Data Protection Policy

Effective Date: 24 November 2025

General
Your Rights
Data Security
Newsletter
Presence on Social Media Platforms
Third Party Services
Contact Regarding Data Protection

1. General

1.1 About Us

"We", "us" or "our" means Borrow A Boat, with its principal place of business located at Office Mendip House Welshmill Road, Frome Somerset GB BA11 2LA.

1.2 What is Personal Data

Personal data are data which disclose or can disclose the customer's identity. We adhere to the policy of data minimisation and avoidance. As far as possible, a collection of personal data is avoided.

1.3 What Personal Information We Collect and How We Collect It

We collect personal information that you provide directly to us:

Contact Information: If you sign up to receive our newsletter, emails, or text messages from us, we will collect your name, email address, mailing address, phone number, and any other information needed to contact you about the Services.

Account and Registration Data: For the full use of the functions of our website, registration is required. The registration data are collected through your respective input and used for the purpose specified in accordance with your consent (Article 6(1)(a) GDPR). This may include your name, email address, phone number, billing address, and account credentials.

Payment Information: To order products or services through our Services, you will need to provide us with payment information (like your bank account or credit card information). Please note that your financial information is collected and stored by third party payment processing companies. Use and storage of that information is governed by the third party payment processor's applicable privacy policy.

Survey and Feedback Information: You may provide us with other personal information when you fill in a form, respond to our surveys or questionnaires, provide us with feedback, participate in promotions, or use other features of the Services.

Communications Information: We may also collect other information during our communications with you, including information that you send to us when interacting with our customer service agents, or when you call us or send emails or text messages. This may include information about how you contacted us, your marketing preferences, and other information that you choose to share.

Booking and Transaction Data: When you make a booking or engage our services, we collect information about the transaction, including boat preferences, dates, locations, and charter details.

1.4 How We Use Your Personal Information

We use the personal information we collect for the following purposes:

To provide, maintain, and improve our Services, including processing bookings and facilitating boat rentals
To send you our newsletter, or other information or marketing about our Services that we think may be of interest to you
To reply to your questions, inquiries, or customer service requests or to send you notices, updates, security alerts, or support and administrative messages
To provide you with information about the Services that you request from us or which we feel may interest you
To monitor and analyze trends, usage and activities in connection with our Services and to improve the Services
To facilitate contests, sweepstakes and promotions, and to process entries and provide prizes and rewards
To detect, investigate and prevent fraudulent transactions and other illegal activities on the Services and to protect the rights and property of us and our customers
To carry out our obligations arising from any contracts entered into between you and us, including for billing and collection
To comply with legal obligations and respond to legal requests

We may also use your personal information to fulfill our obligations as set out by the applicable law, or to carry out any other purpose as described to you at the time your personal information was collected.

1.5 Legal Basis for Processing

In certain countries we are required to have a legal basis for collecting and using your personal information. Our legal basis will depend on the personal information concerned and the specific context in which we collect it.

The processing of your personal data takes place on the following legal bases:

Consent (Article 6(1)(a) GDPR): Where we have received your explicit consent
Contract Performance (Article 6(1)(b) GDPR): Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
Legal Obligation (Article 6(1)(c) GDPR): Where we must comply with legal obligations
Legitimate Interests (Article 6(1)(f) GDPR): Where processing is necessary for our legitimate interests and to the extent that the consideration shows that no conflicting interests, fundamental rights or fundamental freedoms on your part override these interests

We will normally collect personal information from you only where we have your consent to do so, where we need your information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your fundamental rights. In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the details provided in the "Contact Regarding Data Protection" section below.

1.6 How We Share Your Personal Information

We may share your personal information in the following ways:

Service Providers: With vendors, consultants, and other service providers who process your personal information on our behalf when they provide services to us, for example data analytics, payment processing, research, marketing and financial services.

Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company.

Legal Requirements: We may be legally required to disclose or share your personal information without your consent in some circumstances, for example to comply with a court order, law enforcement request, or legal obligation. In such circumstances, we will only disclose your personal information if we have a good-faith belief that such sharing is required under applicable legal obligations.

Charters and Guests: With boat owners (Charters) and renters (Guests) as necessary to facilitate bookings and rental transactions.

We may use processors to process your personal data but will generally not disclose your personal information to third parties beyond what is described above.

1.7 User Data and Technical Information

When visiting this website, general technical information is collected. These include the IP address used, time, length of visit, browser type and, if necessary, the site of origin. These user data are registered in a log file due to technical conditions and can be used and stored for statistical purposes of this website. Additional personal data are not linked to this user data unless you provide such information.

1.8 Data Retention and Deletion

Your personal information will not be kept longer than is necessary for the specific purpose for which it was collected.

When we decide how long we will keep your information we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, why we need it, and any relevant legal requirements (such as legal retention and destruction periods, especially tax and accounting regulations which may require retention for up to 10 years).

The foregoing will, however, not prevent us from retaining any personal information if it is necessary to comply with our legal obligations, in order to file a legal claim or defend ourselves against a legal claim, or for evidential purposes.

Details of retention periods for different aspects of your personal data are available from us on request by contacting us using the contact details provided under the "Contact Regarding Data Protection" section below.

To request deletion of your data, please email us at help@borrowaboat.com

1.9 International Transfers

The processing of your personal data takes place within the EU/EEA where possible. However, some of our service providers are located outside the EU/EEA, including in the United States.

When we transfer personal information to countries outside of the EU/EEA, we ensure that appropriate safeguards are in place, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions by the European Commission confirming adequate data protection levels
Additional technical and organizational measures to protect your data

For transfers to the United States, we ensure our service providers have implemented appropriate safeguards following the invalidation of Privacy Shield. We conduct transfer impact assessments and implement supplementary measures where necessary to ensure adequate protection of your data.

You may request further information about the safeguards we use for international transfers by contacting us using the details in Section 7.

1.10 Data Protection Officer

Given the nature and scope of our processing activities, we have not appointed a formal Data Protection Officer as we do not meet the threshold requirements under Article 37 GDPR. However, you may contact our designated data protection contact using the details provided in Section 7 for any data protection inquiries.

1.11 Automated Decision-Making and Profiling

We may use automated systems to analyze your interactions with our Services to provide personalized recommendations and marketing. This may include analyzing your booking history, search patterns, and preferences to suggest boats or destinations that may interest you.

You have the right to object to such profiling and to request human intervention in automated decision-making processes that have legal or similarly significant effects on you. To exercise this right, please contact us at the details provided in Section 7.

2. Your Rights

Depending on the circumstances and your location, you may have some or all of the following rights under applicable data protection laws:

2.1 Right to Information

You can require information from us whether we process your personal data and, as far as this is the case, you have the right to access these personal data and the additional information mentioned in Article 15 GDPR, including:

The purposes of processing
The categories of personal data
The recipients to whom personal data has been disclosed
The retention period
Your rights regarding your data

2.2 Right to Correction (Rectification)

You have the right to correction of incorrect personal data relating to you; you can demand the completion of incomplete personal data according to Article 16 GDPR.

2.3 Right to Deletion (Right to be Forgotten)

You have the right to demand from us that we immediately delete your personal data referring to you. We are required to delete them immediately, especially for one of the following reasons:

Your personal data are no longer necessary for the purpose for which they were collected or were processed otherwise
You revoke your permission which was the basis for processing your data, and no other legal basis for the processing exists
You object to the processing and there are no overriding legitimate grounds for processing
Your data were processed unlawfully
Deletion is required to comply with a legal obligation

The right to deletion does not exist if your personal data relating to you are required for:

Exercising the right of freedom of expression and information
Compliance with a legal obligation
Archiving purposes in the public interest, scientific or historical research, or statistical purposes
Enforcement, execution, or defense of our legal claims

To request deletion, please email: help@borrowaboat.com

2.4 Right to Restriction of Processing

You have the right to require from us the restriction of processing of your personal data if:

You contest the accuracy of data, for the period we need to verify the accuracy
The processing is unlawful, and you refuse the deletion of data and instead demand the restriction of use
We no longer require the data, but you require them for enforcement, execution, or defense of legal claims
You have objected to the processing, pending verification of whether our legitimate grounds override your interests

2.5 Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us, where:

The processing is based on consent or a contract
The processing is carried out by automated means

2.6 Right to Object

You have the right to object at any time to processing of your personal data which is based on legitimate interests (Article 6(1)(f) GDPR), including profiling based on those provisions.

You also have the right to object at any time to processing of your personal data for direct marketing purposes, including profiling related to such marketing.

2.7 Right to Withdraw Consent

As far as the processing of your personal data is based on consent, you have the right to withdraw this consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

2.8 Your Marketing Choices

When you sign up for a promotion like a sweepstakes, or subscribe to receive our newsletter or marketing/promotional messages, we use your personal information to help us decide which products, services and offers may be of interest to you.

We will send marketing messages to you if you have:

Asked us to send you information
Bought goods or services from us
Provided us with your details when you entered a competition or registered for a promotion

If you opt out of receiving marketing messages, we may still send you non-promotional emails related to your account or transactions. We will ask for your consent before we share your personal information with any third party for their direct marketing purposes.

To unsubscribe from marketing messages, you may:

Use the unsubscribe link included in our marketing emails
Contact us at: support@borrowaboat.com

2.9 General Rights Information and Right to Complain

The exercise of your rights above is, in principle, free of charge to you, unless your requests are manifestly unfounded or excessive.

You have the right to lodge a complaint directly with the appropriate supervisory authority. Based on our location and operations:

For UK matters: Information Commissioner's Office (ICO) - https://ico.org.uk/
For EU matters: Your local supervisory authority or the lead supervisory authority for our EU operations

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

3. Data Security

3.1 Security Measures

All data on our website are secured through technical and organizational measures against loss, destruction, unauthorized access, modification, and distribution, including:

Technical Measures:

Encryption of data in transit using SSL/TLS protocols
Encryption of sensitive data at rest
Secure authentication and access control systems
Regular security assessments and vulnerability testing
Firewall protection and intrusion detection systems
Regular backups and disaster recovery procedures

Organizational Measures:

Staff training on data protection and security
Confidentiality agreements with employees and contractors
Access controls limiting data access to authorized personnel only
Regular review and update of security policies
Incident response procedures

We shall endeavor to protect your data to the best of our ability. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

3.2 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach.

Our notification will include:

The nature of the personal data breach
The likely consequences of the breach
The measures taken or proposed to address the breach and mitigate its effects
Contact details for further information

3.3 Sessions and Cookies

To operate the Internet site, we use cookies or server-based sessions to store data. Cookies are, for instance, used for personalized greetings by using the member's name. Cookies are files which are stored by a website on the customer's hard drive to automatically recognize this computer at the next visit to the website, and adjust the website based on the customer's use.

Types of Cookies We Use:

Strictly Necessary Cookies: Required for the website to function properly
Performance Cookies: Help us understand how visitors use our website
Functionality Cookies: Remember your preferences and personalize your experience
Marketing Cookies: Track your activity to deliver relevant advertisements

Some cookies will be deleted after the end of a browser session (Session Cookies). Other cookies remain on your device and allow browser recognition at a later visit to our website (Persistent Cookies).

You can set your browser to inform you about cookie placement and determine their acceptance individually, or exclude the acceptance of cookies in certain cases or in general. Please be aware that you may not be able to use some of the website's functions when cookies are deactivated.

We assure that no personally-identifiable data is taken from the session or through cookies beyond what is necessary for this website. This processing is based on our legitimate interests (Article 6(1)(f) GDPR), considering that no overriding interests on your part preclude this.

For more information about managing cookies, please see our Cookie Policy or adjust your preferences through our cookie consent banner.

4. Newsletter

If you subscribe to our newsletter, we will use the information required or separately provided by you to send you regular email newsletters about our services, special offers, and updates.

Legal Basis: Your consent (Article 6(1)(a) GDPR)

Unsubscribing: You may unsubscribe from the newsletter at any time by:

Using the dedicated unsubscribe link in the newsletter
Sending a message to us via the contact options specified in Section 7

Your unsubscribe request will be processed promptly, typically within 48 hours.

5. Presence on Social Media Platforms

We use the following social media platforms for company presentation and communication. When you interact with us on these platforms, both we and the platform provider may process your personal data.

Legal Basis: Legitimate interests (Article 6(1)(f) GDPR) for communication and optimization of our services, and/or your consent to the platform provider's data processing (Article 6(1)(a) GDPR).

Social Media Platforms We Use:

Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

Privacy Policy: https://www.facebook.com/about/privacy/
Opt-Out: https://www.facebook.com/settings?tab=ads

Twitter/X (Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland)

Privacy Policy: https://twitter.com/en/privacy
Opt-Out: https://twitter.com/settings/personalization

Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland)

YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)

These social media platforms may process personal data outside the EU. We refer to the data protection statements of the social media platforms listed above.

The respective social media platforms may, depending on your usage behavior and the resulting interests and actions on your part, create user profiles and save cookies on your computer, in which your usage behavior is stored. If you have an account on the respective social media platform and are logged in, your usage behavior can be stored device-independently and used for targeted advertising.

6. Third Party Services

6.1 Google Analytics

This website uses Google Analytics, a web analysis service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

What Data is Collected: Google Analytics uses cookies to analyze your use of the website. Information generated by the cookie about your website use (including your IP address) is transmitted to and stored by Google.

IP Anonymization: We have activated IP anonymization on this website. Your IP address will be shortened by Google within EU/EEA member states before transmission to the US. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Purpose: Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity, and provide other services relating to website activity and internet usage.

Legal Basis: Legitimate interests (Article 6(1)(f) GDPR) for website optimization and improvement, following your consent through our cookie banner.

Your Rights: You can prevent cookie storage through browser settings and prevent data collection by downloading and installing the browser plug-in available at: http://tools.google.com/dlpage/gaoptout

We have expanded Google Analytics with the code "anonymizeIp" to guarantee anonymized collection of IP addresses (IP masking).

Data Transfers: Google processes data in accordance with Standard Contractual Clauses for transfers outside the EU/EEA.

Google's Privacy Policy: https://policies.google.com/privacy

6.2 Social Media Links and Plugins

Our social media pages can be reached through links on this website to the respective third-party providers. Using the links, you will reach the corresponding Internet sites of the third parties (e.g., Facebook, Twitter, Instagram).

As soon as you open the third-party site, you enter the third party's area of responsibility, so that their data protection policy or their explanation of data use is applicable. We have no control over this.

We recommend logging out from the respective third-party provider's website before using the respective link to avoid unnecessary forwarding of data and to prevent the third-party provider from creating user profiles through the use of the links.

6.3 Google Web Fonts

We use web fonts from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to show you a consistent font on our website. These are automatically loaded when you call up one of our pages to enable the desired display.

When you access our pages, a connection to Google servers is established. Google may record that your IP address has accessed our website.

Legal Basis: Technical necessity and legitimate interests (Article 6(1)(f) GDPR) for consistent visual presentation.

Google's Privacy Policy: https://policies.google.com/privacy More information: https://developers.google.com/fonts/faq

6.4 Use of Google Maps

This website uses Google Maps, a map service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When using Google Maps, data on the use of the Maps functions by visitors to the websites are collected, processed and used by Google. This may include your IP address and location data.

Legal Basis: Technical necessity and legitimate interests (Article 6(1)(f) GDPR) for displaying maps and locations.

Google Privacy Policy: https://policies.google.com/privacy Google Maps Terms: https://www.google.com/help/terms_maps.html

6.5 Use of Google reCAPTCHA

We use "Google reCAPTCHA" on our websites (provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

Purpose: reCAPTCHA is used to check whether data entered on our website (such as on a contact form) has been entered by a human or by an automated program, protecting our site from spam and abuse.

How it Works: reCAPTCHA analyzes the behavior of the website visitor based on various characteristics (e.g., IP address, time spent on website, mouse movements). This analysis starts automatically as soon as the website visitor enters the website. The data collected during the analysis is forwarded to Google.

Legal Basis: Legitimate interests (Article 6(1)(f) GDPR) in protecting our site from abusive automated crawling and spam.

The reCAPTCHA analyses take place completely in the background. Website visitors are not explicitly advised that such an analysis is taking place.

Google's Privacy Policy: https://policies.google.com/privacy reCAPTCHA Information: https://www.google.com/recaptcha/

6.6 Use of Meta (Facebook) Pixel

We use the "visitor action pixels" from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta/Facebook") on our website.

Purpose: This allows user behavior to be tracked after they have been redirected to our website by clicking on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes.

Data Processing: The data collected in this way is anonymous to us (we do not see the personal data of individual users). However, this data is stored and processed by Meta, which may link this information to your Facebook account and use it for its own promotional purposes, in accordance with Meta's Data Usage Policy.

Legal Basis: Your consent (Article 6(1)(a) GDPR) through our cookie banner, and our legitimate interests in measuring advertising effectiveness.

Your Rights: You can object to the collection of your data by Facebook pixel or to the use of your data for the purpose of displaying Facebook ads at: https://www.facebook.com/settings?tab=ads

Data Transfers: Meta has implemented Standard Contractual Clauses for data transfers outside the EU/EEA.

Meta's Privacy Policy: https://www.facebook.com/about/privacy/

6.7 Login with Facebook Account

You can log in via your existing Facebook account by clicking the "Login with Facebook" button. This will redirect you to www.facebook.com (operated by Meta Platforms Ireland Limited).

When you use this feature, Facebook will share certain information with us as permitted by you, which may include your name, email address, and profile picture.

Legal Basis: Your consent (Article 6(1)(a) GDPR) and performance of contract (Article 6(1)(b) GDPR).

The use of Facebook services is subject to Facebook's Privacy Policy and Terms of Use.

6.8 Use of CrossEngage

We use the services of CrossEngage (CrossEngage GmbH, Bertha-Benz-Straße 5, 10557 Berlin, Germany) on our website to show individualized offers and send personalized marketing and transactional emails.

What Data is Processed: After accepting the cookie policy, CrossEngage analyzes and processes web visits and user behavior on this website as well as all other relevant Borrow A Boat data sources.

Purpose: To enable us to create and improve customized offers for visitors and customers.

Legal Basis: Your consent (Article 6(1)(a) GDPR) through our cookie banner, and our legitimate interests in providing personalized services.

Your Rights: If you disagree with the recording and processing of your usage behavior in this way, you can object to this data collection via the contact options mentioned in Section 7.

CrossEngage Privacy Policy: https://www.crossengage.io/privacy-policy/

6.9 Payment Processors

We use third-party payment processing services to handle financial transactions. When you make a payment, your payment information is collected and processed directly by our payment processors, not by us.

Payment Processors We Use may include services such as Stripe, PayPal, or other payment gateways.

Data Collected: Payment card details, billing address, transaction information.

Legal Basis: Performance of contract (Article 6(1)(b) GDPR).

Your payment data is governed by the payment processor's privacy policy. We recommend reviewing their privacy policies before providing payment information.

6.10 WhatsApp Communication

If WhatsApp is used as a communication channel, personal data is processed by WhatsApp LLC (a Meta company, 1601 Willow Road, Menlo Park, California 94025, USA, or Meta Platforms Ireland Limited for EU users).

Important: WhatsApp is not a contractual partner of Borrow A Boat. Therefore, data processing for the transmission procedure takes place exclusively in accordance with the WhatsApp data protection declaration, which can be viewed in the WhatsApp user account or at https://www.whatsapp.com/legal/privacy-policy

Data Processing: WhatsApp may process personal data outside the EU, which may not have a comparable level of data protection to the EU. WhatsApp has implemented Standard Contractual Clauses and additional safeguards to ensure data security.

End-to-End Encryption: WhatsApp messages are equipped with end-to-end encryption which, according to WhatsApp, prevents the content of a message (e.g., a passport photo) from being viewed or evaluated by unauthorized parties.

Your Choice: Before using WhatsApp, you should read the data protection statement. If you do not agree with WhatsApp's data processing, you should not use it but rather call or email us using the contact details in Section 7.

Legal Basis: Your consent (Article 6(1)(a) GDPR) when you choose to communicate with us via WhatsApp.

WhatsApp Privacy Policy: https://www.whatsapp.com/legal/privacy-policy

6.11 Email Marketing and Communication Services

We may use third-party email service providers to send newsletters and marketing communications. These providers process your email address and related information on our behalf.

Legal Basis: Your consent (Article 6(1)(a) GDPR) for marketing communications, and legitimate interests for transactional emails.

6.12 SMS and Text Messaging Services

We offer SMS/text messaging services to send you marketing messages, booking confirmations, updates, and other information about our services.

Opt-In and Consent

When you opt-in to our SMS service, we will send you a message to confirm your signup. By opting into messages, you agree to receive recurring automated marketing and informational text messages from Borrow A Boat. Automated messages may be sent using an automatic telephone dialing system to the mobile telephone number you provided when signing up or any other number that you designate.

Legal Basis: Your explicit consent (Article 6(1)(a) GDPR). Your consent to receive marketing messages is not a condition of purchase.

Message Frequency and Costs

Message frequency varies, and additional mobile messages may be sent periodically based on your interaction with Borrow A Boat. We reserve the right to alter the frequency of messages sent at any time to increase or decrease the total number of sent messages. We also reserve the right to change the short code, phone number, or alphanumeric sender from which messages are sent.

Your usual message and data rates may apply. If you have any questions about your text plan or data plan, contact your mobile provider. Your mobile provider is not liable for delayed or undelivered messages.

Data Collected

When you sign up for SMS services, we collect:

Your mobile phone number
Your consent preferences
Message interaction data (delivery status, opt-out requests)
Any information you provide in response to our messages

This data is used solely for the purposes of sending you requested messages and managing your subscription preferences.

How to Unsubscribe

You can unsubscribe from SMS messages at any time by:

Texting "STOP" to any message you receive from us
Using the unsubscribe link included in our messages (if provided)
Emailing us at help@borrowaboat.com
Calling us at +44 20 3318 3641

After you unsubscribe, we will send you a confirmation message and no further marketing messages will be sent. You may continue to receive transactional messages related to your bookings or account.

If you would like to receive messages from us again, you can sign up as you did initially.

Support

For support regarding our SMS services:

Email: help@borrowaboat.com
Phone: +44 20 3318 3641

Transfer of Mobile Number

If you change your mobile number or transfer it to another individual, you must:

Reply "STOP" from the original number before the transfer, or
Unsubscribe using the link in our messages, or
Notify us of your old number at help@borrowaboat.com

Failure to inform us may result in messages being sent to the new holder of your former number. This duty to inform us is a condition of using our SMS service.

Carriers and Delivery

Mobile carriers are not liable for delayed or undelivered messages. Message delivery depends on factors outside our control, including your mobile carrier's network and your device's capabilities.

Data Retention for SMS

We retain your mobile number and SMS consent preferences for as long as you remain subscribed to our SMS service. After you unsubscribe, we will retain your number on a suppression list to ensure we do not send you further messages, unless required to delete it under your data protection rights.

International SMS

If you are located outside the UK, standard international SMS rates may apply. SMS services may not be available in all countries.

Changes to SMS Terms

We reserve the right to change or terminate our SMS messaging program at any time. We will notify you of material changes through our SMS channel or other communication methods. Your continued enrollment following such changes constitutes your acceptance of such changes.

7. Contact Regarding Data Protection

Data Controller

The data controller of your personal information is:

Borrow A Boat
Office Mendip House
Welshmill Road
Frome, Somerset
GB BA11 2LA

Data Protection Contact

For all data protection inquiries, questions, or to exercise your rights:

Matt Ovenden
Barley Cottage, The Street
Chelmsford, United Kingdom
CM1 4QR

Email: matt.ovenden@borrowaboat.com
General Support: help@borrowaboat.com
Data Deletion Requests: help@borrowaboat.com

Response Time

We will respond to all data protection requests within one month of receipt. In complex cases, this period may be extended by an additional two months, and we will inform you of any such extension.

8. Changes to This Data Protection Policy

From time to time, we have the right to modify this Data Protection Policy. We are likely to update this policy in the future as our practices evolve or laws change.

When we update this Data Protection Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. This may include:

Posting the updated policy on our website with a new effective date
Sending you an email notification for material changes
Displaying a prominent notice on our website

We encourage you to review this page periodically for the latest information on our privacy practices.

Last Updated: 24 November 2025

9. Additional Information

Children's Privacy

Our Services are not directed to children under the age of 18, and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information as soon as possible.

If you believe we have collected information from a child under 18, please contact us immediately at the details provided in Section 7.

California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). Please contact us for information about your California privacy rights.

Your Consent

By using our Services, you consent to the collection, use, and sharing of your information as described in this Data Protection Policy. If you do not agree with this policy, please do not use our Services.

End of Data Protection Policy

Data Protection