Your privacy matters to us. This Privacy Policy explains what personal information Lease-A-Dock collects, how we use it, who we share it with, and your rights as a user. We operate globally and comply with applicable privacy laws including GDPR (EU/EEA), CCPA (California), and Florida state privacy regulations.
1. Who We Are
Lease-A-Dock ("we," "us," "our") is a marketplace platform connecting dock owners with boaters seeking temporary dock space and boat slip rentals. We operate at lease-a-dock.com and leaseadock.com.
Data Controller: Lease-A-Dock
Contact: privacy@lease-a-dock.com
Address: South Florida, United States
2. Information We Collect
Information you provide directly:
- Account registration: First name, last name, email address, phone number, password (hashed)
- Profile information: Profile photo, bio, role (renter/owner)
- Dock listings: Property address, GPS coordinates, photos, pricing, dock specifications, amenities
- Bookings: Check-in/check-out dates, boat name, boat length, special requests
- Payments: We use Stripe for payment processing. We do not store full credit card numbers. Stripe handles all payment data under their own privacy policy.
- Messages: Communications sent through our in-platform messaging system
- Reviews: Ratings and written reviews you submit
- Waitlist: Email address and name submitted through our pre-launch waitlist
- Affiliate program: Name, email, company, website, PayPal email, and bank details provided during affiliate registration
Information collected automatically:
- Usage data: Pages visited, search queries, listings viewed, time spent on platform
- Device data: Browser type, operating system, screen resolution
- IP address: Used for security, fraud prevention, and affiliate click tracking
- Session cookies: Used to keep you logged in
- Affiliate tracking cookies: Set when you click a referral link (see Section 6)
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Facilitate bookings between dock owners and renters
- Process payments via Stripe
- Send booking confirmations, receipts, and transactional emails
- Enable in-platform messaging between users
- Display dock listings and search results
- Prevent fraud, abuse, and unauthorized access
- Operate the affiliate program and calculate commissions
- Improve platform performance and user experience
- Comply with legal obligations
- Respond to customer support requests
Legal basis for processing (GDPR):
- Contract performance: Processing necessary to fulfill booking agreements
- Legitimate interests: Fraud prevention, security, platform improvement
- Consent: Marketing emails (you can opt out at any time)
- Legal obligation: Tax reporting, compliance with court orders
4. How We Share Your Information
We do not sell your personal information. We share your information only as described below:
- Between users: When a booking is made, the renter's name and boat details are shared with the dock owner, and the dock owner's name and contact info are shared with the renter.
- Stripe: Payment data is shared with Stripe, Inc. for payment processing. Stripe is PCI-DSS compliant. View Stripe's privacy policy at stripe.com/privacy.
- Email service provider: Your email address is shared with our email delivery provider (Mailgun or SendGrid) solely for sending transactional emails.
- Affiliates: Dock listing information (listing ID, booking amounts) is shared with the affiliate who referred the listing for commission calculation purposes. No renter personal data is shared with affiliates.
- Legal compliance: We may disclose information in response to lawful requests from government authorities, court orders, or to protect the rights and safety of Lease-A-Dock and its users.
- Business transfer: If Lease-A-Dock is acquired or merges with another company, your information may be transferred as part of that transaction. You will be notified in advance.
We never sell your data. We do not share your personal information with advertisers, data brokers, or third parties for their own marketing purposes.
5. Cookies & Tracking Technologies
We use the following types of cookies and similar technologies:
| Cookie Name | Type | Purpose | Duration |
|---|
| connect.sid | Essential | Session authentication — keeps you logged in | 7 days |
| aff_code | Affiliate Tracking | Records which affiliate referred you (see Section 6) | 30 days |
| site_unlocked | Functional | Records that you have accessed the site during maintenance periods | 24 hours |
We do not use: advertising cookies, third-party tracking pixels, Google Analytics, Facebook Pixel, or any behavioral advertising technology.
Managing cookies: You can control cookies through your browser settings. Disabling the session cookie will prevent you from logging in. Disabling the affiliate cookie will not affect your ability to use the platform but may result in an affiliate not receiving credit for referring you.
6. Affiliate Tracking Disclosure
Lease-A-Dock operates an affiliate program. When you arrive at our site by clicking a referral link shared by an affiliate, we set a cookie (aff_code) that identifies the affiliate who referred you.
What this cookie does:
- Lasts for 30 days from the date of your click
- If you list a dock on Lease-A-Dock within 30 days, your listing is permanently associated with that affiliate
- The affiliate earns a commission on bookings made on your listing
- The affiliate can see that a listing was referred but cannot see your personal information (name, email, contact details)
We log affiliate click data including the referring IP address, browser type, and landing page for fraud prevention and commission verification purposes.
Transparency: If you arrived through an affiliate link and do not wish to be tracked, you can clear your cookies at any time through your browser settings. This will remove the affiliate attribution without affecting your ability to use Lease-A-Dock.
7. Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations:
- Active accounts: Retained for the lifetime of your account
- Closed accounts: Basic account information retained for 7 years for tax and legal compliance purposes
- Booking records: Retained for 7 years for financial and legal compliance
- Messages: Retained for 3 years after the last activity
- Waitlist emails: Retained until you unsubscribe or request deletion
- Affiliate records: Retained for 7 years for financial compliance
- Affiliate click logs: Retained for 90 days then automatically purged
You may request earlier deletion of your data subject to our legal retention obligations (see Section 10).
8. Data Security
We implement industry-standard security measures to protect your personal information:
- Encryption in transit: All data transmitted between your browser and our servers is encrypted via TLS/SSL (HTTPS)
- Password hashing: Passwords are hashed using bcrypt and never stored in plain text
- Session security: Session tokens are stored server-side in a secure SQLite session store with HttpOnly, Secure, and SameSite=Strict flags
- Database security: Our database runs in WAL mode with foreign key enforcement on a private server not directly accessible from the internet
- Payment security: We do not store credit card data. All payments are processed by Stripe (PCI-DSS Level 1 certified)
- Access controls: Admin panel access is restricted and requires authentication
No system is 100% secure. While we take data security seriously, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at
security@lease-a-dock.com.
9. International Data Transfers
Lease-A-Dock is operated from the United States. If you are accessing our platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.
For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on the following legal mechanisms for data transfers:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Your explicit consent where required
By using Lease-A-Dock, you consent to the transfer of your information to the United States as described in this policy.
10. Your Rights — GDPR (EU/EEA/UK Users)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):
Right of AccessRequest a copy of all personal data we hold about you.
Right to RectificationRequest correction of inaccurate or incomplete data.
Right to ErasureRequest deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
Right to Restrict ProcessingRequest that we limit how we use your data in certain circumstances.
Right to Data PortabilityRequest your data in a structured, machine-readable format.
Right to ObjectObject to processing based on legitimate interests or for direct marketing.
Right to Withdraw ConsentWithdraw consent at any time where processing is based on consent.
Right to Lodge a ComplaintFile a complaint with your local data protection authority (DPA).
To exercise any of these rights, email us at privacy@lease-a-dock.com. We will respond within 30 days. We may need to verify your identity before processing your request.
11. Your Rights — CCPA (California Users)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months, the categories of sources, the purposes for collection, and the categories of third parties with whom we share it.
- Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
- Right to Opt-Out of Sale: We do not sell personal information. However, you have the right to direct us not to sell your data.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
- Right to Correct: You may request correction of inaccurate personal information.
To submit a California privacy request, email privacy@lease-a-dock.com with "California Privacy Request" in the subject line. We will respond within 45 days.
Categories of personal information collected in the past 12 months: Identifiers (name, email, IP), commercial information (booking and payment records), internet activity (pages visited), geolocation data (dock listing location).
We do not sell personal information to third parties as defined by the CCPA.
12. Children's Privacy
Lease-A-Dock is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@lease-a-dock.com and we will delete the information promptly.
13. Third-Party Links
Our platform may contain links to third-party websites or services, including Stripe's payment portal. These third parties have their own privacy policies, and we are not responsible for their practices. We encourage you to review the privacy policies of any third-party sites you visit.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:
- Posting the updated policy on this page with a new "Last updated" date
- Sending an email notification to your registered address for significant changes
- Displaying a notice on the platform
Your continued use of Lease-A-Dock after any changes constitutes acceptance of the updated policy.
15. Contact Us
For any privacy-related questions, requests, or concerns, please contact us:
For EU/EEA users, you also have the right to lodge a complaint with your local supervisory authority. A list of EU data protection authorities is available at edpb.europa.eu.