Skip to content
The Hornblower Yachting logo with a clear background

Privacy policy

Last updated: January 2026

1. Who we are

This website is operated by Hornblower ("we", "us", "our").

Website: https://hornblower.co.uk Email: info@hornblower.co.uk

Hornblower is the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Personal data we collect and how we use it

A) instant estimates and enquiries

When you request an instant estimate or submit an enquiry through our website, we collect personal information including your email address and any other details you choose to provide.

Your email address is required in order for us to:

  • Generate and deliver your instant estimate
  • Communicate with you regarding your enquiry
  • Carry out related administrative and customer service activities

Lawful basis:

  • Performance of a contract or taking steps at your request prior to entering into a contract
  • Legitimate interests (responding to enquiries and providing estimates)

B) information provided by brokers or intermediaries

In some cases, an insurance broker or other intermediary may submit personal data on behalf of a client, including email address and estimate details.

Where this occurs:

  • The broker or intermediary confirms they have the authority and appropriate lawful basis to provide the client's personal data to us.
  • We process the data solely for the purposes of providing the requested estimate, responding to the enquiry, and related administrative activities.

Lawful basis:

  • Legitimate interests
  • Performance of a contract or pre-contractual steps

C) marketing communications

We will only send marketing communications by email where you have explicitly opted in.

We use Mailchimp to manage email communications. You can unsubscribe at any time using the link in our emails or by contacting us directly.

Mailchimp may process data outside the UK, but appropriate safeguards are in place in accordance with UK GDPR.

Mailchimp privacy policy: https://mailchimp.com/legal/privacy/

Lawful basis: Consent.

D) comments

When visitors leave comments on the site, we collect the data shown in the comments form, along with the visitor's IP address and browser user agent string to help with spam detection.

An anonymised string (hash) created from your email address may be provided to the Gravatar service. Gravatar privacy policy: https://automattic.com/privacy/

Lawful basis: Legitimate interests.

E) media

If you upload images to the website, please avoid including embedded location data (EXIF GPS). Visitors may be able to extract such data from images.

3. Cookies and analytics

We use cookies to ensure the website functions correctly and to improve performance.

Essential cookies are required for site functionality. With your consent, we also use Google Analytics to understand how visitors use our website.

Google Analytics collects information such as pages visited, time spent on the site, and how users arrive at the site. IP addresses are anonymised where possible.

Google may process data outside the UK with appropriate safeguards in place.

Google privacy policy: https://policies.google.com/privacy/

Lawful basis: Consent.

4. Who we share your data with

We do not sell your personal data.

We may share data with trusted service providers where necessary, including:

  • Google (analytics)
  • Mailchimp (email communications)
  • Spam detection services

If you request a password reset, your IP address will be included in the reset email.

5. Data retention

  • Estimate and enquiry data is retained only as long as necessary for business, legal, and administrative purposes.
  • Marketing data is retained until you unsubscribe or request deletion.
  • Comments and their metadata are retained indefinitely for moderation purposes.
  • User account data (where applicable) is retained while the account remains active.

6. Your rights

You have the right to:

  • Access your personal data
  • Request correction or deletion
  • Object to or restrict processing
  • Withdraw consent at any time (where consent applies)

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

7. International data transfers

Some third-party providers may process personal data outside the UK. Where this occurs, appropriate safeguards are in place in accordance with UK GDPR.

8. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page.