REQUEST AN ENQUIRY

Privacy Policy

Last updated: September 2026

1. Who We Are

Wave Pirates / WavePirates operates wavepirates.com. We provide professional maritime services including vessel deliveries, technical surveys and dockyard assistance to shipping companies, fleet managers, yacht owners and maritime professionals worldwide.

For privacy-related matters, contact us at captain@wavepirates.com.

2. What Data We Collect

Data you provide directly

When you submit an enquiry through our website form, we may collect:

  • Enquiry type
  • Current location
  • Project destination / area
  • Asset profile
  • Operational status
  • Timeframe
  • Name / company, or first name and surname where the form asks for them separately
  • Email address
  • Phone number
  • Notes and project details you choose to provide

Data collected automatically

When you visit our website, we or our service providers may collect:

  • IP address
  • Browser type and version
  • Pages visited and time spent on site
  • Referring website or source
  • Device type and operating system
  • Approximate country, region, region code, city, timezone and Cloudflare edge location (colo) supplied by Cloudflare when an enquiry is submitted (not GPS or precise location)
  • Preferred language from the browser Accept-Language header when an enquiry is submitted

3. How We Use Your Data

We use personal data for the following purposes:

  • To respond to enquiries submitted through our website
  • To understand aggregated website usage and improve our content using Cloudflare Web Analytics
  • To understand optional, consent-based site usage through Google Analytics 4 when you accept analytics
  • To operate, secure and deliver the website through Cloudflare
  • To comply with legal obligations

Enquiry submissions are sent from your browser to our Cloudflare Worker endpoint at /api/enquiry, processed server-side, and delivered to our business mailbox. We do not store enquiry submissions in a website database. The enquiry email may also include the form source page, service interest, page URL, referring page, campaign parameters from the link you used, preferred language, browser and device family, and the approximate Cloudflare location above, so we can see how the request reached us. We do not add the visitor IP address to the enquiry email.

We do not sell, rent or share your personal data with third parties for their marketing purposes. Google advertising and remarketing are not enabled on this site.

Enquiry form contents (including names, email addresses, phone numbers, and message text) are not intentionally sent to Google Analytics.

4. Legal Basis for Processing

We process personal data on the following grounds under the GDPR:

  • Legitimate interest — to understand website use, maintain security, and respond to business enquiries.
  • Contractual necessity — when you request services or engage us, processing your data is necessary to respond to and fulfil that request.
  • Consent — where required by law, we will ask for your explicit consent before processing your data. Optional Google Analytics 4 measurement is enabled only after you accept analytics; you may reject analytics at any time.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

  • Enquiry form submissions are not stored in a website database. They are delivered by email to captain@wavepirates.com via Proton Mail.
  • Cloudflare Web Analytics and optional Google Analytics 4 retention periods are not published here because they are not set in this site's configuration.

6. Third-Party Services

We use the following third-party services that may process your data:

Cloudflare Web Analytics

We use Cloudflare Web Analytics to measure aggregated website usage. It is privacy-first and does not use client-side cookies or localStorage for usage metrics. Data is processed by Cloudflare. For more information, visit cloudflare.com/web-analytics.

Google Analytics 4 (optional, consent-based)

If you accept analytics, we use Google Analytics 4 to measure aggregated website usage. GA4 is not loaded if you reject analytics. Google advertising, remarketing, Google Signals, and Google Ads are not enabled. We do not intentionally send enquiry form contents to Google Analytics. You can change your choice at any time via the Analytics preferences link in the site footer. For more information, visit policies.google.com.

Cloudflare (hosting and security)

Our production website is hosted and delivered through Cloudflare Workers and Static Assets. Enquiry form submissions are processed server-side by a Cloudflare Worker before delivery to our email system. Cloudflare may process technical data such as IP addresses for security and performance. For more information, visit cloudflare.com/privacypolicy.

Cloudflare Turnstile

The enquiry form uses Cloudflare Turnstile as an anti-abuse control against automated traffic. It is part of the essential security path for form submission and is separate from optional Google Analytics 4.

Proton Mail

Enquiry messages are delivered to our business mailbox hosted with Proton Mail. Data you submit through the enquiry form is transmitted to us by email for response purposes.

Google Fonts

Typography is loaded from Google Fonts. Your browser may send technical data such as your IP address to Google when font files are requested.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing based on legitimate interest

To exercise any of these rights, contact captain@wavepirates.com. We will respond within the period required by applicable law.

8. Cookies

We use third-party cookies and similar technologies as described in our Cookie Policy.

9. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. Our website is served over HTTPS/TLS encryption through Cloudflare.

10. International Transfers

Some third-party service providers may process data outside the European Economic Area (EEA). We do not publish specific processing locations or transfer safeguards that are not confirmed in this site's configuration.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated revision date.

12. Contact Us

If you have questions about this Privacy Policy or how we handle personal data:

You also have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully.