ShadeReady Privacy Policy

Information We Collect

We collect the information needed to fulfill your rental reservation, keep you informed, and improve the Services.

• Personal details you share. When you reserve a kit, join a waitlist, or contact us, you may provide your name, email, phone number, hotel or vacation rental details, travel party information, delivery windows, notes for the concierge, and payment preferences.
• Payment information. Checkout is processed through Stripe. We do not store full credit card numbers on our servers; Stripe tokenizes and secures that data on our behalf.
• Operational data. To deliver and retrieve kits, we track kit selections, rental dates, pickup history, scan events, support messages, and delivery instructions stored in Supabase and related tools.
• Automatically collected data. We use first-party cookies and session identifiers to remember reservation progress, capture first-touch marketing parameters (UTMs), and understand how the Website is used. We collect coarse device details and on-site interactions for analytics and security, and do not store full IP addresses in our analytics logs.
• Information from partners. With your permission, hotel staff, vacation rental hosts, or trip planners may share confirmation notes so we can complete deliveries or pickups.

How We Use Your Information

We do not sell your personally identifiable information. We use the data we collect to:

• Confirm, prepare, deliver, and retrieve cooling kit rentals you request.
• Communicate order updates, ask delivery questions, and provide customer support.
• Personalize the reservation flow, remember your preferences, and suggest relevant add-ons.
• Operate, analyze, and improve the Website, including troubleshooting, analytics, and security monitoring.
• Comply with legal obligations, enforce our Rental Agreement, and prevent fraudulent or unsafe activity.
• Send marketing messages or trip-planning tips when you have opted in, with the ability to opt out at any time.

Legal Bases for Processing (EEA/UK Visitors)

For visitors from the European Economic Area or the United Kingdom, ShadeReady is the data “controller” of your personal data. We process your information on the following legal bases, as applicable:

• Contract. To provide the Services you request, such as processing reservations and delivering cooling kits.
• Legitimate interests. To operate and secure our Services, prevent fraud and misuse, understand how the Website is used, and improve customer experience, where those interests are not overridden by your rights and interests.
• Consent. For certain optional uses, such as email marketing or non-essential cookies, where required by law. You can withdraw consent at any time using the methods described below.
• Legal obligations. To comply with applicable laws, regulations, and recordkeeping requirements.

When We Share Information

We only share information with third parties who help us provide the Services or when required by law.

• Service providers. Stripe (payments), Supabase (data hosting), email providers, Twilio (SMS), analytics tools, delivery teams, and vetted contractors help us operate ShadeReady. They may only use your information to perform work on our behalf and must safeguard it.
• Hotels and pickup locations. We may provide guest name, kit details, and delivery windows to hotel bell desks or vacation rental hosts so they can receive or release kits to you.
• Compliance and safety. We may disclose information if required by law, subpoena, court order, or if necessary to protect ShadeReady, our customers, or others from harm.
• Business transfers. If ShadeReady is involved in a merger, acquisition, or sale of assets, your information may transfer to the new owner subject to the same or stricter privacy obligations.

No sale or sharing for cross-context advertising. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are defined under applicable U.S. privacy laws.

Mobile opt-in data. Mobile phone numbers and SMS consent data are not shared with third parties or affiliates for their own marketing or promotional purposes.

International Data Transfers

ShadeReady is based in the United States, and the information we collect is generally processed in the U.S. If you access the Services from outside the U.S., including from the EEA or UK, your information may be transferred to and stored in countries with different data protection laws than your home country. Where required, we use appropriate safeguards, such as contractual commitments, to protect your information when it is transferred.

Cookies & Tracking Technologies

Cookies and similar technologies help remember your reservation progress, keep you signed in to admin tools, and understand how visitors use the Website. We use first-party session identifiers to attribute first-touch marketing parameters (UTMs) and improve the reservation flow. Most browsers allow you to disable or limit cookies, but doing so may limit core functionality such as checkout or account access. Third parties we rely on may also place their own cookies or web beacons; their use is covered by their respective privacy policies.

We currently do not respond to browser “Do Not Track” signals. You can control cookies through your browser settings and, where provided, through our on-site preferences or consent tools.

Data Retention & Security

We retain personal information for different periods depending on the data type, our business needs, and legal obligations. Our retention criteria include legal and tax requirements, fraud prevention, dispute resolution, and operational necessity.

• Customer and contact data (name, email, phone, delivery details): retained while your account or order history remains active, and longer if required for legal or operational records.
• Reservation, order, and fulfillment records (including scan events and transaction data): generally retained for up to 7 years to support accounting, tax, and dispute obligations.
• Support and SMS communications: retained as needed to provide support, document consent and opt-out preferences, and maintain service quality and safety.
• Cookie and telemetry data: retained for shorter periods where feasible and/or de-identified or aggregated when no longer needed for analytics and security.

Supabase stores production data in data centers with access limited to authorized personnel. Sensitive information such as payment details is encrypted in transit and handled by Stripe. No online service can guarantee absolute security, but we monitor for vulnerabilities and apply updates promptly.

Your Choices & Rights

• Update or correct your reservation details by replying to any ShadeReady email or contacting privacy@shadeready.com.
• Opt out of marketing emails by using the unsubscribe link at the bottom of the message or emailing us with your request. Transactional emails about active orders are still required.
• SMS updates (if available) will describe message frequency and data rates. Reply STOP to opt out or HELP for assistance.
• Decline or limit cookies through your browser settings or, where available, through our on-site cookie preferences. Some features may not function fully without certain cookies.

Depending on where you live (for example, in some U.S. states, the EEA, or the UK), you may have additional rights over your personal information, such as the right to request access, correction, deletion, restriction, portability, or to object to certain uses. To exercise these rights, contact privacy@shadeready.com or call/text +13213955838. We will respond as required by applicable law.

Additional Information for California Residents

If you are a resident of California, you may have additional rights over your personal information under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). These may include the right to:

• Request to know the categories and specific pieces of personal information we collect, use, disclose, or share.
• Request deletion of personal information we hold about you, subject to certain exceptions.
• Request correction of inaccurate personal information.
• Request information about how we share personal information and with whom.
• Limit the use and disclosure of certain sensitive personal information, where applicable.

Categories of personal information collected in the preceding 12 months. Depending on your interactions with us, these may include identifiers (such as name, email, phone, and online/session identifiers), commercial information (reservation/order details), internet or network activity information (website interactions and telemetry), and customer communications (support and SMS records).

Categories disclosed for business purposes in the preceding 12 months. We may disclose the categories above to service providers and contractors that support payment processing, cloud hosting, communications, analytics, fraud prevention, customer support, and operations, as described in this Policy.

ShadeReady does not sell personal information and does not share personal information for cross-context behavioral advertising. Mobile phone numbers and SMS consent data are not shared with third parties or affiliates for their own marketing or promotional purposes. To exercise your California privacy rights, or to designate an authorized agent, contact privacy@shadeready.com or call/text +13213955838. We may need to verify your identity before completing your request. We will not discriminate or retaliate against you for exercising your rights.

This California notice is intended to supplement the rest of this Privacy Policy and is not legal advice.

Children's Privacy

The Services are intended for adults traveling to Orlando theme parks. We do not knowingly collect personal information from children under 13. If we learn that a child has provided us personal information, we will delete it and cancel any related reservations unless an adult guardian promptly confirms responsibility.

Third-Party Links & Integrations

The Website may include links to hotel partners, travel planners, or payment processors. Their websites have their own privacy policies and security practices. We encourage you to review those statements, as ShadeReady is not responsible for the content or data handling of third-party sites.

Changes to This Policy

We may update this Privacy Policy as our services evolve or to comply with new regulations. Material changes will be posted on this page with a revised date, and we may notify you by email or reservation alert. Continued use of the Services after an update constitutes acceptance of the revised policy.

Contact Us

Questions about this Privacy Policy or our data practices? Email privacy@shadeready.com or call/text +13213955838 or mail ShadeReady, LLC, 10442 Glassborough Drive, Orlando, FL 32825. For general support with a rental, you can contact support@shadeready.com.