Privacy

Who runs this site

BoatRental.com is operated by Boat Rental INTL LLC, a Florida limited liability company. Boat Rental INTL LLC decides what personal data this site collects and why, which under European and UK law makes it the controller of that data.

BoatRental.com is a booking platform. A trip is arranged between the renter and the operator who owns the boat; the site is where the request, the messages and the listing live. That shapes what we hold: your side of a conversation with an operator, and the record of the request you sent them.

For anything on this page, write to info@boatrental.com.

What you give us

We collect the information you enter into our forms and the records of the actions you take. Payment details entered into Stripe’s card form go directly to Stripe. We do not receive or store your full card number or card security code.

Photos you upload go straight from your browser to our storage provider and are served publicly on your listing. We do not strip the metadata a camera or phone writes into an image file, which can include the place and time the photo was taken. If that matters to you, clear it before you upload.

Messages are scrubbed before they are stored, not when they are displayed. Phone numbers, email addresses, links, bare domain names and the names of messaging apps are replaced with a marker in the stored message. We do that to keep bookings on the platform rather than for your benefit — but the effect is real: a phone number typed into a chat here never reaches our database.

What the site records on its own

We run our own measurement to understand how people use the service. Every page view, and eight named clicks such as starting a booking request or switching market, are written to our database with the following:

• The path of the page, without its query string. This includes pages you can only reach signed in, such as your account, a message thread or an operator dashboard. Admin pages and API routes are not recorded.
• The site you arrived from, the campaign tags in the link you followed, and which channel that puts you in — search, an AI assistant, social, email or direct.
• Country, region and city, as our hosting provider works them out from your IP address at its network edge. City level, never a street.
• Device type, browser and operating system, read from your browser’s user agent.
• A visitor identifier that is a one-way hash of a secret, the date, your IP address and your user agent. The IP address itself is read, hashed and thrown away for this measurement; it is not stored with these measurement records. Agreement acceptance records separately retain the request IP when available. Because the date is part of the hash, the identifier changes every night and cannot follow you from one day to the next.
• A session identifier, worked out on our server by grouping that day’s events from the same visitor within thirty minutes of each other. Nothing is written to your browser to do this.
• The destination text typed into the search bar, up to 120 characters, plus the boat type, guest count and date filters used.
• Your account, if you are signed in at the time. This is the part worth reading twice: while you are signed in, the pages you visit are recorded against your account rather than against an anonymous visitor.

Traffic we identify as a bot or crawler is dropped and never stored. Nothing in this measurement is written to your device — see the cookie and tracking notice for what is, and for how to switch measurement off.

We also keep a history of booking and payment status changes, with the booking, time and the acting account when one is available. Together with agreement acceptance records, this helps establish what was agreed and what happened if there is a support request, refund or dispute.

Our hosting provider also runs its own page-view and page-speed measurement on every page, and holds the server logs that any web host holds: the request, the time, your IP address and your user agent.

If you allow optional Google Analytics, Google also measures visits to public pages using analytics cookies. We send the public page address without its query string or fragment, a page title and a limited referring address. We do not send account identifiers, email addresses, booking or payment details, form contents or messages to Google Analytics. It is disabled on sign-in, account, dashboard, messaging, admin and payment pages. You can decline it or change your choice on the cookies and tracking page.

Why we hold each thing

Accepting the Terms of Service or Operator Agreement records your agreement to the service contract. It does not give us permission to use your data for unrelated marketing or advertising. We use the purposes and legal bases below for our data processing. These are the European and UK bases; elsewhere, the table describes what each record is for.

People inside Boat Rental INTL LLC with administrator access can read every booking and every message thread. That is how support and disputes get handled, and you should assume a message sent here is readable by us as well as by the person you sent it to.

Who else sees it

We do not sell personal data and we do not share it for anyone else’s marketing. The services below receive information because they provide parts of the site and its payment flow.

There is no Google Tag Manager container, Meta pixel, session recorder, error tracker, chat widget, map provider or advertising network on this site, and no external fonts. Images load from our own storage and nowhere else.

Three disclosures happen between users, and each is worth saying out loud. When you send a booking request, the operator is told your dates and guest count and gets your note, along with any name held on your account — and since nothing on this site asks a renter for one, in practice there is none. When you send a message, the notification email to the other party shows your email address as the sender name, so the counterparty in a thread learns the address you signed in with. And when an operator accepts a booking that the two of you settle directly rather than by card through this site, each of you is shown the other’s name, email address and phone number on that booking so you can arrange payment and meet. Nobody else sees them, and they are not shown for a request or for a trip paid by card through the site.

Operator listing details are published on the open web: business name, phone number, website, description and, where we hold them, the street address, postal code and map coordinates of the business. They appear in the page and in the structured data search engines read. A sole trader listing under their own name is publishing that name.

We would also disclose data if the law required it of us. Nothing else leaves.

Where it is processed

Boat Rental INTL LLC is a Florida company and runs the site from the United States. Our service providers include Supabase, Vercel, Resend, Stripe and, if you allow optional analytics, Google. Using this site from the EEA or the UK therefore involves your personal data being transferred to and processed in the United States.

How long we keep it

The honest answer is that nothing on this site deletes itself. There is no retention timer running in the background, and we are not going to write a schedule here that the software does not enforce.

Accounts, bookings, payment records, messages, listings and measurement records are kept for as long as the service runs or until someone removes them by hand. A booking or a message thread stays after a trip is over because it is the record of what was agreed, and it belongs to both sides of it. We have a tool that trims measurement records older than a set window, but it is run by a person, not on a schedule.

Agreement acceptances and booking history are kept as evidence of the terms and actions recorded. There is no automatic deletion schedule for these records. A deletion request is reviewed alongside any contractual, legal or dispute-related reason to retain particular evidence, and we explain the outcome to you.

If you want your data gone sooner, ask us. That is the next section.

Your choices, and how to use them

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask for it in a machine-readable file to take elsewhere, ask us to restrict what we do with it, or object to our measurement. Write to info@boatrental.com from the address on your account and say which one you want.

There is no button for any of this. A person reads the request and does the work against the database, and we would rather tell you that than build a settings page that sends an email to the same inbox. We aim to answer within a month; if a request needs longer we will say so and why.

• What you can already see for yourself: your bookings and trips under your account, your message threads, and, if you are an operator, your listing and boats, which you can edit or take down at any time.
• Deletion is manual and we will tell you what it means before we do it. Where a booking or a message thread is also the other party’s record of a deal they made, we will explain what can be removed and what has to stay before anything is deleted.
• To stop our own measurement in a browser, load any page on the site with ?br_optout=1 on the end of the address. Switch it back on with ?br_optout=0. It is per browser, and it does not cover our hosting provider’s own measurement.
• Optional Google Analytics has a separate choice on the cookies and tracking page. Withdrawing that consent stops further Google Analytics measurement in this browser and removes its analytics cookies.

Children

This service is not directed at children. It is not intended for anyone under 13, or under 16 in the EEA and the UK, and we do not knowingly collect data from them. We do not verify anyone’s age: there is no age gate on this site and we are not going to claim otherwise. Individual operators may set a minimum age for their own trips, which is a rule about the boat, not a check we perform.

If you are a parent or guardian and a child has given us data, write to us and we will delete it.

If you are in the EEA or the UK

Our published destinations are in the United States and the Caribbean. If the GDPR or UK GDPR applies to our processing of your personal data, the controller is Boat Rental INTL LLC, reachable at info@boatrental.com. Everything above applies to you; this section explains the additional rights available under those laws.

• Your rights are access, rectification, erasure, restriction, portability and objection, and they are exercised by writing to us as described above. Agreement acceptance is a record of your service contract; your privacy choices and rights remain available as described on this page.
• You can object to the processing we do on legitimate interests, which in practice means our measurement. Tell us and we will stop it for your account; in a single browser you can stop it yourself with ?br_optout=1.
• Some operator listings were built by us before the operator had an account, from information about the business rather than from the business itself. That includes a business contact address, which we hold for one purpose: so the operator can prove the listing is theirs and take it over. It is not published and it is not used for marketing. If a listing about your business is here and you did not create it, write to us and we will hand it over or take it down.
• Nothing here makes automated decisions about you, and we do not profile you for advertising.
• Your data is processed in the United States, as set out above.

If you think we have got this wrong, tell us first — we would rather fix it. You also have the right to complain to a supervisory authority: in the EEA, the data protection authority of the country you live or work in, and in the UK the Information Commissioner’s Office at ico.org.uk. You do not need our permission to do that.

Changes to this page

When what we do changes, this page changes with it and the date at the top moves. We keep no mailing list, so this page is the notice: if a change matters to how we handle your data, it will be described here in plain terms rather than folded into a paragraph.