Privacy Policy

Last updated: June 3, 2026

1. Introduction and Our Role

Jet Ski Rentals of Miami ("Company," "we," "us," or "our") operates an online booking platform at jetskisrentalmiami.com (the "Platform") where you can discover and book watercraft and vehicle experiences in the Miami area, including jet ski, boat, yacht, ATV, Polaris Slingshot, jet car, and related watersports rentals. Jet Ski Rentals of Miami is the trade name of BellaExports, LLC, a Florida limited liability company.

The Company is an intermediary. The activities you book are owned and operated by independent third-party businesses ("Operators" or "Activity Providers"). The Operators, not the Company, run the activities, captain or supervise where applicable, and rent out the equipment. The Company does not itself provide, operate, captain, supervise, or physically hand over the equipment for any activity.

The Company facilitates your booking and charges a booking and service fee for that service. When you book, we transmit your booking and contact details to the independent Operator assigned to fulfill it. That Operator delivers the activity under its own terms and policies.

This Privacy Policy explains how the Company collects, uses, discloses, and protects your information when you use the Platform. It does not govern how the Operators handle your information once we transmit it to them; each Operator handles your data under its own privacy policy. By using the Platform, you consent to the practices described here.

For privacy matters, contact us at contact@jetskisrentalmiami.com.

2. INFORMATION WE COLLECT

2.1 Information you provide to us

When you create an account, complete a booking, or contact us, we collect:

Identity: name, date of birth (if required for an activity)
Contact: email address, phone number, billing address
Payment: payment card information (processed by Stripe; we do not store full card numbers)
Booking details: date, time, location, number of guests, special requests, operator selected
Communications: messages, reviews, support requests
Optional content: profile photo, review photos

2.2 Information collected automatically

When you use the Platform, we (and our service providers) automatically collect:

Device & browser: IP address, browser type, operating system, device type, screen size, language
Usage: pages visited, links clicked, time on page, referring URL, search terms
Location: approximate geographic location based on IP address (and, with your permission, precise location for "near me" search)
Cookies and similar technologies: see Section 5

2.3 Information from third parties

Payment processor (Stripe): payment confirmation, last 4 of card, ZIP, fraud signals
Operators: booking confirmations, no-show reports, incident reports
Marketing partners: ad campaign performance, attribution data
Public sources: social media handles you provide for review verification

We do not purchase personal data lists.

3. HOW WE USE YOUR INFORMATION

We use your information to:

Provide and operate the Platform and booking services
Process and confirm your bookings, including sharing your name, contact info, and booking details with the Operator you book
Authenticate and secure your account
Communicate with you about bookings, support requests, and changes to our policies
Send you marketing communications (only with your consent for SMS/text; see Section 6)
Personalize your experience and improve the Platform
Detect, prevent, and respond to fraud, abuse, or unsafe activity
Comply with legal obligations (including tax, accounting, and law enforcement requests)
Aggregate and de-identify data for analytics

We do not sell your personal information.

We share it only with the following recipients:

Recipient	Purpose	Privacy policy
Operators you book with	To fulfill your booking (name, contact, booking details)	Operator's own
Stripe (payment processor)	To process your Booking Fee, prevent fraud, and handle PCI compliance	https://stripe.com/privacy
Brevo (email delivery, formerly Sendinblue)	To send booking confirmations, reminders, and (with consent) marketing email	https://www.brevo.com/legal/privacypolicy/
Quo (operated by OpenPhone) (SMS delivery)	To send booking notifications and reminders where you opted in to text messages	https://www.openphone.com/legal/privacy
Cloudflare (hosting, CDN, bot protection via Turnstile)	To host the Platform and protect our forms from automated abuse	https://www.cloudflare.com/privacypolicy/
Google Analytics (Google LLC)	To understand how visitors use the Platform (aggregate metrics)	https://policies.google.com/privacy
Google Calendar (Operator users only)	If a business Operator connects Google Calendar to sync bookings (see Section 5A)	https://policies.google.com/privacy
Marketing partners	Only aggregated or de-identified data; or with your consent for targeted ads	their own
Regulators, law enforcement, or courts	When required by law, subpoena, court order, or to protect rights, property, or safety	n/a
An acquirer as part of a merger, sale, or restructuring	With notice and continued protection of your data	n/a

Operators are independent businesses, not our affiliates, and use your information under their own privacy policies. You may need to consult an Operator's policy separately.

Your SMS opt-in data and consent records are never shared with third parties or affiliates for their own marketing.

5. COOKIES AND TRACKING

We use cookies and similar technologies (pixels, web beacons, local storage) to operate the Platform and to understand how it is used.

Cookie type	Why we use it
Strictly necessary	Platform functionality (login, cart, security) - cannot be disabled
Performance	Anonymous analytics on Platform usage
Functional	Remember your language, location, preferences
Marketing	Measure ad campaign performance and serve relevant ads

You can control cookies through your browser settings. The Platform shows a cookie banner allowing you to accept or decline non-essential cookies. Declining non-essential cookies may limit Platform functionality.

We honor Global Privacy Control (GPC) signals from your browser as a request to opt out of targeted advertising. The Platform does not currently respond to "Do Not Track" browser signals.

5A. GOOGLE CALENDAR INTEGRATION (Operators only)

If you are an Operator and you connect your Google account to sync bookings:

What we access: the list of your calendars, calendar events we create on your behalf for Platform bookings, and your Google email address for display.
How we use it: to create, update, and cancel calendar events that correspond to Platform bookings. We do not read or store the contents of your other calendar events.
Storage: your Google OAuth access and refresh tokens are stored securely. Tokens are deleted when you disconnect the integration in Settings.
Your control: you can disconnect at any time in Settings or revoke access at https://myaccount.google.com/permissions. Events already created remain unless you delete them manually.

Our use of Google Calendar data follows the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy

6. SMS / TEXT MESSAGING

If you provide your phone number and consent, we (or the Operator) may send you SMS messages about your booking. You consent to these messages by clicking the SMS consent checkbox at booking or by texting "START" to us.

Message types: booking confirmations, reminders, check-in instructions, weather alerts, follow-up, occasional promotions (only if you opted in)
Frequency: up to 4 messages per booking + up to 2 promotional messages per month if you opted in
Cost: standard message and data rates may apply per your carrier
Opt-out: reply STOP at any time. You may receive one confirmation that you have been removed.
Help: reply HELP or contact contact@jetskisrentalmiami.com
SMS consent is not required to book a Service.
We do not share your phone number with third parties for their own marketing.

This complies with the Federal Telephone Consumer Protection Act (TCPA), the Florida Telephone Solicitation Act (Fla. Stat. § 501.059), and our SMS carrier's policies.

7. YOUR RIGHTS AND CHOICES

We honor privacy rights granted by federal law, state law, and applicable foreign law. We do not sell or share your personal data for cross-context behavioral advertising, so no "Do Not Sell or Share" link is required, but we honor opt-out requests anyway.

7.1 Common rights (most US states)

If your state has a comprehensive privacy law, you generally have the right to:

Access the personal data we hold about you
Correct inaccurate personal data
Delete your personal data
Receive a portable copy of your personal data in a usable format
Opt out of targeted advertising, profiling for certain decisions, and the "sale" or "sharing" of personal data

7.2 State-specific laws

The following state privacy laws are in effect as of June 2026. Where a law applies to us, the rights in Section 7.1 are yours.

Florida - Florida Digital Bill of Rights (Fla. Stat. § 501.71 et seq.)
California - California Consumer Privacy Act / Privacy Rights Act (Cal. Civ. Code § 1798.100 et seq.)
Virginia - Consumer Data Protection Act
Colorado - Colorado Privacy Act
Connecticut - Data Privacy Act
Utah - Consumer Privacy Act
Texas - Data Privacy and Security Act
Oregon - Consumer Privacy Act
Montana - Consumer Data Privacy Act
Iowa - Consumer Data Protection Act
Tennessee - Information Protection Act
Delaware - Personal Data Privacy Act
New Jersey - Data Privacy Act
New Hampshire - Privacy Act
Maryland - Online Data Privacy Act
Minnesota - Consumer Data Privacy Act
Nebraska - Data Privacy Act
Kentucky - Consumer Data Protection Act
Indiana - Consumer Data Protection Act
Rhode Island - Data Transparency and Privacy Protection Act

Most of these laws apply only when a business meets specific revenue or data-volume thresholds. We extend the rights in Section 7.1 to all US residents on request, regardless of whether a law strictly applies to us.

7.3 How to exercise your rights

Email contact@jetskisrentalmiami.com with the subject "Privacy Request" and tell us which right you want to exercise and (if relevant) which state you reside in. We may need to verify your identity before we act. We respond within 45 days. We may extend once by 45 more days if reasonably necessary, and will tell you why.

7.4 Right to appeal

If we deny your privacy request, you may appeal within 60 days by replying to our denial with the subject "Privacy Appeal." We will respond to your appeal within 45 days. If we still deny your appeal, we will tell you how to contact your state's attorney general.

7.5 Authorized agents

You may designate an authorized agent to make a privacy request on your behalf. We may require you to verify your identity and confirm that you authorized the agent.

7.6 Sensitive personal data

We do not knowingly collect or process sensitive personal data as defined under state privacy laws, including racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, immigration status, citizenship status, genetic or biometric data, precise geolocation, government identifiers (Social Security number, driver's license, passport, state ID), financial account credentials, or the contents of mail, email, or text messages. If you provide sensitive data voluntarily (for example in a support message), we use it only for the purpose you provided it and delete it on request.

7.7 International visitors (EU, UK, EEA, Switzerland)

If you reside in the European Economic Area, the United Kingdom, or Switzerland, you have additional rights under the GDPR and UK GDPR, including the right to:

Access, correct, delete, and port your personal data
Object to or restrict processing
Withdraw consent at any time, without affecting prior processing
Lodge a complaint with your national supervisory authority

Legal bases for processing. We process your data (a) to perform our contract with you (booking services), (b) to comply with legal obligations (tax, fraud prevention), (c) on the basis of your consent (marketing), and (d) on our legitimate interest in operating and improving the Platform, balanced against your rights.

International transfers. We process your data in the United States. We rely on your consent and, where applicable, Standard Contractual Clauses approved by the European Commission (and the equivalent UK International Data Transfer Addendum) for transfers from the EU, UK, EEA, or Switzerland. You may request a copy of these safeguards by emailing us.

7.8 Marketing opt-out

You can opt out of marketing emails using the "unsubscribe" link in any marketing email, and opt out of SMS by texting STOP (see Section 6). Transactional messages (booking confirmations, receipts, account notices) are not subject to opt-out.

8. DATA RETENTION

We keep your personal data only as long as we need it to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements:

Booking records: 7 years (tax and audit requirement)
Account information: while your account is active, plus 2 years after closure
Marketing data: until you opt out
Server logs: typically 90 days
Customer support records: 3 years

We may retain aggregated or de-identified data indefinitely.

9. SECURITY

We use industry-standard administrative, technical, and physical safeguards to protect your information, including TLS encryption for data in transit, encrypted databases for sensitive data at rest, access controls, and regular reviews. No system is 100% secure. If you suspect unauthorized access to your account, email us at contact@jetskisrentalmiami.com immediately.

We use Stripe for payment processing. Stripe is PCI-DSS Level 1 certified; we do not see or store full payment card numbers.

10. CHILDREN'S PRIVACY

The Platform is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Many activities offered by Operators have minimum age requirements (for example, PWC rentals are limited to renters 18+; boating safety education applies to anyone born on or after Jan 1, 1988). If you believe a child under 13 has provided personal information, contact us and we will delete it.

If you are between 13 and 17, you may use the Platform only with a parent or guardian's consent. Only someone 18+ may book a Service.

11. THIRD-PARTY LINKS

The Platform may link to third-party websites (Operator sites, social media, payment processor). We are not responsible for their privacy practices. Review their privacy policies before providing data.

12. CHANGES TO THIS POLICY

We may update this Policy. We will post the updated version on the Platform and update the effective date. If we materially change this Policy, we will give you reasonable notice by email or on the Platform. Continued use of the Platform after the effective date is acceptance.

13. CONTACT US

BellaExports, LLC d/b/a Jet Ski Rentals of Miami Florida Document No. L22000426724

Privacy questions: contact@jetskisrentalmiami.com Mailing address: (to be added once the commercial mailbox is set up)

We respond to privacy inquiries within 10 business days.

Applicable Law

This Policy is designed to address requirements under:

Florida Digital Bill of Rights (Fla. Stat. § 501.71 et seq.)
Florida Telephone Solicitation Act (Fla. Stat. § 501.059)
Federal Telephone Consumer Protection Act (47 U.S.C. § 227)
Children Online Privacy Protection Act (COPPA) (15 U.S.C. § 6501 et seq.)
California Consumer Privacy Act / Privacy Rights Act (Cal. Civ. Code § 1798.100 et seq.)
The state privacy laws listed in Section 7.2
General Data Protection Regulation (Regulation (EU) 2016/679) and UK GDPR

This Policy is governed by the laws of the State of Florida.