Depending on how you use the Services, we may collect:

• Identity and contact information: name, address, email, telephone number, date of birth or age confirmation, account identifiers, and emergency contact.
• Eligibility and verification information: government-ID type, issuing jurisdiction, expiration, verification result, driver or towing qualification, business-license or commercial-account information, and signatures. We should retain an ID image only when operationally necessary and disclosed at collection.
• Reservation and transaction information: equipment, location, dates, rates, deposits, payment status, discounts, tax, delivery, return, cancellation, and communication preferences.
• Payment information: payment tokens, card brand, last four digits, authorization and transaction details. Payment processors, not Kirby Co. & Outfitters, may collect full payment-card information directly.
• Rental, condition, and safety records: checkout and return checklists, equipment photos, meter or fuel readings, training and fitting acknowledgments, incident reports, damage evidence, operator information, and the version and acceptance record for legal documents.
• Adventure safety and sizing information: participant age category, height, weight, PFD or thermal-protection size, accessibility or accommodation information, swimming or experience information, and other safety information you or an adult responsible for a participant voluntarily provides.
• Device and website information: IP address, browser and device type, cookie or similar identifier, pages and features used, referring page, approximate location derived from IP, and diagnostic or security logs.
• Communications and submitted content: emails, messages, calls where lawfully recorded with notice, survey responses, reviews, uploaded photos, and support requests.
• Location information: pickup and return location and any launch, route, incident, or precise location you voluntarily provide or a safety feature collects with separate notice and permission.

We collect information directly from you; from an adult making a reservation for another participant; automatically from your browser or device; from our rental and partner locations; from payment, identity, communication, hosting, analytics, fraud-prevention, and support providers; and from lawful public or commercial sources when needed to verify a business account, fraud concern, or legal requirement.

We use information to:

• provide quotes, reservations, rentals, delivery, pickup, returns, refunds, deposits, accounts, and customer support;
• verify identity, age, eligibility, payment, authorized operators, and equipment compatibility;
• fit safety equipment, provide requested accommodations, conduct orientation, assess operational readiness, and respond to incidents or emergencies;
• document equipment condition, signatures, consent, and the controlling version of an agreement;
• process payments, prevent fraud, protect customers, recover equipment, and enforce agreements;
• send transactional messages and, with any consent required by law, marketing messages;
• maintain, secure, troubleshoot, and improve the Services and equipment program;
• comply with tax, accounting, safety, insurance, litigation-hold, court-order, and other legal obligations; and
• create aggregated or deidentified information that is not reasonably linkable to a person.

We may disclose relevant information to:

• service providers and processors that host or support the website and rental system, process payments, send messages, provide analytics or consent-management tools, verify identity, store records, prevent fraud, or provide customer support;
• participating rental, pickup, return, delivery, and service locations to complete the transaction and address safety, condition, or incident needs;
• authorized account participants, guardians, or commercial-account contacts as reasonably necessary for their transaction or responsibilities;
• professional advisers and business partners, including insurers, attorneys, accountants, auditors, repairers, recovery vendors, and prospective transaction counterparties subject to appropriate confidentiality or legal duties;
• government, courts, emergency responders, and law enforcement when required by law or reasonably necessary to protect a person, investigate fraud or theft, respond to an emergency, or establish or defend legal claims; and
• a successor in a merger, acquisition, financing, reorganization, bankruptcy, or sale of business assets, subject to applicable law.

We do not sell personal information for money. We do not sell consumer health data. We do not disclose consumer health data for targeted advertising. If our practices materially change, we will update this notice and obtain consent where required before the new collection or sharing.

We and our providers may use cookies or similar technologies that are necessary for authentication, security, reservations, preferences, diagnostics, and analytics. Where required, nonessential technologies will be subject to a consent control. Browser settings may block some technologies, but doing so may affect functionality. Any legally recognized opt-out preference signal will be honored when and to the extent applicable to our Services.

Payments may be processed through a third-party payment processor under its own privacy notice. Kirby Co. & Outfitters should avoid storing complete card numbers or security codes. We use payment tokens and limited transaction details where available.

We retain information only as long as reasonably necessary for the purposes described, including the rental relationship, safety and incident management, equipment recovery, accounting and tax rules, charge disputes, insurance, fraud prevention, and applicable limitation periods. Signed waivers and records involving minors may be retained longer because legal claim periods may be tolled. We delete, deidentify, or securely dispose of information when it is no longer needed, subject to backup cycles, legal holds, and lawful exceptions.

We use administrative, technical, and physical safeguards appropriate to the nature and volume of information, such as access controls, role-based permissions, secure transmission, processor oversight, logging, backups, and staff practices. No system is completely secure. If a breach triggers notice obligations, we will provide notice as required by applicable law.

You may request access, correction, or deletion of your information; update account information; withdraw an optional consent prospectively; or opt out of marketing email by using the message link or contacting us. Text-message opt-out instructions, when applicable, will be included in messages. We may verify your identity and may retain information when necessary to complete a transaction, comply with law, protect safety or security, prevent fraud, or establish or defend legal claims.

Submit a request to privacy@Contact the Hoodsport Ace & Lumber rental desk. If that mailbox is not operational, use Contact the Hoodsport Ace & Lumber rental desk for current contact information and put “Privacy Request” in the subject. We will respond within the period required by applicable law.

This section is intended to provide the notice required by the Washington My Health My Data Act when information we process qualifies as consumer health data.

Categories collected

We may collect information linked to a consumer that identifies or could reveal a physical status relevant to a requested rental or incident, such as height, weight, body or gear size, mobility or accommodation needs, voluntarily disclosed medical or physical limitations, injury or incident information, and precise location associated with emergency or safety response.

Sources

We collect this information directly from the consumer; from a parent, guardian, or responsible adult arranging participation; from staff observations or fitting records; and from incident, emergency, or location information the consumer chooses to provide.

Purposes and use

We process this information only as reasonably necessary to provide a product or service the consumer requests, including proper PFD or thermal-equipment sizing, age and supervision rules, equipment selection, accessibility, orientation, incident response, emergency assistance, documentation, and legal compliance; or for another purpose with the consumer’s specific consent.

Sharing

We may share only the categories necessary with staff and the participating rental location; hosting, record-management, communication, or other processors acting under instructions; emergency responders; and professional advisers, insurers, or authorities when authorized or legally permitted. We do not sell consumer health data. We do not share it for advertising. Kirby Co. & Outfitters has no affiliates with which it shares consumer health data unless an affiliate is specifically identified in an updated notice.

Washington rights

A Washington consumer may request confirmation, access, a list of third parties and affiliates with whom data was shared or sold, withdrawal of consent, or deletion. A consumer may appeal a refusal by replying “Appeal” to the decision or emailing privacy@Contact the Hoodsport Ace & Lumber rental desk with “Health Data Appeal.” We will respond within the time required by Washington law. If an appeal is denied, the consumer may contact the Washington Attorney General.

Withdrawal does not affect processing already performed and may prevent a future rental feature that cannot safely be provided without the information. Consent for collecting consumer health data is separate from any consent legally required to share it.

The online Services are intended for adults and are not directed to children under 13. Only an adult may create a reservation or rental. Information about a minor participant should be provided by the parent, guardian, or responsible adult—not directly by the child. If we learn that a child under 13 submitted personal information directly through the online Services without required parental consent, contact us so we can address it.

The Services may link to maps, manufacturers, training resources, payment pages, social media, or other third parties. Their privacy practices are governed by their own notices. A link is not an endorsement of every third-party practice.

We may update this policy prospectively. We will post the revised effective date and provide additional notice or obtain consent when law requires. The privacy and agreement records associated with a completed transaction remain tied to the version presented for that transaction.

Privacy contact: privacy@Contact the Hoodsport Ace & Lumber rental desk (if operational) or Contact the Hoodsport Ace & Lumber rental desk for current contact information
Hoodsport Ace & Lumber Rentals: 1157 N National Ave, Chehalis, WA 98532 · 360-748-3337
Hoodsport Ace & Lumber Rentals — Hoodsport: 150 N Lake Cushman, Hoodsport, WA 98548 · 360-877-4005 · Contact the Hoodsport Ace & Lumber rental desk for current contact information