Privacy & Trust

How we handle your info

This page is maintained by DRYFT Adventures to answer common questions about how we handle the information you share with us. It is editable project content, not an independent certification or third-party audit.

Who we are

DRYFT Adventures is a small, owner-operated watersports business based in Westhampton Beach, NY, offering surf coaching, judging, and ocean-safety training. Bookings and billing are handled directly by the owner.

What we collect

When you submit the booking form on this site, we collect:

  • Your name and email address
  • Phone number (if you provide one)
  • The service you're interested in, requested date, and party size
  • Any message or notes you include with the request

We don't run third-party advertising trackers or behavioral analytics on this site. We don't ask for, store, or process payment card information — invoices are paid directly through Venmo.

How we use it

  • To contact you about your booking request and coordinate scheduling
  • To prepare and send an invoice for services you've agreed to
  • To keep an internal record of past and upcoming bookings

We do not sell your information, and we do not share it with third parties for marketing.

Who we share it with

We use a small number of service providers to operate the site and communicate with you:

  • Lovable Cloud / Supabase — database and authentication that powers the booking form and admin portal.
  • Resend — sends booking confirmation and invoice emails on our behalf.
  • Venmo — processes invoice payments directly between you and DRYFT; we never see your card or bank details.

Security controls in this app

Booking submissions and the private billing portal are protected by row-level access rules in the database: only the owner's authenticated admin account can read booking details, internal notes, and invoices. The admin portal is not linked from the public site and requires an email-and-password sign-in. Connections to the site and to the backend use HTTPS in transit.

These describe controls that are enabled in the app today. They are not a certification and have not been independently audited.

How long we keep it

We keep booking and invoice records for as long as needed to provide services, respond to follow-up questions, and meet basic business and tax recordkeeping needs. You can ask us to delete your personal information at any time using the contact details below, and we'll remove it unless we're required to keep it for a legitimate business reason.

Your choices

  • You can ask us what information we have about you.
  • You can ask us to correct or delete it.
  • You can unsubscribe from emails using the link at the bottom of any email we send.

Contact

For privacy questions, deletion requests, or to report a security concern with this site, email mamaliz@dryftwatersports.com.

Last updated July 2026.