Privacy Policy.

THEOBLUE TRAVEL, SAS with its registered office at Central Park, 4 rue Lord Byron, 06400 Cannes, France, is the controller for private enquiries submitted through TBL Yachts.

Company

THEOBLUE TRAVEL

Legal form

Société par actions simplifiée (SAS)

Share capital

2 500 EUR

Registered office

Central Park, 4 rue Lord Byron, 06400 Cannes, France

SIREN

891 017 717

SIRET

891 017 717 00028

VAT number

FR10 891 017 717

Operational email

sophie@tblexclusive.com

Telephone

+33 6 08 22 20 60

The enquiry form may collect identity, professional contact details, company, project category, occasion, dates, estimated guest count, route or location, budget band, free-text context, language, source page, privacy-notice acknowledgement, anti-abuse field and submission timestamp. Technical security logs may also be generated.

Fields marked with an asterisk are necessary to qualify and answer the enquiry under the present professional-contact workflow. Without them, the request cannot be submitted. Other fields are optional. Do not send health data, identity documents, political or religious opinions, or other sensitive information in free text.

Enquiry and proposal

Receive, assess feasibility, reply and prepare a proposal — pre-contractual steps requested by you (Article 6(1)(b) GDPR).

Security

Protect the service, investigate errors and prevent abuse — legitimate interests balanced against users’ rights.

Optional audience measurement

Understand aggregate use when configured — consent, which may be refused or withdrawn without affecting the enquiry.

No marketing consent is collected through this enquiry form. Contact details are not sold or rented. Any future electronic marketing must be separately documented and provide the consent or right to object required for the recipient’s status.

Access is limited to authorised TBL personnel and technical providers necessary to host, store, route or notify the enquiry. Relevant operational information may later be shared with the yacht operator, captain, port, venue or project partner only to assess or deliver the requested service and under an appropriate contractual framework.

The application is deployed through the Manus platform provided by Butterfly Effect Pte. Ltd. Manus’ public privacy policy states that it is headquartered in Singapore, may process data in the United States or other locations, and may act as processor for Space Owners. The project-specific data-processing agreement, subprocessors, locations, retention and lawful transfer mechanism remain to be verified contractually; no particular safeguard is claimed until that review is complete.

An enquiry that does not lead to a contract is retained for no longer than three years after the last meaningful contact, unless a shorter period is appropriate. If a contract is formed, the contractual file and accounting records are retained for the statutory or evidential periods applicable to them. Security logs and rights requests are retained only for documented operational or legal periods. Deletion, restricted archiving or legal hold is applied according to category and purpose.

Subject to the GDPR conditions, you may request access, rectification, erasure, restriction, portability or object to processing. You may withdraw optional analytics permission through Cookie settings. Write to sophie@tblexclusive.com or to THEOBLUE TRAVEL at the registered office, stating “Data-protection request”. Only information necessary to identify and answer the request will be sought. A response is normally provided within one month, subject to the lawful extension for complex or numerous requests.

You may also lodge a complaint with the French Data Protection Authority, the CNIL. cnil.fr

Strictly necessary local storage records the privacy choice needed to operate the preference interface. The `tbl-cookie-choice` key stores the chosen value, decision date, expiry date and notice version on the device for 183 days. It is not used for advertising.

When configured, the Umami audience-measurement script is loaded only after permission. Refusal is offered at the same level as acceptance and does not affect the enquiry. Withdrawing permission removes the script and clears Umami- or analytics-labelled first-party storage accessible to the application. The exact production endpoint, provider role, data categories and retention settings must be verified before analytics is activated in production.

The service uses transport encryption, access controls, input validation and anti-abuse measures. No decision producing legal or similarly significant effects is made solely by automated processing in the enquiry workflow; a person reviews feasibility before any response or proposal.

This policy will be revised when providers, processing locations, purposes or legal requirements change. Contractual information still under verification is expressly identified rather than inferred.