This policy explains what information Boat Capri Sydney (Bizfunfu Pty Ltd trading as Sydney Charter Boat Hire, ABN 72 150 519 208) collects, why, and what you can do about it. We are bound by the Australian Privacy Act 1988 and the Australian Privacy Principles.

In short

We collect what we need to run your booking: name, mobile, email, hire details and the ages of any children.
Card payments are processed by Stripe. We never see or store your full card number.
We text you about your booking. Reply STOP to opt out of anything that is not essential to your hire.
We use analytics and advertising cookies (Google, Meta) with your consent, and cookieless analytics (Plausible) without.
We only publish photos of you, or your posts, with your permission — which you can withdraw at any time.

What we collect

Depending on how you use the site, we collect:

Booking details: your name, mobile number, email, the date, start time and hours booked, number of people, children’s ages, nominated driver’s name, how you heard about us, any notes you add, and add-ons chosen.
Enquiry details: whatever you put in a contact, catering, skippered, Creator Hour or partner form — typically name, mobile, email, dates, group size and your message. Creator Hour applications also include your social handle, platform and optional follower count.
Payment records: the amount, date and Stripe payment reference. Not your card number.
Identification at the wharf: we sight photo ID for drivers. We do not copy or store it.
Technical data: pages visited, device and browser type, approximate location from your IP address, and the referring site — via the analytics tools below.
Content: photos or videos you share with us, tag us in, or submit under Creator Hour.

Bookings and payments

When you book, your details are stored in our booking database (MongoDB Atlas, hosted in the cloud) so we can run your hire, contact you about it and meet our record-keeping obligations. Payment is taken by Stripe under Stripe’s privacy policy; we receive a payment confirmation and reference, not card details.

A notification with your booking summary is sent to the operator’s phone through a private Discord webhook so we can prepare for your hire. Booking confirmations and receipts are emailed through Resend.

Text messages

We use SMS as our main way of talking to you: your booking confirmation, a day-before plan, the 7am weather call, replies to your questions, and a thank-you after your hire with a link to leave a review. Messages about your booking are essential and cannot be turned off while the booking is live. Reply STOP to any message to opt out of everything else. We do not send marketing SMS campaigns.

Analytics and advertising cookies

We use Google Tag Manager to load Google Analytics 4, Google Ads conversion tracking and the Meta (Facebook/Instagram) Pixel. These set cookies and similar identifiers to measure how people find and use the site and to measure and improve our advertising. Google Consent Mode v2 is in place: in Australia these tags run by default and you can turn them off in Cookie settings in the footer; for visitors from the EU, UK and other regions that require consent, nothing non-essential runs until you accept.

We also use Plausible Analytics, which is cookieless and does not identify you. Live wind data comes from Open-Meteo and our Google rating from the Google Places API; neither receives any personal information about you.

Photos, reels and your posts

We film and photograph the boat and the wharf for our website and social channels. If you are identifiable in an image we want to publish, we ask first. Photos and videos you post and tag @capri.down.under or #capridownunder are only republished on our site or channels with your permission — a reply or DM saying yes, or a Creator Hour application — and we record where that permission came from.

To withdraw permission, email boatcaprisydney@gmail.com with a link to the post or page. We remove the content from our site and channels within 14 days; copies others have made, or platform caches, are outside our control.

How long we keep it

Booking and payment records: seven years, as required for Australian tax and business records.
Enquiries that do not become bookings: up to two years, then deleted.
Creator Hour records (handle, dates, links, permission): for as long as the content is published, plus 12 months.
Analytics data: per each provider’s retention setting (GA4 is set to 14 months).
SMS and email conversations: retained on our devices and providers’ systems for as long as needed to deal with your booking and any dispute.

We share information only with the providers needed to run the service, and we do not sell it.

Stripe (payments), Resend (email), MongoDB Atlas (database hosting), Vercel (website hosting), Discord (internal booking notifications).
Google (Analytics, Ads, Tag Manager, Places) and Meta (Pixel) as described above.
Marine Rescue NSW, NSW Maritime or emergency services if there is an incident during your hire.
Some providers store data outside Australia (typically the United States). We choose providers with recognised privacy and security standards.

Security

The site is served over HTTPS. Card data never touches our servers. Access to the booking database is restricted to the operator and protected by credentials and network rules. No system is perfectly secure; if we become aware of a breach that is likely to cause you serious harm, we will notify you and the OAIC as the law requires.

Your rights

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Email boatcaprisydney@gmail.com and we will respond within 30 days.

If you are unhappy with how we have handled your information, tell us first and we will try to fix it. You can also complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Visitors from the EU and UK

If you are in the European Economic Area or the United Kingdom, the GDPR or UK GDPR may also apply. Our lawful bases are contract (running your booking), legitimate interests (running and protecting the site) and consent (analytics and advertising cookies, which you can withdraw in Cookie settings). You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your local supervisory authority.

Contact

Privacy questions: boatcaprisydney@gmail.com, or text 0431 506 644. Post: Bizfunfu Pty Ltd trading as Sydney Charter Boat Hire, Le Montage wharf, Maliyawul St, Lilyfield NSW 2040. We may update this policy; the date at the top shows the current version.