Privacy Policy

1. Overview

ShipShape & Co. Limited (NZBN 9429053716934, "we", "us") respects your privacy and handles personal information in line with the New Zealand Privacy Act 2020. This policy explains what we collect, why, and how it's stored when you register for or use our boat valet and cleaning services at the Outboard Boating Club, Parnell, Auckland.

2. Information We Collect

• Account details: first and last name, email address, phone number, and your preferred payment method.
• Boat details: boat name, make, model, length, hardstand position, and any notes you provide about your boat or trailer.
• Booking & service history: dates, service type, pricing, payment status, and bundle credit usage.
• Photos: before and after photos taken during launch, retrieval, and cleaning jobs.
• Payment information: if you pay by card, your card details are entered directly into Stripe's secure payment form — we never see or store your full card number.

3. How We Use Your Information

We use this information to create and manage your account, schedule and price bookings, coordinate boat handling and (for Hardstand Members) yard logistics with the OBC, communicate with you about your bookings, keep accurate service and payment records, and resolve any disputes about the condition of your boat before or after a service.

4. Boat & Service History

If you remove a boat from your account, we keep its booking, job, and photo history on file rather than deleting it immediately. This protects both you and us — for example, it preserves your record of how many launches you've used, and keeps photo evidence of past work — and helps with warranty, insurance, or dispute situations. This history is not shown to you in the dashboard once a boat is removed, but it remains part of our operational records.

5. Who We Share It With

We don't sell your information. We share it only as needed to run the service:

• Stripe — processes card payments. Stripe handles your card details directly and may process payment data on servers located outside New Zealand, subject to its own security and privacy safeguards; see Stripe's privacy policy.
• Supabase — our database and account provider, which stores your account, booking, and photo data on secure servers located in Australia.
• Outboard Boating Club — we may share limited booking or yard-position information with OBC staff where needed to coordinate hardstand access for Hardstand Members, or to confirm membership status for any member.

6. Data Storage & Security

Your data is stored in a Postgres database with row-level security, meaning your account can only see your own data, and access by our staff is limited to what's needed to run the service. Passwords are hashed and never stored in plain text.

7. Data Retention

We retain your account and service history for as long as your account is active, and afterwards for as long as reasonably needed for business and legal record-keeping (for example, payment and warranty records).

8. If Something Goes Wrong

If we experience a privacy breach that we reasonably believe has caused, or is likely to cause, serious harm, we'll notify the Office of the Privacy Commissioner and the affected individuals as required by the Privacy Act 2020, and take reasonable steps to reduce any harm.

9. Your Rights

Under the Privacy Act 2020, you can ask us for access to the personal information we hold about you, and ask us to correct it if it's wrong. To make a request, email jake@shipshapeandco.nz. If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner.

10. Cookies & Tracking

Our website does not use third-party advertising or analytics cookies. We use only the technical session data needed to keep you logged in.

11. Changes to This Policy

We may update this policy from time to time. The current version will always be available on this page with its last-updated date.

12. Contact

Questions about this policy or your data? Email us at jake@shipshapeandco.nz.