Privacy Policy

Inquiry and contact details. Depending on the form or service you use, information may include your business or boat name, home port or marina, departures or availability, existing website, booking needs, name, phone number, email address, contact preferences, preferred call date and time, project readiness, and notes. We may also receive the submission time, selected next step, and campaign, referral, or partner values supplied with an inquiry.

Some inquiry tools prepare an email for you to review in your own email application. Using that tool does not itself send the prepared email to us; you must send it. Where a form offers direct online submission, we receive the information when you submit it. Website activity information can be collected while you view or use either type of page, as explained below.

Payments and purchases. When you use Stripe checkout, Stripe collects the payment and billing details needed for the transaction. We receive purchase-administration information, such as contact and billing details, the selected package, amount, transaction identifiers, payment or subscription status, refunds, disputes, and limited payment-method information. We do not ask you to put full card numbers or card security codes in inquiry forms, project notes, or email.

Project materials and account access. Onboarding information may include project requirements, content, branding, photographs, documents, uploaded files, and access notes. Files can contain metadata and information about other people. Where needed for authorized work, we may receive account invitations or access details. Use limited-permission invitations or a separately arranged secure method for credentials; do not put passwords in general inquiry notes.

Communications and preferences. We receive the contents of emails, texts, and other communications you send us, together with relevant attachments and delivery information. We may keep records of requested contact methods, consent, opt-outs, project approvals, and support or privacy requests.

Website and technical information. Our website and infrastructure providers process technical and usage information. This can include IP addresses in network or service logs, browser and device information, language, approximate location inferred from technical settings, page addresses, referring pages, campaign parameters, timestamps, generated session or event identifiers, link or form interactions, engagement time, and performance or error information. Full page URLs or error details can contain personal information if it is included in those values; we do not describe all analytics as anonymous.

Sources and sensitive information. We receive information from you, an authorized person acting for you, your browser or device, and providers involved in your transaction or requested service. We may review a public website you identify for your project. Account credentials and certain financial information can be sensitive. We use any such information only as reasonably needed for requested services, payments, security, or legal obligations. Please do not send government identification numbers, medical information, or unrelated confidential records through general forms.

We use information to:

• Review your inquiry, assess project requirements, prepare a proposal, and contact you using an appropriate requested channel.
• Confirm purchases, administer packages and subscriptions, keep accounting records, and handle refunds or disputes.
• Design, build, configure, host, maintain, and support the services you engage us to provide.
• Coordinate appointments, request approvals, and communicate service or policy changes.
• Understand page interest, referral sources, and website performance, and troubleshoot technical problems.
• Protect accounts and systems, prevent misuse or fraud, comply with applicable obligations, and respond to privacy requests.

We use campaign or partner values to understand how an inquiry reached us. A referral code alone does not authorize disclosure of your contact details to a partner for its own marketing. Where you request an introduction or authorize a disclosure, we share information needed for that purpose.

If you separately request or subscribe to marketing emails, we use your email address and stated preferences to send those communications. We will provide any additional notice and obtain any consent or authorization required before using personal information for a materially different purpose. This policy does not itself enroll you in promotional emails or text messages. You may opt out of marketing emails using the unsubscribe instructions in a message or by contacting us; necessary purchase, project, and account communications can continue.

Information is available to people and providers who need it for the purposes described in this policy. The provider involved depends on the page, communication method, or service you use.

Providers acting on our behalf are expected to use personal information for the services they provide to us, subject to applicable contractual and legal restrictions. A provider may also have independent responsibilities. For example, Stripe processes certain information for its own security, fraud-prevention, and legal purposes. Using a provider’s separate account or service, such as a saved-payment service, is also subject to that provider’s terms and privacy notice.

We may disclose relevant information to professional advisers; when required by lawful process; to protect legal rights or address fraud, security incidents, or safety concerns; or in a proposed or completed business transfer, with appropriate safeguards and any legally required notice. We may also disclose information at your direction.

Content you approve for publication on your website becomes available to its visitors. We do not publish private onboarding materials or use identifiable private project materials in our portfolio without authorization.

Processing locations. We operate in California. Our providers and their permitted subprocessors can process information in the United States and other countries. Resend states that it stores customer data in the United States; our hosting provider’s project-data region depends on the project configuration. Other support, payment, or authorized processing may occur elsewhere. We do not promise that all information remains in one country. Where applicable law requires transfer safeguards, we will use the required arrangements.

The website uses hosting-platform analytics to measure page visits and selected interactions and to identify performance or reliability problems. Analytics can record page and referring URLs, campaign parameters, browser information, session identifiers, engagement, and errors. These records may be processed separately from your inquiry or project files.

Browser settings let you block or remove cookies and website storage. Doing so may affect navigation, sign-in, or checkout. Blocking a cookie does not necessarily stop separate analytics requests, network logs, or information you choose to send. The site does not currently provide a separate cookie-preferences panel.

Tracking signals and advertising. Our current analytics do not automatically stop when a browser sends a Do Not Track or Global Privacy Control signal. Global Privacy Control concerns opt-outs of sale or sharing where the applicable law requires them; it does not mean that every type of website measurement must stop.

We do not sell personal information or share it for cross-context behavioral advertising. We do not authorize advertising networks to use inquiry or project information to target people across unrelated businesses’ websites. If that practice changes, we will first provide the required disclosures, choices, and functioning opt-out mechanisms, including legally required preference-signal handling.

Third parties can receive technical information when you load their embedded resources or use their services, and they may recognize activity across interactions with their own services under their privacy policies. A link to another website leads to that operator’s privacy practices.

Email tracking. Email delivery services generate records such as delivery success, bounces, or failures. Open and click tracking are separate optional features. We will disclose their use before enabling them for our communications and will obtain consent where required. The use of Resend alone does not mean that open or click tracking is enabled.

We keep personal information only for a reasonably necessary period, taking account of the purpose, your service relationship, applicable obligations, and privacy requests. The following retention rules apply to records under our control. A record category includes its related communications and metadata.

A valid deletion request may shorten these periods, subject to lawful exceptions. If deletion affects a service you want to keep using, we will explain the effect and any information still needed to provide it. We do not treat the general retention schedule as a reason to ignore a valid request.

Limited records may remain for legal duties, an actual or reasonably anticipated dispute, security, or another permitted purpose. We restrict their use to that purpose. Backup copies may remain until the relevant backup rotation removes them; they are not intended for routine business use, and deletion restrictions will be reapplied if a backup is restored.

Providers acting independently may keep records to meet their own obligations. For example, deleting our project records does not necessarily delete Stripe’s required financial records or copies in your own email account. We will assist with appropriate requests to providers acting on our behalf.

California residents may have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, when that law applies to our processing. These rights can include:

• Knowing the categories and specific pieces of personal information collected, their sources, the purposes of use, and the categories of recipients.
• Obtaining an accessible copy of eligible information and portability where required.
• Correcting inaccurate personal information.
• Deleting personal information, subject to applicable exceptions.
• Opting out of sales or sharing for cross-context behavioral advertising and limiting certain uses of sensitive personal information, where those rights apply.
• Exercising privacy rights without unlawful discrimination.

The categories described above include identifiers and contact records, commercial information, business or professional details, internet activity, visual or electronic materials, and preferences or related inferences about project needs. Access credentials, if supplied, may be sensitive personal information. Our use of sensitive information is limited to the requested services, security, payments, and other legally permitted purposes.

We do not sell personal information, and we do not share it for cross-context behavioral advertising, including information about minors. We also do not disclose personal information to third parties for their own direct marketing. California residents may contact us about rights under California’s Shine the Light law.

Verification and authorized agents. For an access, correction, or deletion request, we may verify your identity using information already associated with your inquiry or account, such as a reply from your known email address or relevant transaction details. We request additional information only when reasonably necessary. We will not require you to open a new account or send a password or full payment-card number to make a request.

An authorized agent may submit a request with appropriate proof of authority. Where permitted, we may ask you to confirm the authorization directly, taking account of a valid power of attorney. We do not require identity verification for a sale/sharing opt-out or sensitive-use limitation request, although we may need enough information to identify the record affected.

Response periods. We acknowledge requests to know, access, correct, or delete within 10 business days and respond within 45 calendar days of receipt, unless an extension permitted by applicable law is reasonably necessary. Verification does not restart that period. If an extension is permitted and reasonably necessary, we will explain it within the original response period; the extension will not exceed a further 45 calendar days.

Where applicable, sale/sharing opt-outs and sensitive-use limitations are processed as soon as feasible and within 15 business days. Requests are generally handled without charge, subject to exceptions allowed by law. If we cannot fulfill all or part of a request, we will explain the reason and any applicable review or complaint options. These procedures do not limit rights provided by other applicable privacy laws.

Providing a mobile number, selecting a package, submitting an inquiry, or accepting this Privacy Policy does not by itself enroll you in promotional or recurring automated text messages.

If you specifically request text contact or send us a text, we may respond about that inquiry, appointment, or project. Any recurring automated or promotional program requires a separate, clearly described opt-in and the consent applicable to that program. Consent to promotional texts is not a condition of purchasing services.

For requested project texts, frequency depends on your inquiry or project, and message and data rates may apply. Ask us to stop by replying STOP or by contacting us using the details below. For help, reply HELP or contact us. We will respect a clear opt-out, including another reasonable expression of your request, and may send one nonpromotional confirmation. Opting out of texts does not cancel your service or stop necessary communications by another appropriate channel.

We do not sell or disclose mobile phone numbers, text-message opt-in information, or messaging consent to third parties or affiliates for their own marketing or promotional purposes. We may disclose necessary information to providers that deliver messages on our behalf, subject to restrictions on its use.

We use reasonable administrative and technical safeguards appropriate to the information and services involved, including limiting access to people with a service-related need. No website, email service, or storage system can be guaranteed completely secure. Contact us promptly if you believe your information or account access has been compromised.

Only provide information about other people when you are authorized to do so, including people shown in photographs and contacts in customer records. Give them any notice and obtain any permission required for the intended use. Nonpublic project materials will not be submitted for unrelated AI-model training as part of our service. Any separate AI processing of confidential materials must be covered by appropriate project instructions and provider arrangements.

Our services are intended for adult business customers and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13 through our customer inquiry services. If you believe a child has provided personal information, contact us so we can review the matter and delete information where required.

We may update this policy as our services or information practices change. We will revise the date above and provide notice of material changes through the website or a direct communication, as appropriate. If a change requires consent or another choice under applicable law, we will obtain it before applying that change. Posting a revised policy does not by itself authorize a materially different use of previously collected information.

Send written privacy requests to thetunakiller@gmail.com. You may use “Privacy Request” as the subject, but no specific wording is required. You can also call (949) 903-3788 for assistance; a call or appointment is not required to submit a written request.

• Provide your name and the email address or phone number associated with the information.
• Identify your website, project, or transaction if relevant.
• Describe the access, correction, deletion, contact-preference change, or other privacy action you are requesting.
• State whether you are acting for someone else and provide appropriate authorization.

Do not include passwords, complete financial account numbers, or unnecessary identity documents. If your request concerns a website we operate for another business, identify that website so we can help route the request to the responsible operator.

Business days are Monday through Friday, excluding U.S. federal holidays. If you need this policy or the request process in an accessible format, contact us and we will provide reasonable assistance.