Master Privacy & Data Protection Policy

GEORGE YACHTS BROKERAGE HOUSE LLC (the "Company") operates at the highest echelon of the international maritime brokerage industry. We strictly recognize that our discerning global clientele requires absolute discretion and unparalleled digital security. This Master Policy delineates our rigorous, institutional-grade protocols for the collection, cryptographic encryption, and professional processing of personally identifiable information (PII) and sensitive financial documentation.

As a Wyoming-domiciled limited liability company facilitating bespoke charter operations across the Mediterranean and internationally, our data infrastructure is engineered to comply with the most stringent global privacy frameworks. This encompasses:

• The General Data Protection Regulation (GDPR) for our European clientele.
• The California Consumer Privacy Act (CCPA/CPRA) for our US-based network.
• The Statutory Mandates of the State of Wyoming, USA.

To deliver a seamless, high-end advisory service, we classify and process data under strict confidentiality protocols:

We integrate elite, enterprise-grade systems to manage our proprietary advisory database and bespoke marketing initiatives.

• Analytics & Engagement: We utilize Google Analytics and Google Ads to ensure our digital presence precisely meets the expectations of our market, delivering relevant opportunities across the digital landscape.
• CRM & Lead Intelligence: We deploy professional-grade solutions, including HubSpot and Apollo.io, to securely manage client relationships and verify global network accuracy.

Client data is fortified utilizing industry-standard cryptographic protocols and secure server environments. Highly Confidential Client Data (such as KYC documentation) is retained strictly for the duration necessitated by international maritime law, tax compliance, and financial auditing standards, after which it is systematically and securely expunged from our active infrastructure.

In accordance with overarching international laws, our clients retain ultimate sovereignty over their digital footprint. You possess the statutory right to:

• Request a comprehensive audit of your data currently held by the Company.
• Demand the rectification or immediate erasure ("Right to be Forgotten") of your records, subject to overriding legal retention mandates.
• Opt-out of any strategic marketing communications or digital tracking.

When you subscribe to one of our journals (The Bridge, The Wake, The Compass, or Από την Ελλάδα) we collect a minimal data footprint to deliver and audit those communications:

• Your email address
• The journal(s) you actively subscribed to
• The date and method of subscription (form, re-engagement, or hand-added invitation)
• Engagement signals — whether each issue was opened or whether links were clicked

Legal basis: explicit consent for self-served signups; legitimate interest for prior business contacts engaged within the last twelve months and given a clear, frictionless opt-out at every touchpoint.

Service providers. We rely on Resend for email delivery; Resend is GDPR-compliant and operates under EU/US Standard Contractual Clauses, retaining engagement metadata for up to thirty (30) days. We do not share newsletter data with any party other than Resend.

Retention. Active subscribers' data is retained while their subscription is active. Unsubscribed addresses are kept on a suppression list to prevent re-mailing. Subscribers who do not open any issue for twenty-four (24) months are automatically pruned.

Your rights. Every email contains a one-click unsubscribe link. You may request data export or deletion by writing to Contact us. Tracking pixels for opens and clicks are server-side only — no cookies are placed on subscribers' devices via newsletter emails.

For the execution of Data Subject Rights, formal inquiries concerning our privacy posture, or to update your records, please direct correspondence to our Compliance Office: