Crystal River Kayak Company & Dive Center Privacy Policy

The business responsible for your personal information (the "data controller," where that term applies) is:

Crystal River Kayak and Dive Company LLC
d/b/a Crystal River Kayak Company and Dive Center
1420 SE US Hwy 19
Crystal River, FL 34429
United States
Phone: (352) 795-2255
Email: CRKayakAndDive@gmail.com

If you have any questions about this policy or about how we handle your information, contact us using the details above. For privacy-specific requests, please put "Privacy Request" in your subject line so we can route it quickly.

We collect only the information we need to take a booking, deliver a safe trip, run our shop, operate our website, and meet our legal obligations. The categories below describe what we collect and where it comes from.

Information you give us when you book or contact us. When you reserve a kayak rental, a kayak or boat tour, a dive course or trip, or when you contact us through our website form, by phone, or by email, we collect the information you provide. This typically includes your name, email address, and phone number, and the details of the service you are booking, such as the date, the activity, and the number of people in your party. Most bookings are taken through our third-party booking provider, Peek (described below), which collects this information on our behalf.

Payment information. When you pay for a booking, your payment card details are collected and processed by our booking provider and its payment processors. We do not collect or store full payment card numbers on our own systems. We may receive limited confirmation details, such as the fact that a payment succeeded and the booking it relates to.

Waiver and check-in information. Before you go on the water, every participant (or the parent or legal guardian of a minor participant) completes our liability waiver. The waiver collects your printed name, your signature, a cell phone number, the date, and details of any equipment you rent (such as make, model, and color). The waiver also includes optional fields you may choose to complete: a checkbox to join our email list, your home ZIP or postal code, and a "how did you find us?" question (for example, whether you found us through an internet search, a printed ad, a referral, a repeat visit, TripAdvisor, a local park, or Visit Florida). The optional fields are exactly that, optional, and you can leave them blank without affecting your trip. Our waiver does not ask for medical history, emergency contacts, or date of birth.

Information about minors. Our services are booked and supervised by adults. We do not knowingly collect personal information directly from children. Where a child participates, the information we hold about that child (such as a first name or the fact that a minor is in the party) is provided by the parent or legal guardian who books the trip and signs the waiver on the child's behalf. See "Children's Privacy" below.

Basic server and security information. When you use our website, our hosting and security systems may automatically record technical information needed to deliver and protect the site, such as your IP address, browser or device information, requested pages, referring page, and the date and time of the request.

Analytics information, if you allow it. If you choose "Allow analytics," Google Analytics collects information such as your device type, browser, general location (typically at the city or region level, derived from your IP address), the pages you view, the links you click, and how you arrived at our site. We do not load Google Analytics if you decline. See "Cookies and Analytics" below.

Marketing preferences. If you opt in to our email list (on the waiver or otherwise), we collect and keep a record of that consent so we can send you occasional updates and so you can withdraw it later.

We use your information for the following purposes:

To take and manage your booking, including confirming your reservation, scheduling your trip, and contacting you about it. To deliver our services safely and lawfully, including administering the liability waiver and complying with the wildlife-protection and safety rules that govern activities in Kings Bay, Three Sisters Springs, and the Crystal River National Wildlife Refuge. To process payments through our booking and payment providers. To respond to your questions and requests when you contact us. To operate, maintain, and improve our website and understand how visitors use it. To send you marketing communications where you have asked us to, and to honor your choice to stop at any time. To keep records we are required to keep, to resolve disputes, and to enforce our agreements, including the assumption-of-risk and release-of-liability terms in our waiver. To protect the safety, rights, and property of our guests, our staff, our business, and the public.

Where the law requires a legal basis for processing (such as under the EU and UK GDPR), we rely on: the performance of our contract with you (to take and deliver your booking); our legitimate interests (to run, secure, and improve our business in ways that do not override your rights); your consent (for marketing emails and non-essential cookies); and compliance with legal obligations (such as tax, accounting, and safety record-keeping).

We are a local business, not a data broker. We do not sell your personal information. We share it only as described here:

With our booking provider, Peek. We use Peek (Peek Travel Inc.) to take and manage reservations and payments. When you book, the information you provide is collected and processed through Peek's platform. Peek handles that information under its own privacy policy and uses payment processors to handle card transactions securely. We encourage you to review Peek's privacy policy for details on how it processes your information.

With our analytics provider, Google. If you allow analytics, we use Google Analytics to understand how visitors use our website. We have disabled advertising storage, Google Signals, and advertising personalization. Google processes website usage data under its own terms and privacy policy. See "Cookies and Analytics" below for how to make or change your choice.

With Google Maps. Our Contact page offers an interactive Google Map. We do not load the map until you select "Load interactive map." When you do, Google may receive technical information such as your IP address, browser information, and the page you visited, and may process that information under its own terms and privacy policy.

With service providers who help us operate. We may share information with vendors who provide services to us, such as website hosting, email, and payment processing, only as needed for them to perform those services for us.

For legal and safety reasons. We may disclose information where we believe in good faith that it is necessary to comply with the law, a subpoena, or a lawful request; to enforce our terms and our waiver; to protect the safety of people or wildlife; or to protect our rights, property, or business.

In a business transfer. If our business is sold or its assets are transferred, your information may be part of that transaction, subject to this policy.

Some of these providers, including Peek and Google, are based in the United States. If you are visiting from outside the United States, see "International Visitors and Data Transfers" below.

Our website uses cookies and similar technologies. Cookies are small text files placed on your device. We use them in three broad categories:

Essential and preference cookies. Some cookies are necessary to operate the website, protect it, and remember choices you make. If analytics is enabled, we set a consent-preference cookie for 180 days so we can remember whether you allowed or declined analytics. That preference cookie is not used to track the pages you visit.

Booking cookies and services. We use Peek's booking tool so booking links can open its reservation experience. We load Peek's popup service only after you select a booking link. Peek may then receive technical information and may set its own cookies. Peek controls those cookies under its own privacy policy. If the popup is unavailable, our booking links continue to work as direct links to Peek.

Analytics cookies. We load Google Analytics only if you choose "Allow analytics." Google Analytics uses first-party cookies, including _ga and cookies whose names begin with _ga_, to distinguish visitors and sessions. Those cookies may remain for up to two years unless you delete them or withdraw permission. We use the resulting information to understand traffic and usage patterns, not for advertising. You can change your choice at any time by selecting "Privacy choices" in the footer. Google also provides an Analytics opt-out browser add-on, and you can block or delete cookies through your browser settings.

We do not use cookies to sell your information or to build advertising profiles about you. Declining analytics does not limit access to our website, contact form, or booking links. Blocking cookies used by Peek may affect its popup or booking process. Cookie names and behavior may change as those services update their systems.

We keep personal information only as long as we need it for the purposes described in this policy, and as long as the law requires. Booking and payment records are kept as needed to administer your trip, for accounting and tax purposes, and for the period during which a liability or safety claim could arise, consistent with applicable limitation periods. Signed waivers are kept for the period during which they may be legally relevant. Marketing-list information is kept until you unsubscribe or ask us to remove it. Our Google Analytics property is configured to retain user-level and event-level analytics data for 14 months; standard aggregate reports may remain available for longer. When we no longer need information, we take reasonable steps to delete it or render it anonymous.

We take reasonable administrative, technical, and physical measures to protect personal information against loss, misuse, and unauthorized access. Online bookings and payments are handled by established providers that use industry-standard security and encryption. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Depending on where you live, you may have some or all of the following rights regarding your personal information:

The right to access the personal information we hold about you. The right to correct information that is inaccurate or incomplete. The right to delete your personal information, subject to exceptions where we are required or permitted to keep it (for example, signed waivers and records we must retain by law). The right to object to or restrict certain processing. The right to withdraw consent at any time where we rely on consent, such as for marketing emails or non-essential cookies. The right to data portability, where it applies. The right to opt out of marketing at any time, by using the unsubscribe link in our emails or by contacting us. The right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details at the top of this policy. We will respond as required by applicable law. We will not discriminate against you for exercising your rights. We may need to verify your identity before acting on a request, to protect your information.

For California residents. We do not sell or share your personal information as those terms are defined under California law, and we have not done so in the preceding twelve months. Where California privacy law applies, California residents may have the rights described above, including the right to know, delete, and correct, and the right not to receive discriminatory treatment for exercising those rights.

For EEA and UK residents. Where the EU or UK GDPR applies, we process your information on the legal bases described under "How We Use Your Information," and you have the rights described above. You may contact your national data protection authority if you have a concern, though we hope you will contact us first so we can help.

We are based in the United States, and the providers we use to take bookings, process payments, host our website, and analyze website usage are also based in the United States. If you visit or book with us from outside the United States, including from the EEA or the United Kingdom, the information you provide will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

When you book a trip with us, that transfer is necessary to perform the booking you have requested. Where applicable law requires an additional transfer mechanism or safeguard, we use the mechanism made available by the relevant provider or take other steps required by law. Your information will be processed in the United States as described in this policy.

Our website is intended for adults who book and supervise activities. We do not knowingly collect personal information directly from children under 13 (or under the minimum age set by your local law) through our website. Where children take part in our activities, the responsible adult provides their information and signs the waiver on their behalf. If you believe a child has provided us personal information directly without a parent's or guardian's involvement, please contact us and we will take appropriate steps to delete it.

Our website links to third-party sites and services, including our booking provider and informational resources such as government wildlife and benefits pages. We are not responsible for the privacy practices or content of those sites. When you follow a link, we encourage you to read the privacy policy of the site you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, our providers, or the law. When we do, we will revise the "Last updated" date at the top. The revised policy applies from that date. If applicable law requires additional notice or consent for a change, we will provide it.

If you have any questions, requests, or concerns about this Privacy Policy or your personal information, please contact:

Crystal River Kayak and Dive Company LLC
d/b/a Crystal River Kayak Company and Dive Center
1420 SE US Hwy 19, Crystal River, FL 34429
Phone: (352) 795-2255
Email: CRKayakAndDive@gmail.com