Privacy Policy

Last updated September 19, 2026

This policy explains what information Sky Island Adventures (“we,” “us”) collects when you visit this website, book a guided trip, sign our client agreement, or contact us, and what we do with it. Sky Island Adventures is operated by Justin Ellis as a sole proprietor, 1105 Santiago St, Alamogordo, NM 88310. Questions about this policy: skyislandadv@gmail.com.

What we collect

Booking details: your name, email address and phone number; the trip, date and party size; any promo code; and, if you claim the military / veteran / first-responder discount, that you checked that box.
Client agreement and signature: your typed name, your drawn signature, the date and time you signed, the internet (IP) address you signed from, and which version of the agreement you signed.
Emergency contact and health information: an emergency contact’s name and phone number, and a short health and swimming-ability form — swimming ability, whether you can walk about 30 minutes over rough terrain, any medical conditions, injuries or medications, and allergies. If you are the parent or legal guardian of a minor, you give us the same kind of information for them, plus their name, date of birth and life-jacket size.
Guests: if you book for a group, you give us each other adult’s name and email address so we can send them their own agreement to sign. Each guest then gives us their own emergency contact, health information and signature.
Photo and video choice: whether you agree to let us use photos or video from your trip for marketing. It is optional.
Payment information: payments are handled by Stripe. We never see or store your full card number. We keep the payment amounts and the identifiers Stripe gives us, so we can refund you or charge the remaining balance you agreed to.
Messages: your name, email address and message when you use our contact form or email us.
Technical information: your IP address and basic request details, which our hosting provider keeps in its server logs, and which we use in a scrambled (hashed) form to stop abuse such as automated spam.

Why we use it

To take and manage your booking: hold your date, charge your deposit and balance, email your confirmation, and handle changes and cancellations.
To run your trip safely: your emergency contact and health information help your guide plan the day and respond if something goes wrong.
To keep the records we are required or advised to keep, including your signed agreement.
To answer your messages and to send emails about your booking, such as reminders and signing links. We do not send marketing emails.
To protect the site from abuse and keep it working.

Health information

We treat health information as sensitive. We use it only to plan and run your trip safely. We do not use it for marketing and do not share it except with emergency responders if there is an emergency, with our insurance carrier or a government agency if required, or as the law otherwise requires.

Who we share information with

We do not sell your information and we do not use it for advertising. We use a small number of service providers to run the site; each receives only what it needs:

Stripe — card payments and invoices.
Supabase — the database where bookings, agreements and health forms are stored.
Vercel — website hosting.
Google — our calendar (it holds your name, the date and your party size) and the Gmail account we send email from.

Within a group booking, the person who booked can see the name and signing status of each guest they added, and each guest sees who booked, the trip, the date and the size of the party — not the price. We may also share signed agreements with our insurance carrier or the U.S. Bureau of Land Management if they ask for them, and we may disclose information when the law requires it.

How long we keep it

We keep signed agreements, the health and emergency-contact information that goes with them, and booking records for at least three years, as our insurance carrier requires. We keep other information only as long as we need it for the reasons above.

Children

Anyone under 18 can join a trip only when booked and accompanied by a parent or legal guardian, who signs for them. We do not knowingly collect information directly from children; information about a minor comes from their parent or guardian.

Cookies and similar technology

We do not use advertising or analytics cookies. While you book, we may keep your contact details in your browser’s temporary storage so a second booking can be filled in for you; it is cleared when you close the tab. Stripe may use cookies and similar technology on its payment form to process payments and prevent fraud.

Your choices

You can ask to see, correct or delete the information we hold about you by emailing us. We will help unless we need to keep something to meet a legal or insurance requirement, such as the three-year record-keeping above. Photo and video use is optional, and you can decline it when you sign.

Security

The site uses HTTPS, private links for every booking and signing page, and limits who can read the stored information. No system is perfectly secure, so we cannot guarantee absolute security.

Links to other sites

This site links to other websites, such as the New Mexico Department of Wildlife and Instagram. We do not control them and this policy does not cover them.

Changes to this policy

If we change how we handle information we will update this page and its date. Signed agreements are not affected by later changes to this policy.