    When you contact us by WhatsApp, email or phone, we use those exchanges to answer you and manage your booking (same legal basis as above).

    d) Audience measurement

    Only with your consent, we use Google Analytics to know how many people visit the site, which pages they view and which buttons they use (for example “Ask on WhatsApp”). Legal basis: your consent (Article 82 of the Informatique et Libertés Act and Article 6(1)(a) GDPR). See the Cookies section.

    3. Who receives your data

    Your data is intended only for Fakarava Private Boat. We do not sell or rent it. It goes through the following technical providers, who process it on our behalf or, for WhatsApp and your mail provider, because you choose to use them:

    • Lovable Labs Incorporated: website hosting and the host's visit statistics.
    • Supabase: database where requests are stored.
    • Cloudflare: website security and delivery.
    • Google: audience measurement (if you accept it) and the company's email (Gmail).
    • Meta (WhatsApp): if you choose to message us on WhatsApp.

    4. Transfers outside the European Union

    Several of these providers are based in, or store data in, the United States. These transfers rely on the safeguards provided by the GDPR: the European Commission's adequacy decision (Data Privacy Framework) for certified companies, or the European Commission's standard contractual clauses. You can ask us for details.

    5. How long we keep your data

    • Request not followed by a booking: 3 years after our last exchange.
    • Confirmed booking: for the duration of our relationship, then for the period required by our accounting and tax obligations for the relevant records.
    • Safety information (health, swimming): deleted after the trip.
    • Google Analytics statistics: 14 months.
    • Your cookie choice: 6 months, then we ask you again.

    6. Cookies and browser storage

    No Google audience cookie is set until you click “Accept”. Refusing is as easy as accepting, and you can change your mind at any time: .

    NameSet byPurposeLifetimeConsent
    _ga, _ga_D5CNKVH1NGGoogle Analytics (Google)Audience measurement13 months maximumOnly if you click “Accept”
    session-idLovable (host)Host's visit statistics30 minutesSet by the hosting platform
    __cf_bmCloudflareProtection against malicious bots30 minutesStrictly necessary (exempt from consent)
    fpb_consentFakarava Private BoatRemember your cookie choice6 monthsStrictly necessary (local storage)
    fpb_langFakarava Private BoatRemember your languageUntil you delete itStrictly necessary (local storage)
    fpb_utmFakarava Private BoatKnow where a request comes from (link, social network)End of visit (tab closed)Session storage, attached to your request

    You can also delete cookies and local storage from your browser settings.

    7. Your rights

    At any time, you can:

    • access your data and get a copy of it;
    • have it corrected or erased;
    • ask us to restrict processing, or object to it;
    • receive the data you gave us in a readable format (portability);
    • withdraw your consent (cookies, safety information), without affecting what was done before;
    • set instructions for what happens to your data after your death.

    Write to us at fakaravaprivateboat@gmail.com. We reply within one month.

    If you believe your rights are not respected, you can lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — cnil.fr.

    8. Security

    The site is served over HTTPS only. Access to stored requests is restricted to the company, and we only ask for the information your tour requires.

    9. Changes

    We update this page when our practices change. The date of the last update is shown at the top.