Privacy policy
Your information, in plain English.
The short version: we collect what you type into our quote form and what you give Stripe when you buy something. We use it to reply, quote, and make and ship your order. We share it only with the companies that help us do that (payments, printing, shipping, hosting). We don’t sell your information, and we don’t use ad-tracking pixels on this site today.
1. Who we are
Harborwright is a boat cleaning and online shop business in Chesapeake, Virginia. “We” and “us” in this policy mean Harborwright. Contact details are in section 9.
2. What we collect
When you send the quote / contact form:
- What you enter: name, phone, email, boat make and length, marina or location, the service you want, a preferred date, your message, and the shop part you asked about (if any).
- Basic technical details sent with the form: the page you were on, the first page you landed on and the site that referred you, any campaign tags in the link you clicked (for example
utm_source, or an ad click id such asgclid/fbclid), your browser type, and the country your connection comes from. - Your IP address is used for spam and abuse checks. We store only a one-way scrambled (hashed) version of it, not the address itself.
When you buy from the shop:
- Checkout runs on Stripe. Stripe collects your name, email, shipping address and payment card. We never see or store your full card number.
- Stripe sends us the order details: what you bought (design, colour, size), the amount, your name, email and shipping address, and a phone number if you gave one.
In your own browser: your shopping bag, and campaign tags from a link you clicked (kept up to 90 days), are saved in your browser’s local storage so they survive a page reload. They stay on your device until the form or checkout uses them; you can clear them any time by clearing site data.
Analytics: none. We don’t run Google Analytics, advertising pixels or tracking cookies on this site today. If we add them, we’ll update this policy first.
3. How we use it
- To reply to you, send a written quote, and schedule cleaning visits.
- To make, ship and track your order, and to handle replacements, lost packages and questions.
- To stop spam, fraud and abuse of the site and checkout.
- To keep business, tax and accounting records.
- To see which pages and campaigns bring in requests, using the campaign tags above.
4. Who we share it with
Only service providers that help us run the business, and only what each one needs:
| Provider | What for | What they get |
|---|---|---|
| Stripe | Payments and checkout | Everything you enter at checkout (Stripe’s own privacy policy applies) |
| Printful and Printify (and their print partners) | Printing and shipping printed gear | Name, shipping address, email or phone for delivery, and the item |
| CJdropshipping | Shipping boat & fishing gear from US warehouses | Name, shipping address, email (and phone if given), and the item |
| Cloudflare | Website hosting, our lead and order database, and the spam check (Turnstile) on the form | Form entries, order records, and technical data needed to serve and protect the site |
| Web3Forms and Google (Gmail) | Emailing new form requests to our inbox | A copy of your form entries |
| Google Fonts | Loading the fonts this site uses | Your IP address and browser details, as with any web request |
We may also share information if the law requires it, to protect our rights or someone’s safety, or with a buyer if the business is ever sold (this policy would still apply).
We don’t sell your personal information, and we don’t share it for targeted (cross-site) advertising.
5. How long we keep it
- Quote and contact requests: as long as we need them to serve you, and generally no more than 3 years after our last contact.
- Orders: for as long as tax and accounting rules require (usually several years).
- You can ask us to delete your information sooner — see section 6.
6. Your choices and Virginia privacy rights
Wherever you live, you can ask us to:
- tell you what personal information we have about you, and give you a copy;
- correct it;
- delete it (we may need to keep order records the law requires);
- stop using it for targeted advertising, sale or profiling — we don’t do any of these today.
These match the rights in the Virginia Consumer Data Protection Act (VCDPA). To make a request, contact us (section 9). We may need to confirm it’s really you, and we’ll answer within 45 days. If we turn down your request, you can appeal by replying “appeal” to our answer; we’ll respond to the appeal within 60 days, and if you’re still unhappy you can contact the Virginia Attorney General. We won’t treat you differently for using these rights.
7. Children
This site isn’t directed to children under 13, and we don’t knowingly collect information from them. Our kids’ and baby clothing is sold to adults. If you think a child sent us information, contact us and we’ll delete it.
8. Security
The site uses HTTPS, payments are handled entirely by Stripe, and access to our lead and order records is limited to the owner. No system is perfectly secure, but we work to protect what you share.
9. Contact us
Harborwright · Chesapeake, Virginia · email [email protected] · call (434) 421-5533 · or use the contact form.
10. Changes
We’ll post any changes here and update the date below. If a change is significant, we’ll say so on the site.
Harborwright · Chesapeake, Virginia · Effective September 28, 2026