Privacy Policy

1. Information We Collect

Information you provide directly

• Account information - your name, email address, and password when you create an account
• Profile information - avatar photo, and for providers: organisation name, website, location, and activity types
• Listing content - camp and activity details, photos, pricing, and descriptions submitted by providers
• Reviews - ratings, written reviews, and photos submitted by parents
• Booking requests and provider messages - when you submit a booking request or send a message to a provider, we collect your name, email address, any phone number you provide, your child's first name, your child's age, and the content of your message
• Payment information - billing details processed by Stripe. We do not store your payment card information directly.
• Communications - messages you send us via contact or support forms

Information collected automatically

• Usage data - pages visited, listings viewed, searches performed, and actions taken on the Platform. This is collected using Google Analytics and PostHog.
• Device information - browser type, operating system, and IP address
• Listing views - when you view a listing we record the view. Where your IP address is available, it is stored only as an irreversible cryptographic hash, which we use to avoid counting the same visitor more than once per day.
• Spam and abuse prevention - Google reCAPTCHA collects device and behaviour signals on our signup, password reset, support, booking request, and contact forms in order to distinguish genuine users from automated abuse
• Cookies - see Section 6

Information from third parties

• Stripe - payment status and subscription information
• Google Maps - location data when you use location-based search features
• Supabase - our database and authentication provider, which stores your account data on servers located in Canada (Canada Central region)
• Public sources - we compile listings for camps, classes, and childcare providers from publicly available sources, including the Google Places API and provider websites. This includes business names, addresses, phone numbers, published contact email addresses, and program details. Providers may claim, correct, or request removal of their listing at any time by contacting us.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Provide and improve the Platform
• Process payments and manage subscriptions via Stripe
• Send transactional emails (account confirmation, review notifications, billing receipts)
• Display listings and search results relevant to your location
• Pass booking requests and messages to the provider you have chosen to contact
• Measure how listings perform, so providers can see views, saves, and impressions for their own listings
• Allow providers to respond to reviews and manage their listings
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal information to third parties.

3. How We Share Your Information

We share your information only in the following circumstances:

• Providers you contact - when you submit a booking request or send a message through a listing, the information in that request is sent directly to that provider. Booking requests include your name, email address, your child's first name and age, and any phone number or message you provide. Messages sent through the contact form include your name, email address, your child's age if you supply it, and your message. If a listing has not yet been claimed, your message is sent to the contact email address published by that business, and we have no agreement with that business governing how it handles your information.
• Service providers - we use third-party services to operate the Platform, including Supabase, Stripe, Resend, Vercel, Google Maps, Google reCAPTCHA, Google Analytics, PostHog, and Upstash. These providers access your information only as necessary to perform their services. Several of these providers process data outside of Canada, primarily in the United States, and your information may be processed in those jurisdictions.
• Public listings - listing content, provider profiles, and reviews submitted to the Platform are publicly visible.
• Legal requirements - we may disclose your information if required by law, court order, or government authority.
• Business transfer - if SkimScout is acquired or merged, your information may be transferred as part of that transaction.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Platform. You may request deletion of your account and associated data at any time through your account settings. Some information may be retained for legal or legitimate business purposes after account deletion. Content you have submitted that is publicly visible, such as reviews, may remain available in a de-identified form after your account is deleted.

Booking requests and messages sent to providers are retained so that both you and the provider have a record of the enquiry. You may request deletion of these records at any time by contacting us.

5. Your Rights (PIPEDA)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA), you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Withdraw consent to the collection or use of your information (subject to legal or contractual restrictions)
• Request deletion of your personal information

To exercise any of these rights, contact us at hello@skimscout.com. We will respond within 30 days.

6. Cookies

We use two kinds of cookies:

• Essential cookies required for authentication and core Platform functionality
• Analytics cookies set by Google Analytics and PostHog, which help us understand how the Platform is used so that we can improve it

We do not use advertising cookies, and we do not sell your personal information. You can disable cookies in your browser settings, but disabling essential cookies will affect your ability to use the Platform.

7. Children's Privacy

SkimScout is intended for use by adults. You must be at least 18 years old to create an account. We do not knowingly allow children to create accounts, and we do not collect personal information directly from children.

We do collect limited information about children from their parents or guardians. When you submit a booking request you provide your child's first name and age. When you send a message to a provider you may provide your child's age. We collect this information for one purpose only, which is to pass it to the provider so they can assess whether a program is suitable for your child. It is shared with that provider and is not used for any other purpose.

Please provide only what is necessary. Do not include a child's full name, date of birth, home address, school, health information, or photograph in a booking request or message.

If you believe a child has created an account or provided us with personal information directly, please contact us at hello@skimscout.com and we will delete it promptly. Parents and guardians may request access to, correction of, or deletion of any information we hold about their child by contacting the same address.

8. Security

We take reasonable technical and organisational measures to protect your personal information, including encrypted data transmission (HTTPS), secure authentication via Supabase, and restricted access to personal data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Third-Party Links

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a new effective date. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Email: hello@skimscout.com
Website: skimscout.com