Privacy
Policy

Islandview Harbour · 1087 Islandview Dr, Bailieboro, ON K9J 6X8
Last updated: July 13, 2026

Overview

Islandview Harbour ("we", "our", or "the marina") operates the website at islandview.club and its subdomains. This Privacy Policy explains what personal information we collect, why we collect it, and how it is used and protected.

This policy covers this website and its subdomains, and the Islandview Harbour marina management application that marina staff use at app.islandview.club. That application is the one that requests access to Google Calendar, described below.

By using our website or creating an account, you agree to the practices described in this policy.

Information we collect

When you create an account or submit an inquiry, we may collect:

  • Name, email address, and phone number
  • Mailing address and postal code
  • Boat details (name, make, model, year, registration)
  • Vehicle licence plate numbers
  • Emergency contact information
  • Payment and slip assignment records

When you sign in using Google or Microsoft, we receive your name and email address from those services. We do not receive or store your password.

How we use your information

  • To manage your marina account, slip assignments, and season records
  • To contact you about bookings, payments, or marina updates
  • To respond to inquiries submitted through our contact form
  • To send transactional emails (slip updates, verification codes)
  • To send marina news, seasonal offers and event announcements, where we have your consent — see Marketing messages below
  • To improve our website and services

We do not sell your personal information to any third party.

Marketing messages

Canada's Anti-Spam Legislation (CASL) governs commercial electronic messages. We send marina news, seasonal offers and event announcements only where we have your consent — either because you told us we may, or because you are an existing customer of the marina, which the legislation treats as implied consent for a limited period.

You can see and change this at any time from the Account settings tab of your account, where we record your choice along with the date, the wording you were shown, and how you told us. Every marketing email also carries a one-click unsubscribe link that works without signing in.

Withdrawing consent stops marketing messages only. We will still send you messages about things you have with the marina — sign-in codes, security notices, payment receipts, booking confirmations and anything you have signed — because those are part of your account rather than marketing, and are not commercial electronic messages.

We do not currently send text messages. If you have told us we may, that permission is recorded and would apply if we begin.

Sign-in and authentication

Our website uses passwordless authentication. When you sign in, we send a one-time verification code to your email address, or you may sign in using your existing Google or Microsoft account through OAuth 2.0.

Session tokens are stored locally in your browser and expire after a period of inactivity. We do not store your passwords.

Google Calendar integration

Staff members may choose to connect a Google Calendar to the marina management application. This connection is optional, is initiated by the staff member, and can be revoked at any time from the application's settings or from the staff member's Google Account.

When a calendar is connected, we request access to Google Calendar in order to:

  • Read events from the connected calendar so that busy time and marina-related jobs (such as water-taxi runs) are reflected in the marina schedule;
  • Create and update marina events on the connected calendar so that jobs and bookings stay in sync between the marina application and the staff member's calendar.

The Google OAuth scopes we request, and the only reason each is requested, are:

  • https://www.googleapis.com/auth/calendar.readonly — to read events from the connected calendar, so a staff member's existing commitments appear as busy time in the marina schedule;
  • https://www.googleapis.com/auth/calendar.events — to create and update marina events on the connected calendar, so jobs and bookings stay in step in both directions.

We request no other Google scopes. We do not access Gmail, Google Contacts, Google Drive, or any other Google service, and we do not read calendars other than the one the staff member connects.

We access only the event information needed for scheduling — such as event titles, times, and busy/free status. Access tokens are encrypted and stored securely; they are used only to perform the calendar synchronization described above and are never exposed to your browser or to other users.

We do not sell Google Calendar data, do not use it for advertising, and do not use it to train generalized artificial-intelligence or machine-learning models. Calendar data is used solely to provide the scheduling features of the marina application.

How long we keep Google data, and how it is deleted

Access and refresh tokens are encrypted at rest and are kept only for as long as the calendar stays connected. When a staff member disconnects a calendar — from the application's Settings, or from the third-party access page of their own Google Account — we ask Google to revoke the grant and we delete the stored tokens, and all further access stops at that moment.

Marina events we created on a staff member's own calendar stay on that calendar; they belong to the staff member, who can keep or delete them like any other event. Event details copied into the marina schedule are deleted on request — email info@islandview.club and we will remove them within 30 days.

Limited use of Google user data

Islandview Harbour's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, information received from Google Calendar and other Google APIs is used only to provide and improve the user-facing scheduling features described in this policy; is not transferred to third parties except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition; is not used for serving advertisements; and is not used to develop, improve, or train generalized machine-learning or artificial-intelligence models. Humans do not read Google user data unless we have your consent for specific messages, it is necessary for security purposes or to comply with applicable law, or the data has been aggregated and anonymized.

Cookies and tracking

We use Google Analytics (GA4) on islandview.club to understand how visitors use the site. This service may set cookies and collect anonymous usage data such as pages visited, session duration, and general location. You can opt out using the Google Analytics Opt-out Browser Add-on.

We also run our own anonymous measurement on our marina, rentals and booking pages, so we can see which pages people find useful without handing that information to anyone else. It sets no cookies. Each visit is given a random identifier that is kept in your browser's session storage and is deleted the moment you close the tab — it is never reused, so we cannot recognise you on a later visit or across devices. We record which page was viewed, roughly how long it was open, whether the device is a phone, tablet or desktop, and a broad category for how you arrived (for example “search” or “social”). We do not record your IP address: it is converted to a short check-value in memory purely to stop one source flooding us with requests, and is never written down or logged. Individual records are deleted after twelve months; only anonymous monthly totals are kept after that.

If you arrived through a link on a partner’s website, we set one first-party cookie (iv_ref) holding a single random reference number — nothing that names or describes you or your device — so that a booking you make afterwards can be credited to that partner; only our own servers can read it, it lasts as long as that partner’s agreement runs, it is never combined with the anonymous measurement described above, and it is not set at all if you did not arrive from a partner link.

We use local browser storage (localStorage) to keep your session and your text-size preference. We do not use tracking cookies for advertising purposes.

Data storage and security

Your data is stored securely using Supabase, a cloud database platform. Data is encrypted in transit (HTTPS) and at rest. Our website and application are hosted on Cloudflare.

Your rights

You may request access to, correction of, or deletion of your personal information at any time by contacting us. You can also delete your account directly through the My Account section of the website.

If you are a resident of Ontario or Canada, you have rights under PIPEDA (Personal Information Protection and Electronic Documents Act) regarding your personal data. To make a data access, correction, or deletion request, email us at info@islandview.club and we will respond within 30 days. Disconnecting a connected Google Calendar immediately stops further access to that calendar's data.

Third-party services

Our website integrates with the following third-party services, each with their own privacy policies:

Contact

Questions about this policy or your personal data can be directed to: