Privacy Policy

This policy explains what VRABC collects, why we collect it, and the choices you have. VRABC (vrabc.com) is operated by Zima Enterprises ("we," "us"). We keep this short and plain because you deserve to understand it. If anything here is unclear, send us a message.

Effective date: August 13, 2026

What we collect and why

We only collect what we need to run the site, deliver your downloads, and support the hosted tools. Here is the full list.

• Your account — your name, email address, and a hashed password. We use these to create your account, sign you in, and give you access to the items your $49 USD pass unlocks.
• Your purchase — we record that you bought the pass so we know what you can download. Card details are handled by Stripe, not by us (more on that below).
• Download logs — when you download a file, we log the IP address of the request along with which file and when. This helps us keep paid files gated to people who actually purchased them and lets us spot abuse.
• Newsletter — if you subscribe, we store your email so we can send occasional updates. Ask us through the contact page and we will remove you.
• Inquiries — if you ask about coaching, an audit, direct-booking work or anything through the contact form, we collect what you send: your name, email, your market, your message, and the IP address and referring page of the submission. We store it on this site and use it to reply to you. It is not passed to anyone else.
• The hosted tools (Home Manual, Turnover Tracker, and Inventory & Loans) — if you use these, we store the content you put in: your manual text and the photo link you choose for its header, turnover checklists and any photos you or your cleaner upload, the items you track and who you lent them to, and any iCal calendar URLs you connect so the tools can sync availability. The tools use tokenized links so guests and cleaners can view their pages without logging in.

Cookies and analytics

We use one strictly-necessary session cookie. It keeps you signed in and makes the site work — it is not an advertising cookie, and we do not sell or share it with advertisers.

We also run Google Analytics, which sets its own analytics cookies. These are not strictly necessary, so if you would rather not be measured, block or clear cookies for this site in your browser, or use its Do Not Track / tracking-protection setting. We do not run advertising or remarketing tags.

One thing sends your IP address to Google, and we want to be upfront about it:

• Google Analytics, loaded through Google Tag Manager — this runs on every page so we can understand how the site is used: which pages get visited, and roughly where traffic comes from. It sends usage data, including your IP address, to Google. We use it for aggregate insight, not to build individual profiles, and we do not use it for advertising.

We do not load web fonts from Google or anyone else — the site uses the fonts already on your device, so no font request leaves your browser.

Who we share data with

We do not sell your personal data. We share it only with the service providers that make the site function:

• Stripe — processes your card payment for the $49 USD pass. Your card number goes to Stripe, not to us. Stripe handles that data under its own privacy terms.
• Google — receives your IP address and usage data through Google Analytics / Google Tag Manager, as described above.

We may also disclose information if the law requires it, or to protect the site, our users, or our rights.

How long we keep it

We keep account and purchase records for as long as you have an account, so your pass keeps working. Download IP logs are kept for a limited period for security and abuse-prevention, then cleared. Newsletter emails are kept until you unsubscribe. Coaching inquiry details are kept while we correspond and for a reasonable period after. Content and photos in the hosted tools stay until you or the account holder delete them or close the account. If you ask us to delete your account, we remove your data except anything we are legally required to retain (for example, basic transaction records).

Guest and cleaner data in the tools

The Home Manual and Turnover Tracker are tools you use to run your rental. If you are the account holder and you enter information about your guests or cleaners — names, notes, photos, schedules — you are the controller of that data. You decide what to collect and you are responsible for having the right to collect it. We act as your service provider and only process that data to make the tools work for you. If a guest or cleaner has a question about their information, they should contact the host who invited them; we will help that host respond.

How we protect your data

We hash passwords, so we never store your password in plain text. Paid files are gated behind your account and pass, and download requests are logged. We take reasonable steps to protect the site, but no online service can promise perfect security. Please use a strong, unique password.

Your rights and choices

You can:

• Access a copy of the personal data we hold about you.
• Correct anything that is wrong — you can update your name and email in your account, or ask us.
• Delete your account and data (subject to records we must keep by law).
• Unsubscribe from the newsletter — every issue carries an unsubscribe link, and you can also ask us through the contact page at any time.

To make any of these requests, use our contact page. We may need to confirm your identity before we act, so we release data to the right person.

Children

VRABC is a business tool for vacation-rental hosts and is not intended for children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us their information, let us know and we will delete it.

Where we operate and your regional rights

We are based in British Columbia, Canada, and we serve customers in other places. If you are in the EU or UK, we handle your data with GDPR principles in mind: we collect only what we need, tell you why, and give you the access, correction, and deletion rights above. Note that Stripe and Google may process data in other countries, including the United States. If you are in California, we honor CCPA rights, including the right to know what we collect and the right to deletion — and, again, we do not sell your personal data. Whatever region you are in, you can use our contact page to exercise your rights.

Changes to this policy

If we change how we handle data, we will update this page and change the effective date at the top. For significant changes, we will make a reasonable effort to let account holders know.

Contact us

Questions about privacy or a request about your data? Send us a message or write to us at PO Box 5625, Victoria BC V8R 6S4, Canada. A real person will read it and make it right.