⚓ 1. Who We Are

Gleason Marine Inc. ("we," "us," or "our") is a South Carolina S Corporation doing business as Gleason Sails. We design and manufacture custom sails, operated by Gary Gleason. We are reachable at:

We act as the data controller for all personal information collected through this website.

📋 2. Information We Collect

We collect the following categories of personal information:

CCPA Category Type of Data Purpose
A – Identifiers Full name, email address, phone number, standard server logs Responding to quote requests; ensuring website security
B – Customer Records Name, email, phone, boat specifications provided in quote requests Preparing custom sail quotes

CCPA Notice at Collection Summary: We collect the categories of personal information listed above to provide custom quotes and services. We do not sell your personal information for monetary compensation. For details on how to opt-out of "sharing" for analytics/advertising, see Section 7. For our specific data retention periods, see Section 9.

We do not knowingly collect sensitive personal information such as Social Security numbers, financial account numbers, health data, biometric data, or precise geolocation.

🌊 3. How We Collect Information

Directly From You

When you fill out our contact form, request a custom sail quote, or call/email us, you voluntarily provide your name, email address, and phone number.

Automatically

When you visit our website, we automatically receive your IP address and standard browser/device information through server logs. See Section 8 – Cookies for our full cookie policy.

From Third Parties

We may receive limited information from third-party analytics or advertising platforms if you have interacted with our content on those platforms. We do not purchase data from data brokers.

⛵ 4. How We Use Your Information

We use your personal information only for the following purposes:

  • Responding to quote requests – contacting you about custom sail specifications, pricing, and delivery timelines.
  • Customer service – answering questions about your order, warranty, or our services.
  • Website operation & improvement – understanding which pages are popular, fixing errors, improving navigation.
  • Marketing communications – with your explicit consent, sending occasional updates about new sail products, promotions (including the Summer Sale), and sailing tips.
  • Legal compliance – meeting our obligations under applicable laws and responding to lawful government requests.
  • Fraud prevention & security – protecting against unauthorized or fraudulent activity.

We do not use automated profiling to make decisions with significant legal or similarly significant effects about you.

🔗 6. Sharing & Disclosure

We do not sell your personal information to third parties for their own marketing use. We may share limited data with the following categories of service providers who act as our agents:

  • Website hosting – Hostinger International Ltd. (hosts our website files and assets).
  • Form Processing – Formspree Inc. (securely processes and routes our quote requests and privacy requests submitted via our website forms).
  • Email – Email service provider used to receive and send business emails.

These service providers are contractually obligated to protect your information and may not use it for their own marketing purposes.

We may also disclose personal information:

  • As required by law, court order, or governmental authority;
  • To protect the rights, property, or safety of Gleason Sails, our customers, or others;
  • In connection with a merger, sale, or transfer of the business (you will be notified).

🚫 7. Sale or Sharing of Personal Information (CCPA)

Gleason Sails does not sell your personal information to third parties for monetary compensation.

Your Right to Opt-Out of Selling or Sharing

California residents have the right to opt out of the sale or sharing of their personal information. To exercise this right:

👉 Click here to submit a "Do Not Sell or Share" request, or use the link in our website footer labeled "Do Not Sell or Share My Personal Information."

🍪 8. Cookies Policy

We value your privacy. Our website does not use third-party tracking, analytics, or advertising cookies. We only use strictly necessary routing or security mechanisms provided by our host to ensure the website functions and loads securely. Because we do not use non-essential cookies, you will not see a cookie consent banner on our site.

📅 9. Data Retention

We retain your personal information only as long as necessary for the purposes described in this policy:

  • Quote-request data – retained for up to 3 years after your last interaction (matching our sail warranty period) to assist with warranty claims or follow-up questions.
  • Marketing contact data – retained until you unsubscribe, or automatically deleted after 24 months of inactivity (GDPR Storage Limitation, Art. 5(1)(e)).
  • Server/access logs – retained for up to 90 days for security purposes.

After the applicable retention period, personal data is securely deleted or anonymized.

🔒 10. Security

We implement reasonable physical, technical, and administrative safeguards to protect your personal information, including:

  • HTTPS/TLS encryption for all data in transit;
  • Access controls limiting who can view personal data;
  • Regular software updates and security patches on our hosting platform.

No method of internet transmission or electronic storage is 100% secure. In the event of a data breach that is likely to risk your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

🏛️ 11. Your Rights Under the CCPA/CPRA (California Residents)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) grants you the following rights:

Right to Know

Request disclosure of the categories and specific pieces of personal information we have collected about you, and how we have used and shared it.

Right to Delete

Request that we delete personal information we have collected, subject to certain legal exceptions.

Right to Correct

Request that we correct inaccurate personal information we maintain about you (CPRA right effective Jan. 1, 2023).

Right to Opt-Out

Opt out of the sale or sharing of your personal information. See Section 7.

Right to Limit

Limit the use and disclosure of sensitive personal information (if collected). We do not collect sensitive PI.

Right to Non-Discrimination

We will not deny services, charge different prices, or provide different quality of service because you exercised your privacy rights.

How to Submit a CCPA Request

Submit a verifiable consumer request through any of these methods:

We will respond within 45 calendar days, with a possible 45-day extension if needed (we will notify you). We may need to verify your identity before processing your request. You may designate an authorized agent; the agent must provide written authorization. If you are an authorized agent submitting a request on behalf of a consumer, you must email a copy of the consumer's signed permission to gleasonsails@gmail.com.

🇪🇺 12. Your Rights Under the GDPR (EEA / UK Residents)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and equivalent UK/Swiss laws:

Access

Obtain a copy of the personal data we hold about you (Art. 15).

Rectification

Have inaccurate personal data corrected (Art. 16).

Erasure ("Right to be Forgotten")

Request deletion of your personal data in certain circumstances (Art. 17).

Restriction

Ask us to restrict processing of your data (Art. 18).

Data Portability

Receive your data in a machine-readable format and transfer it to another controller (Art. 20).

Object

Object to processing based on legitimate interests or for direct marketing (Art. 21).

Withdraw Consent

Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority. A list of EU supervisory authorities is available at edpb.europa.eu. UK residents may contact the ICO at ico.org.uk.

International Data Transfers

Gleason Marine Inc. is based in the United States. If you are located in the EEA, UK, or Switzerland, your personal data will be transferred to and processed in the United States, which the European Commission has not recognised as providing an equivalent level of data protection.

As a small US business without an EU establishment, we do not rely on standard contractual clauses (SCCs) for these transfers. Instead, we rely on the following Article 49 GDPR derogations:

  • Pre-contractual necessity (Art. 49(1)(b)): Transfer of your name, email address, and phone number is necessary to take steps at your request prior to entering into a contract — specifically, to prepare and deliver your custom sail quote.
  • Explicit consent (Art. 49(1)(a)): By submitting a quote request through our website, you explicitly consent to the transfer of your personal data to the United States for the purpose of receiving a quote response from Gary Gleason. You may withdraw this consent at any time by contacting us at gleasonsails@gmail.com, though withdrawal will not affect the lawfulness of processing already carried out.

We implement reasonable security measures to protect your data during and after transfer. You acknowledge that US law may allow US authorities to access your data in certain circumstances.

EU/UK Representative

As a small business primarily serving the US market, we do not currently maintain an EU or UK representative. If this changes, we will update this policy.

📜 13. CalOPPA Disclosures (California Online Privacy Protection Act)

CalOPPA requires that operators of commercial websites conspicuously post a privacy policy. In compliance with CalOPPA, we disclose the following:

  • A link to this Privacy Policy appears in the footer of every page of our website.
  • You may request to review or change your personal information at any time by contacting us at gleasonsails@gmail.com.
  • We will notify you of material changes to this policy via a notice on our homepage or by email to the address we have on file, at least 30 days before the change takes effect.

Do Not Track (DNT) Signals

Because our website does not utilize third-party tracking or advertising scripts, your privacy is protected by default, regardless of your browser's DNT signal.

  • We will not load Google Analytics or similar tracking scripts.
  • No third-party tracking cookies will be set.

We do not allow third parties to collect personally identifiable information about your online activities across third-party websites when you are on our website.

👧 14. Children's Privacy

Our website is not directed to children under the age of 13 (in the United States) or under 16 (in the European Union and United Kingdom). We do not knowingly collect personal information from children below these ages. In the United States we comply with the Children's Online Privacy Protection Act (COPPA); in the EU/UK we observe the GDPR age of digital consent.

If you believe we have inadvertently collected information from a child below the applicable age threshold, please contact us immediately at gleasonsails@gmail.com and we will delete it promptly.

📬 15. Contact & Submitting Requests

For any privacy-related request — including access, deletion, correction, opt-out, or data portability — please contact us through one of the following channels:

Submit a Privacy Request

  • 📧 Email: gleasonsails@gmail.com — Subject: "Privacy Request – [type of request]"
  • 📞 Phone: 843-301-2097 — Ask for Gary Gleason
  • 📮 Mail: Gleason Marine Inc., Attn: Privacy Request, 613 Overbrook Drive, Seneca, SC 29678

Please include: your full name, email address, the type of request, and (for deletion/opt-out) a brief description of what data you want deleted or excluded. We may need to verify your identity before processing the request.

Response times:

  • CCPA requests: Within 45 days (extendable to 90 with notice).
  • GDPR requests: Within 30 days (extendable to 3 months with notice).

🔄 16. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the Last Updated date at the top of this page;
  • Post a notice on our website homepage for at least 30 days;
  • Where required, notify you by email.

Your continued use of our website after changes are posted constitutes your acceptance of the revised policy. We encourage you to review this page periodically.