Privacy Policy

This Privacy Policy governs your use of the SS Deckly platform, operated by SS Deckly LLC, a company registered in the Sharjah Media City Free Zone, United Arab Emirates (Licence No. 2647895.01, Formation No. 2647895). References to "SS Deckly," "we," "us," or "our" refer to SS Deckly LLC.

This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you use our platform at ssdeckly.com and any associated applications or services.

By accessing or using SS Deckly, you acknowledge that you have read, understood and agree to the collection and use of your data as described in this Privacy Policy.

If you have any questions regarding this policy, please contact us at hello@ss-deckly.com.

Account Data: When you register as an operator or customer, we collect your full name, email address, telephone number, company name, and billing information.

Booking Data: We collect information related to bookings including dates, experience selections, guest counts, special requests, add-on selections and payment records.

Usage Data: We automatically collect information about how you interact with our platform including pages visited, features used, browser type, device type, IP address, and session duration.

Communication Data: We store messages, enquiries and feedback submitted through the platform.

Payment Data: Payment processing is handled by Stripe Inc. We do not store full card details. We retain transaction references, amounts and status records only.

Review and Feedback Data: Customer reviews, ratings and feedback submitted following an experience.

To provide, operate and improve the SS Deckly platform and its features.

To process bookings and payments on behalf of hospitality and marina operators.

To send automated communications including enquiry updates, reminders, invoices and notifications via email and, where available, via WhatsApp.

For details of our WhatsApp messaging programme — including message types and opt-out instructions — see our WhatsApp terms page.

To enable operators to manage their experiences, team, customers and business operations.

To provide customer support and respond to enquiries.

To send service updates, security alerts and important account notifications.

To comply with applicable laws, regulations and legal obligations in the UAE.

To prevent fraud, protect security and enforce our Terms of Service.

Google User Data We Access: When an operator connects their Google account, SS Deckly requests access to the Google Calendar API using the https://www.googleapis.com/auth/calendar scope. This grants us the ability to create, read, update and delete calendar entries within your Google Calendar account.

Why We Access This Data: We use Google Calendar access solely to (a) create a dedicated 'SS Deckly' calendar within your Google account to organise bookings separately from your personal calendar, and (b) create, update and delete individual calendar events for each booking — containing vessel name, guest count, booking duration and timing — so operators can view and manage bookings directly from Google Calendar.

How We Store and Protect This Data: We store your Google OAuth refresh token in our secure database, encrypted at rest, to maintain the calendar connection on your behalf between sessions. We also store the calendar ID of the dedicated 'SS Deckly' calendar we create in your account. We do not store, read, cache or retain the content of any other calendars or events that we did not create. Your Google OAuth credentials are never logged or transmitted to any third party.

Scope of Use: We use Google user data exclusively for the calendar synchronisation purposes described above. Google user data is not used to serve advertising, to profile operators or users, or for any purpose other than operating the booking calendar feature described in this section.

Third-Party Sharing: We do not sell, share, transfer or disclose your Google user data — including your Google OAuth tokens or any Google Calendar data — to any third party, advertiser or partner under any circumstances. Google user data is not used as input to or training data for any artificial intelligence or machine learning model.

Revoking Access: You may disconnect Google Calendar at any time from the Settings page within the SS Deckly operator dashboard. Upon disconnection, your OAuth refresh token is immediately deleted from our database and we cease all API calls to your Google account. Calendar events previously created by SS Deckly will remain in your Google Calendar unless you choose to delete them manually.

Google API Services User Data Policy: SS Deckly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements available at https://developers.google.com/terms/api-services-user-data-policy.

Performance of Contract: Processing necessary to provide the services you have contracted with us for.

Legitimate Interests: Processing necessary for our legitimate business interests including security, fraud prevention and platform improvement.

Legal Obligation: Processing required to comply with applicable UAE laws and regulations, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, 'PDPL').

Consent: Where we rely on consent, you may withdraw it at any time by contacting hello@ss-deckly.com.

We do not sell, rent or trade your personal data to third parties for marketing purposes under any circumstances.

We may disclose data to UAE regulatory or law enforcement authorities where required by law.

In the event of a business acquisition or merger, data may be transferred to the acquiring entity subject to equivalent privacy protections.

We retain account and booking data for a minimum of 5 years following account closure to comply with UAE commercial and financial record-keeping requirements.

Usage and analytics data is retained for 24 months.

You may request deletion of your personal data subject to our legal retention obligations by emailing hello@ss-deckly.com.

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, regular security audits, and access controls.

Despite our measures, no system is completely secure. We will notify affected users and relevant authorities promptly in the event of a data breach as required by UAE law.

You have the right to access, correct, update or request deletion of your personal data.

You have the right to object to or restrict certain types of processing.

You have the right to data portability where technically feasible.

To exercise any of these rights, contact hello@ss-deckly.com. We will respond within 30 days.

We use cookies and similar technologies as described in our Cookie Policy, available at ssdeckly.com/cookie-policy.

Your data may be processed on servers located outside the UAE. Where this occurs we ensure appropriate safeguards are in place consistent with UAE data protection principles.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the platform following notification constitutes acceptance.

This Privacy Policy is governed by the laws of the United Arab Emirates and the regulations of the Sharjah Media City Free Zone.

Any disputes arising out of or in connection with this Privacy Policy shall be submitted to the exclusive jurisdiction of the Sharjah Courts.