Store Hours & Locations
Reserve Rentals
Contact Us
PRIVACY POLICY
- Visit our website at getboards.com or any website of ours that links to this Privacy Notice
- Use Rentals. Ski rentals, snowboard rentals, snowshoe rentals, bike rentals, electric bike rentals, kayak rentals, standup paddle board rentals, pedal boat rentals
- Engage with us in other related ways, including any sales, marketing, or events
SUMMARY OF KEY POINTS
TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
- debit/credit card numbers
- billing addresses
- contact preferences
- passwords
- usernames
- mailing addresses
- email addresses
- phone numbers
- names
- financial data
Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.
- Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called “crash dumps”), and hardware settings).
- Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
- Location Data. We collect location data such as information about your device’s location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.
Google API
Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process the personal information for the following purposes listed below. We may also process your information for other purposes only with your prior explicit consent.
- To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
- To save or protect an individual’s vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.
- Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.
- Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
- Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
- If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
- For investigations and fraud detection and prevention
- For business transactions provided certain conditions are met
- If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
- For identifying injured, ill, or deceased persons and communicating with next of kin
- If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
- If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
- If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
- If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
- If the collection is solely for journalistic, artistic, or literary purposes
- If the information is publicly available and is specified by the regulations
- We may disclose de-identified information for approved research or statistics projects, subject to ethics oversight and confidentiality commitments
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- When we use Google Maps Platform APIs. We may share your information with certain Google Maps Platform APIs (e.g., Google Maps API, Places API). Google Maps uses GPS, Wi-Fi, and cell towers to estimate your location. GPS is accurate to about 20 meters, while Wi-Fi and cell towers help improve accuracy when GPS signals are weak, like indoors. This data helps Google Maps provide directions, but it is not always perfectly precise.
- Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Notice. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
- Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.
Google Analytics
We may share your information with Google Analytics to track and analyze the use of the Services. The Google Analytics Advertising Features that we may use include: Remarketing with Google Analytics, Google Display Network Impressions Reporting and Google Analytics Demographics and Interests Reporting. To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. You can opt out of Google Analytics Advertising Features through Ads Settings and Ad Settings for mobile apps. Other opt out means include http://optout.networkadvertising.org/ and http://www.networkadvertising.org/mobile-choice. For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.
7. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.
8. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system of organizational and technical security measures.
9. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction.
10. WHAT ARE YOUR PRIVACY RIGHTS?
In Short: Depending on your state of residence in the US or in some regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.
Account Information
If you would at any time like to review or change the information in your account or terminate your account, you can:
- Log in to your account settings and update your user account.
- Contact us using the contact information provided.
11. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.
12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. More information is provided below.
Categories of Personal Information We Collect
The table below shows the categories of personal information we have collected in the past twelve (12) months. The table includes illustrative examples of each category and does not reflect the personal information we collect from you. For a comprehensive inventory of all personal information we process, please refer to the section “WHAT INFORMATION DO WE COLLECT?“
| Category | Examples | Collected |
|---|---|---|
|
A. Identifiers
|
Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name
|
YES
|
|
B. Personal information as defined in the California Customer Records statute
|
Name, contact information, education, employment, employment history, and financial information
|
YES
|
|
C. Protected classification characteristics under state or federal law
|
Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data
|
YES
|
|
D. Commercial information
|
Transaction information, purchase history, financial details, and payment information
|
YES
|
|
E. Biometric information
|
Fingerprints and voiceprints
|
NO
|
|
F. Internet or other similar network activity
|
Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements
|
YES
|
|
G. Geolocation data
|
Device location
|
YES
|
|
H. Audio, electronic, sensory, or similar information
|
Images and audio, video or call recordings created in connection with our business activities
|
NO
|
|
I. Professional or employment-related information
|
Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us
|
NO
|
|
J. Education Information
|
Student records and directory information
|
NO
|
|
K. Inferences drawn from collected personal information
|
Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics
|
YES
|
| L. Sensitive personal Information | Account login information, debit or credit card numbers and personal data from a known child |
YES
|
- Receiving help through our customer support channels;
- Participation in customer surveys or contests; and
- Facilitation in the delivery of our Services and to respond to your inquiries.
- Category A – As long as the user has an account with us
- Category B – As long as the user has an account with us
- Category C – As long as the user has an account with us
- Category D – As long as the user has an account with us
- Category F – As long as the user has an account with us
- Category G – As long as the user has an account with us
- Category K – As long as the user has an account with us
- Category L – As long as the user has an account with us
Sources of Personal Information
Learn more about the sources of personal information we collect in “WHAT INFORMATION DO WE COLLECT?“
How We Use and Share Personal Information
Learn more about how we use your personal information in the section, “HOW DO WE PROCESS YOUR INFORMATION?“
Your Rights
You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:
- Right to know whether or not we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to request the deletion of your personal data
- Right to obtain a copy of the personal data you previously shared with us
- Right to non-discrimination for exercising your rights
- Right to opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California’s privacy law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”)
- Right to access the categories of personal data being processed (as permitted by applicable law, including the privacy law in Minnesota)
- Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in California, Delaware, and Maryland)
- Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in Minnesota and Oregon)
- Right to obtain a list of third parties to which we have sold personal data (as permitted by applicable law, including the privacy law in Connecticut)
- Right to review, understand, question, and depending on where you live, correct how personal data has been profiled (as permitted by applicable law, including the privacy law in Connecticut and Minnesota)
- Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including the privacy law in California)
- Right to opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including the privacy law in Florida)
How to Exercise Your Rights
To exercise these rights, you can contact us by submitting a data subject access request, by emailing us at info@getboards.com, by visiting getboards.com/contact-us, or by referring to the contact details at the bottom of this document.
Request Verification
Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.
Appeals
Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at info@getboards.com. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state attorney general.
California “Shine The Light” Law
California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us by using the contact details provided in the section “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?“
13. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?
In Short: You may have additional rights based on the country you reside in.
Australia and New Zealand
- offer you the products or services that you want
- respond to or help with your requests
- manage your account with us
- confirm your identity and protect your account
Republic of South Africa
At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting us by using the contact details provided in the section “HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?“
14. INTERPRETATION, SCOPE, AND PRECEDENCE
This Privacy Policy is meant to explain in plain English how we collect, use, share, and protect personal information. Examples are illustrative, not exhaustive. If any part of this Policy is incomplete, ambiguous, or conflicts with applicable law, we will interpret and apply it in a way that best protects user privacy while meeting legal requirements. If there is any inconsistency between this Policy and a service provider’s policy, this Policy controls for our processing activities, and the provider’s policy controls for theirs. Nothing here expands our right to collect or use data beyond what is lawful and reasonably necessary to operate our site, fulfill orders, and provide rentals and services.
15. RENTALS, RENTAL RESERVATIONS AND INCIDENT INFORMATION
When you place a reservation or rent equipment, we may collect sizing and setup information such as height, weight, shoe size, ability level, and preferred pickup location, as well as identity verification details shown on a government ID. If you choose to provide medical alerts or emergency contact information, we use it only for safety and incident response. We may generate or receive waiver records and incident reports to comply with insurance and legal obligations. We use this information to fit gear correctly, manage reservations, prevent fraud or loss, and comply with law. We retain it only as long as needed for these purposes and legal requirements. We share it with trusted providers that help us operate rentals, identity checks, or claims handling. We do not sell this information.
16. CAMERAS, CALLS, AND STORE SECURITY
Our stores and service areas may use security cameras for safety, loss prevention, and incident review. We may also record customer service calls for training, quality assurance, and fraud prevention. Recordings are kept for a limited period and may be shared with law enforcement, insurers, or service providers when legally required or to protect our customers, staff, or property. Retail locations and service areas may use security cameras for safety, loss prevention, and incident review. Customer service calls may be recorded for training and fraud prevention. We retain recordings for a limited period and disclose them only as allowed by law or to protect customers, staff, and property.
17. TEXT MESSAGES AND AUTOMATED ALERTS
With your consent, we may send transactional texts for order updates, pickup reminders, or rental returns. Marketing texts are sent only with consent. Message and data rates may apply. You can opt out of texts at any time by replying STOP. Consent to receive texts is not a condition of purchase.
18. IDENTITY CHECKS AND DEPOSIT HOLDS
To prevent fraud and loss on rentals, we may verify identity at pickup by visually checking a government ID or scanning it through a secure verification tool. If we scan an ID, we use it only to confirm authenticity and match the reservation. We do not store full ID images longer than necessary to complete verification or meet legal requirements. Some rentals may require a refundable card hold. Your card network and our payment processor handle the authorization. We release holds when equipment is returned, minus any permitted charges for loss or damage.
19. FITTING AND SIZING DETAILS (SENSITIVE DATA NOTICE)
For safe equipment setup we may ask for height, weight, shoe size, ability level, stance, and similar metrics. We treat these as sensitive where applicable. We use them only to set up gear, fulfill rentals, and manage safety. We do not use this information for advertising. We keep it only as long as needed for rentals, service history, and legal obligations.
20. INCIDENT, INSURANCE, AND CLAIMS HANDLING
If an incident occurs, we may collect and share information with insurers, legal counsel, or safety authorities, including waiver records, photos, and statements. We use this information only to investigate, resolve claims, and comply with law.
21. DELIVERY, ACCESS INSTRUCTIONS, AND LODGING INFO
If you request delivery or curbside pickup, you may provide access details such as gate codes, unit numbers, or concierge contacts. We use these details only to complete the delivery and do not retain them longer than necessary.
22. IN-STORE WI-FI AND DEVICE CONNECTIONS
If you use our guest Wi-Fi or connect to in-store devices, basic network and device identifiers may be collected by our network provider for operations and security. Usage is subject to the posted Wi-Fi terms. You can choose not to use guest Wi-Fi.
23. ADDITIONAL
Third-party checkouts, marketplaces, and bookings We may offer checkout or booking through providers such as payment wallets, marketplace listings, or reservation partners. When you use those services, their privacy policies apply to the information they process. We receive only the data needed to fulfill your order and support you. Automated fraud screening and human review Orders and rentals may be evaluated by automated tools to detect fraud or abuse. These tools consider factors like device signals, IP, and order patterns. You can request a human review if an order is flagged or declined. Product recall and safety notices If a manufacturer issues a safety notice or recall, we may use your contact information and purchase or rental records to notify you and help coordinate remedies. User photos, reviews, and social tags If you share photos, reviews, or tag us on social media, we may display that content to operate and promote our services. Do not include sensitive personal information. You can ask us to remove our use where feasible. Lost and found If you report or we locate a lost item, we may use your order or contact details to help return it. Items are kept for a limited period before disposal consistent with store policy. Data retention summary We keep data only as long as needed for the purpose collected and to meet legal, tax, and insurance requirements. Typical ranges: orders and tax records up to 7 years, rental and incident records for the legal limitation period, security footage 30 to 90 days unless needed for an investigation, Wi-Fi logs for short operational periods, and ID verification data only for the time needed to complete verification or comply with law. Updates and conflicts If we update this Privacy Policy, we will post a new effective date. If any part of this Policy conflicts with applicable law, we will follow the rule that provides greater privacy protection while meeting our legal duties.
24. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
25. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, you may email us at info@getboards.com or contact us by post at:
26. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please fill out and submit a data subject access request.
6. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.