Security and privacy

Protect the information that keeps your rental operation moving.

BookMyBoat supports security-minded operations with protected inquiry forms, careful access planning, responsible data handling, and clear ownership across connected services.

Website safeguards

Practical protections help keep visitor interactions and inquiries secure.

The BookMyBoat website sets content-type, frame, referrer, and permissions headers; protects configuration, include, template, and storage directories; disables directory listings; blocks common backup and secret-file extensions; validates and limits form input; checks request origins; uses spam and timing controls; and rate-limits repeated submissions when storage is available.

Recipient addresses and credentials remain outside client-side code, while visitors are reminded to keep passwords, payment-card details, government identifiers, health information, and customer records out of public forms.

Security starts with good operations: give each user the access they need, keep credentials private, and maintain clear procedures for payments, customer data, integrations, and incident response.

Built around responsible operations

Connect security decisions to the way your team works every day.

Identity and access

Organize user provisioning, authentication, roles, least privilege, temporary access, account removal, administrative actions, and session practices around each staff member's responsibilities.

Customer and reservation data

Collect only the information the operation needs, define retention and export practices, and keep support access and permitted uses clear.

Payment responsibilities

Understand which service handles card information, refunds, disputes, settlements, and payment controls so staff know exactly where each responsibility belongs.

Availability and recovery

Plan monitoring, backups, restoration, maintenance, capacity, incident communication, and operational fallback around the periods when bookings matter most.

Secure development

Use code review, dependency management, environment separation, protected secrets, useful logging, testing, and controlled releases to reduce avoidable risk.

Connected services

Keep payment, messaging, analytics, hosting, support, and other providers organized around clear data access and ownership.

A stronger security workflow

Know the data, control access, and prepare your team.

  1. 01

    Inventory information

    List customer, participant, staff, payment, agreement, operational, device, and reporting information, including sensitive fields that should stay outside BookMyBoat.

  2. 02

    Assign access

    Match guest, staff, administrator, support, third-party, export, device, and API access to real operating responsibilities.

  3. 03

    Protect each workflow

    Connect access controls, provider settings, operational procedures, and staff training to the way reservations move through the business.

  4. 04

    Stay prepared

    Use periodic account checks, offboarding, backup testing, staff refreshers, and incident exercises to keep safeguards current.

Security questions

Build security into every booking and staff handoff.

BookMyBoat helps operators connect access, data, payments, providers, and operating procedures around a clear security plan.

How are public inquiry forms protected?

BookMyBoat uses input validation, request-origin checks, spam controls, timing checks, rate limiting, protected server files, and security-focused response headers on the public website.

How should staff access be organized?

Assign access according to job responsibilities, remove accounts promptly when roles change, and keep administrator privileges limited to the people who need them.

How should payment security be handled?

Keep payment responsibilities clear across BookMyBoat, the payment provider, and your team, including refunds, disputes, settlements, account access, and staff procedures.

How should operators prepare for incidents?

Define who receives alerts, who can make changes, how guests and staff are informed, which providers are involved, and how normal operations are restored.

Build a secure, connected reservation operation with BookMyBoat.

Start with your staff roles, customer data, payment workflow, providers, and operating priorities.

Get Started