Privacy Policy

Who we are

WhichFlagToFly is operated by WhichFlag LLC, a limited liability company formed in Wyoming, at 32 N Gould St, Ste R, Sheridan, WY 82801, United States ("we", "us"). We decide how and why the personal information described here is used, which makes us its controller. Contact: info@whichflagtofly.com.

WhichFlagToFly publishes information about registering yachts and private aircraft, and runs an introduction service: if you send us an inquiry, we pass it to one or more firms that can help with the countries and services you asked about, and share your contact details once a firm agrees to speak to you. You pay nothing. A firm we introduce you to may pay us a referral fee. We do not provide legal, tax or registration services ourselves.

This policy covers the website and the inquiry form. It does not cover what a firm does with your information after we introduce you; the firm's own privacy notice covers that.

What we collect

Information you give us in the inquiry form:

• your name, email address and, if you choose to give it, your phone number;
• whether you are the owner or are acting for one (for example as a family office, captain, manager, broker or advisor);
• the vessel or aircraft type, what you want to do (for example register, reflag or buy), the countries you are considering, the services you need, your timing and an approximate value band;
• anything else you write to us, including by email.

The form saves your answers as you move between steps so that a refresh does not lose them. Your name, email address and phone number are saved only when you submit.

Information collected automatically:

• Campaign tags. If you reached the form from a link carrying campaign tags (such as utm_source), we store those tags with your inquiry, along with which button on the site opened the form.
• Usage data. Pages viewed, links and buttons clicked, the referring page, device and browser type, page load times, and approximate location (country or region) derived from your IP address. With your consent, or by default in the United States and other opt-out regions, this also includes session replays with everything you type masked. Details and your choices are in the Cookie Notice.
• Technical data. Our servers and our hosting provider see your IP address with every request. We use it to deliver the page and to limit abusive traffic. Our own event records do not store it.

Information from others: a firm we introduced you to may tell us whether it reached you and whether you engaged it.

We do not buy personal information, we do not add data about you from other sources, and we do not ask for sensitive information such as identity documents, financial account details or health information. Please do not send it to us.

How we use it, and our legal bases

The legal-basis column applies if you are in the European Economic Area (EEA), the United Kingdom or Switzerland.

You can withdraw consent at any time in Cookie settings; that does not affect what happened before. You can object to uses based on legitimate interest. We do not make decisions about you based solely on automated processing: a person reads every inquiry.

Who we share it with

• Firms. We first pass your inquiry answers (the asset, the countries and the services you need, without your name or contact details) to one or more firms that can help with what you asked about, by email. Once a firm agrees to speak to you, we share your name and contact details with that firm and introduce you by email. Each firm then uses your information as its own controller, under its own privacy notice.
• Service providers that act on our instructions: website hosting, our database, the email providers we send through, and analytics (PostHog and Google Analytics, described in the Cookie Notice).
• Professional advisors such as lawyers and accountants, where we need advice.
• Authorities, where the law requires it or to establish or defend a legal claim.
• A buyer or successor, if the business is sold or reorganized, subject to this policy.

Do Not Sell or Share My Personal Information

We do not sell personal information for money. We do not share it for cross-context behavioral advertising: the site has no advertising cookies, pixels or ad targeting. Passing your inquiry to a firm is something you ask us to do, so it is not a sale under the California Consumer Privacy Act or similar state laws, even though the firm may pay us a referral fee.

You can still limit what we collect:

• Turn off analytics at any time from Cookie settings or Do Not Sell or Share My Personal Information in the site footer.
• Send the Global Privacy Control signal from your browser. We treat it as an opt-out of sale and sharing and as a refusal of all optional cookies, and we do not show you the cookie notice.
• Email info@whichflagtofly.com and we will record your opt-out.

We do not collect sensitive personal information as defined by California law, so there is nothing to limit under the right to limit its use.

International transfers

We are based in the United States. Our database, email and analytics providers process information in the United States. If you are in the EEA, the United Kingdom or Switzerland, you send your information directly to us in the United States, where data protection law differs from yours. Where our providers transfer personal information further, they do so under their own transfer terms. Ask us at info@whichflagtofly.com if you want to know more about a particular transfer.

How long we keep it

We have not yet set fixed deletion dates for inquiry records. Until we do, we keep them as long as we need them for the purposes above and delete them when you ask, unless the law requires us to keep them.

Your rights in the EEA, the UK and Switzerland

You have the right to access your personal data, to have it corrected or erased, to restrict or object to its use, to receive it in a portable format, and to withdraw consent. You can also complain to a data protection authority: the Information Commissioner's Office in the UK, the Federal Data Protection and Information Commissioner in Switzerland, or the authority where you live or work in the EEA. We have not appointed a representative in the EU or the UK.

Your US state privacy rights

If you live in California or another US state with a consumer privacy law, you have the right to:

• know what personal information we collect, use and disclose, and get a copy of it;
• delete it;
• correct it;
• opt out of its sale or sharing, and of profiling that produces legal or similarly significant effects (we do none of these);
• limit the use of sensitive personal information (we collect none);
• not be discriminated against for using any of these rights.

In the last 12 months we collected these categories, as the California Consumer Privacy Act names them:

We use these for the purposes in "How we use it" above, and keep them as set out in "How long we keep it". We have not sold or shared any of them in the last 12 months.

How to use your rights

Email info@whichflagtofly.com from the address you used with us and say what you want. If we cannot match your request to what we hold, we will ask for the minimum extra information needed to confirm it is you. An authorized agent can make a request for you with your signed permission, and we may ask you to confirm your identity with us directly. If we refuse a request, you can appeal by replying to our decision.

We confirm a US state request within 10 business days and answer within 45 days, or 90 days if we tell you we need longer. We answer a GDPR or UK GDPR request within one month, extendable by two months for complex requests. We do not charge for requests unless they are clearly unfounded or excessive.

Children

The site is not directed at anyone under 18, and we do not knowingly collect personal information from children. If you think a child has sent us information, email info@whichflagtofly.com and we will delete it.

Security

The site is served only over encrypted connections. Inquiries are kept in our database and our email account, and only our own staff can access them. No system is completely secure, so we cannot guarantee that information will never be accessed without permission.

Changes

If we change this policy we will post the new version here with a new effective date. If a change materially affects how we use information we already hold, we will say so on the site before it takes effect.

Contact

Privacy questions and requests: info@whichflagtofly.com, or by mail to WhichFlag LLC, 32 N Gould St, Ste R, Sheridan, WY 82801, United States.

Effective 22 September 2026.