Private matching and owner control
Pass the Helm is operated by Bryan Morris through BSM Enterprises LLC. We store your name, email, boat details, optional photos, matching preferences, participation choices, consent history, and introduction decisions privately. Profiles do not form a public directory. Please keep contact details out of introductions and remove identifying documents and photo location metadata before uploading.
When information is shared
Verified, eligible profiles are compared using structured preferences. New boats initially require administrator approval. Owners can privately review a captain’s first name, general location, experience, introduction, plans and compatibility reasons. Captain contact details remain hidden. Owner selection authorizes the selected captain to review the boat details. Only after that captain explicitly confirms the specific invitation and current sharing consent do we email the captain’s email address to the owner. No boat, timing, suitability or condition is guaranteed.
Administrator personal interest
The operator may personally be interested in a boat. We disclose that interest and request the owner’s agreement to a time-limited matching hold. Owners may decline; unanswered hold requests release within 24 hours. Agreed holds expire, initially within seven days, and can only be extended with fresh owner agreement.
Storage and providers
The transactional database and photos are stored outside the public website directory on our existing Bluehost hosting account. Private email links, notifications and introductions use the hosting mail service. Reference and health alerts go to the operator’s Gmail inbox. Stripe handles the one-time registration payment and card details; card numbers are not stored here. These providers process information needed to deliver the service. Hosting access and security logs may include network information.
Your participation and deletion choices
Use private email access at Your private account to edit, pause, withdraw or request deletion immediately. Revoked matching consent stops eligibility and cancels pending introductions. We send verification, registration, owner candidate summaries, owner-selected captain invitations, introduction confirmations and necessary security messages. An optional single invitation reminder requires your choice. We do not add you to marketing lists.
Retention
Active owner and captain profiles remain while participation continues; captain registration does not expire annually. Unverified pending accounts are removed after 30 days. Contact messages and older legacy intake records are removed after 90 days when intake runs. Profile deletion removes matching profile details, active contact data and matching photos; minimal payment references and financial-contact records may remain separately for accounting or legal obligations. Minimal pseudonymous pairing decisions and audit records are retained to prevent repeat introductions after a decline or completion. These are not a public profile. Daily database recovery copies rotate after seven days; hosting backups and delivered emails follow their providers’ retention, so deletion is not instantaneous in those copies. Contact us for access, correction or a privacy request.
Security and cookies
HTTPS, private storage, access checks, secure session cookies, expiring single-use access links, server validation and rate limits protect the service. Links are confirmed with a button so email scanners do not consume them. No security measure is infallible. No advertising or analytics trackers have been added. Google Fonts receives normal typography requests. Photos are served privately only to authorized participants and administrators.
For support and privacy questions use Contact. Automated-email replies are not monitored.