Privacy Policy

Bookings. Your name, email and phone number; the service, date, lake and group size; your pickup location; details of your boat if we are working on or driving it; how you heard about us; and any notes you add.

Summer camp. The parent or guardian’s contact details, two emergency contacts, and for each camper: name, age, gender, dietary needs, allergies, medications and medical conditions, and their lunch choice.

Liability waivers. The participant’s name, postal address, phone and email; the parent or guardian’s details for a minor; an emergency contact; a minor’s allergies, medications and medical conditions; your typed signature and initials; your photo and video choice; and, as evidence of signing, the date and time, your IP address and your browser type.

Shop orders. Your name, email, phone number, shipping address and what you ordered.

Forms. What you enter in our contact, custom package, concierge, referral, survey, software enquiry and job application forms, including a résumé you upload.

Payments. Card payments are handled by Stripe, including cards tapped in person. We never receive or store your full card number. We keep a record of the payment — the amount, date, status and a Stripe reference.

Messages and calls. Emails and text messages (including iMessage) you exchange with us, along with any photos you send; call logs showing the number, time and length of a call; and voicemail recordings and their transcripts. Our team also keeps notes about your bookings and preferences.

Information about other people. If you give us someone else’s details — a camper, an emergency contact, friends splitting a payment, or a friend you refer — please make sure you have their permission.

Unfinished camp registrations. What you enter on the camp registration form is saved to Board Bound as you go, before you submit, so we can help if you get stuck. Registrations that are never finished are deleted after 30 days.

Photos and video. We photograph and film lessons, charters and camps. See Section 6.

Our boats’ location. Our boats may carry GPS trackers that record the boat’s position and engine data for safety and maintenance. This shows where the boat was during a session; it does not track you or your devices.

Website usage. Your IP address, browser and device type, the pages you view, how you reached us, and, if you came from one of our ads, the ad click identifier. See Section 5.

From others. Camp registrations made through a partner platform, payment confirmations from Stripe, and public Google reviews, which we display with the reviewer’s public name and photo.

We do not sell your personal information. We share it only with companies that help us run the business, and only what each needs:

• Payments: Stripe (privacy policy)
• Hosting and database: Vercel and Supabase
• Email: Google (Gmail) and email delivery providers
• Text messages and phone: Sendblue, Chert and Twilio
• Scheduling: Google Calendar, where a booking’s details are added to our staff calendar
• AI assistance: Anthropic, which processes messages to help us draft replies and summaries
• Analytics and advertising: PostHog (privacy policy), and Google Analytics, Google Tag Manager and Google Ads (privacy policy), and Meta, for Facebook and Instagram ads (privacy policy)
• Staff notifications: Apple and Telegram, which deliver alerts about bookings and messages to our team
• Boat tracking: Blues, which carries our boats’ GPS and engine data
• Shipping: the carrier that delivers your shop order
• Partners you choose: a camp platform you register through, and the independent vendor that stocks food or drinks you order for a charter
• Social media: Instagram and Facebook, when we post photos or video (Section 6)

With Google Ads we share limited conversion data — the ad click identifier, the transaction value and the date — when a booking or purchase began from one of our ads. We do not send Google your name, email or phone number for advertising.

With Meta (Facebook and Instagram) we share conversion data when you book, register, buy or request a concierge quote: the event, its value and date, Meta’s click and browser identifiers, and your email, phone number and name in hashed (scrambled) form. Meta uses the hashed details only to match the conversion to an ad you may have seen; it cannot read them back. We use this only to measure our own campaigns.

We may also disclose information where the law requires it, to respond to a payment dispute, to protect someone’s safety, or to a buyer if the business is sold. Your information is processed in the United States.

If you give us a mobile number, we text you about your booking — confirmations, reminders, weather updates and payment links. Message frequency varies and message and data rates may apply. Reply STOP to stop automated and marketing texts; we may still reply to messages you send us and send a payment link you ask for. Reply START to opt back in.

Calls, voicemails and text conversations with us may be recorded and transcribed, and may be handled with the help of the automated tools described in Section 3. We do not share your mobile number or text-message consent with anyone for their own marketing.

• Booking, payment and order records: as long as needed for accounting and tax purposes
• Signed waivers: for the period in which a legal claim could be brought, which is longer for minors
• Unfinished camp registrations: deleted after 30 days
• Messages, call logs, voicemails and customer notes: while you are a customer and for a reasonable period afterward
• Marketing contacts: until you unsubscribe or ask us to delete them
• Website analytics: according to our analytics providers’ retention settings

We may update this Privacy Policy to reflect changes in our practices or the law. We will post the updated policy on this page with a revised “Last updated” date.