Privacy Policy for Riverwave Surf

At Riverwave Surf, we are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, disclose, and protect your information when you interact with our online platform and use our services for surfboard rentals, wetsuit rentals, surf lessons, paddleboarding, and river tours.

Who We Are

Riverwave Surf, located at 25 Percy Circus, London, WC1X 9EU, United Kingdom, operates this website. We are dedicated to providing excellent watersports experiences and protecting your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Information We Collect

We collect various types of information to provide and improve our services to you:

• Personal Identifiable Information (PII): This includes your name, email address, phone number, physical address, and payment information (processed securely through third-party payment gateways). We collect this when you book a rental or lesson, create an account, or contact us.
• Booking and Lesson Details: Information related to your specific bookings, such as dates, times, type of activity (surf lesson, paddleboarding, etc.), equipment rented, and participant skill levels.
• Health Information (for lessons): For surf lessons and certain activities, we may ask for relevant health information to ensure your safety and tailor the instruction appropriately. This is collected with your explicit consent.
• Communication Data: Records of your communications with us, including emails and customer service interactions.
• Usage Data: Information about how you access and use our site, such as your IP address, browser type, pages viewed, and the time spent on those pages. This helps us understand how to improve our online platform.
• Cookies and Tracking Technologies: We use cookies and similar technologies to track activity on our site and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

How We Use Your Information

We use the collected data for various purposes:

• To process your bookings and provide the requested services (rentals, lessons, tours).
• To manage your account and send you confirmations, updates, and service-related communications.
• To ensure your safety during activities, especially when health information is provided with consent.
• To improve and personalize your experience on our online platform.
• To monitor the usage of our website and analyze trends to enhance our offerings.
• To communicate with you about promotions, new services, or special offers, where you have opted in to receive such communications.
• To detect, prevent, and address technical issues or security breaches.
• To comply with legal obligations and respond to lawful requests from public authorities.

Legal Basis for Processing Personal Data Under GDPR

We will only process your personal data where we have a lawful basis to do so, including:

• Performance of a Contract: To fulfil our contractual obligations, such as processing your bookings and providing the services you’ve requested.
• Consent: Where you have given explicit consent for specific processing activities, such as for marketing communications or collecting sensitive health information. You can withdraw your consent at any time.
• Legitimate Interests: To operate our business effectively, including improving our services, ensuring security, and for administrative purposes, provided these interests do not override your data protection rights.
• Legal Obligation: When processing is necessary to comply with a legal or regulatory obligation.

Sharing Your Information

We may share your personal data with third parties in the following circumstances:

• Service Providers: With trusted third-party vendors who perform services on our behalf, such as payment processing, website hosting, customer support, and analytics. These providers are bound by contractual obligations to keep your information confidential and use it only for the purposes for which we disclose it to them.
• Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
• With Your Consent: When you provide your explicit consent for us to share your information.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your Data Protection Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data. Your rights include:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• The right to withdraw consent: You also have the right to withdraw your consent at any time where Riverwave Surf relied on your consent to process your personal information.

If you make a request, we have one month to respond to you. To exercise any of these rights, please contact us using the contact details provided below.

Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect Your Personal Data, we cannot guarantee its absolute security.

Links to Other Sites

Our service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children’s Privacy

Our service is not intended for individuals under the age of 16 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you are aware that your Children have provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our service, prior to the change becoming effective and update the "last updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

• By mail: Riverwave Surf, 25 Percy Circus, London, WC1X 9EU, United Kingdom