Privacy Policy

Jurisdiction: British Columbia, Canada

Interim version v0.1 · in effect from 2026-09-29 · a counsel-reviewed version will replace this page

Intro scope

This policy explains what Yahull ("we", "us") collects when you use yahull.com, why we collect it, and how to reach us about it. Yahull is a Vancouver, BC marketplace for boat trips: fishing charters, whale watching, sightseeing cruises and private charters run by independent captains and operators. This is an interim version written by our team; a version reviewed by counsel will replace it. Where this page says something is "being finalized", we have not decided yet and we say so rather than guess.

Data collection

We collect only what you give us or what the site needs to work:

  • When you book a trip — your name, email, phone number if you give one, the trip, date, number of seats and any notes you type (dietary needs, mobility, who is in your party). Payment is completed on a secure checkout page hosted by our payment processor (Stripe); we never see or store your card number.
  • When you ask us something — through a question box, an email, or our on-site assistant when it is available: what you typed and the email or phone you gave so we can reply.
  • When you sign in (staff and, where offered, customers) — your email address. Sign-in is by a one-time link sent to that email; we hold no passwords.
  • Automatically — standard server logs (IP address, browser type, pages requested, time).

Data use

We use this information to run your booking (confirm it, send the meeting point and the captain's instructions, contact you if anything about the day changes), to answer what you asked, to keep the accounting records the law requires, and to keep the site secure. We do not sell personal information. We do not use your information for advertising to you unless you have asked to hear from us.

Sharing

We share what is needed, with whom it is needed:

  • The operator of your trip (the captain or company running the boat) receives your name, party size, notes relevant to the day, and a way to contact you on the day.
  • We share your details with the captain and crew running your day, and with the services that help us run this site, such as email delivery and hosting. We do not sell your personal information.
  • Service providers that run the site: hosting (Vercel), database (Supabase), transactional email (Resend). They process data on our instructions only.
  • Authorities, where the law requires it.

We do not share your information with advertisers.

Cookies

We set a cookie only when you sign in (staff and, where offered, customers), to keep you signed in. The Stripe checkout page sets its own cookies under Stripe's policy. We do not use advertising cookies or ad pixels.

Retention security

We keep booking records for as long as accounting and legal obligations require. Retention periods for each category of information are being finalized with counsel; until then, we keep records and do not delete them except on request (see "Your rights"). Data is stored with providers in encrypted form in transit and at rest; access to personal information is limited to staff who need it for your booking.

Rights contact

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Write to support@yahull.com with the email you booked with. We aim to respond within 30 days. If we cannot delete something (for example, an accounting record we must keep), we will tell you what we are keeping and why.

Updates

When this policy changes, we post the new version here with its date. This is interim version v0.1; the date it took effect is shown at the foot of this page. A counsel-reviewed version will replace it.

Ai conversations

If you use an on-site assistant on yahull.com (where offered), the conversation is stored and a person on our team may read it to help you or to improve our answers. The assistant answers from our own published information; it does not make bookings or take payment. Please do not type card numbers or other payment details into it. We do not use your conversations to train third-party AI models.

Effective 2026-09-29.

Version 4.