1. About this Privacy Policy
This Privacy Policy explains how Spear Surf collects, uses, stores and protects personal information when you visit https://spearsurf.com, contact us, subscribe to marketing, or enquire about or book our Morocco surf camp packages, surf lessons, trips or activities in Tamraght, Taghazout and Imsouane.
For clarity, the phrase “surf camp Morocco” on this page refers to the Spear Surf packages and related services described above.
For the purposes of applicable data protection law, the organisation responsible for your personal information (the “data controller”) is:
Legal business name: Spear Surf
Trading name: Spear Surf
Business address: Tamraght, Agadir, Morocco
Email: admin@spearsurf.com
If you have questions about this policy or want to exercise a privacy right, contact us using the details above.
2. Personal Information We Collect
Depending on how you interact with us, we may collect:
- Identity and contact information: your name, email address, telephone number, country of residence and emergency contact details.
- Booking information: requested dates, number of guests, chosen location and package, surf level, selected trips or activities, relevant transport details and other information needed to organise your experience.
- Payment information: payment status, amount, currency, transaction reference and limited billing details. Where a third-party payment provider processes your payment, that provider receives your full card or account details under its own privacy policy. Spear Surf does not receive or store full payment-card details unless we clearly tell you otherwise.
- Health and safety information: allergies, dietary restrictions, medical conditions, injuries, swimming ability or other information needed to provide activities safely. We collect this information only when necessary and, where required, with your explicit consent.
- Communications: messages, emails, WhatsApp conversations, enquiry forms, feedback, complaints and customer-support records.
- Technical and usage information: IP address, browser type, device information, approximate location, referring page, pages visited, timestamps and cookie or analytics identifiers.
- Marketing preferences: whether you agreed to receive news, offers or other marketing and how you responded to our messages.
- Photographs and videos: images captured during surf lessons, camp activities or events, where you have agreed to their use or where another lawful basis applies.
Please do not provide personal information about another person unless you have their permission to do so and have shown them this Privacy Policy. The lead guest is responsible for ensuring that other guests included in a booking receive this information.
3. How We Collect Information
We collect information:
- directly from you when you complete a form, make a booking, pay, contact us or participate in an activity;
- through our website, cookies and similar technologies;
- through booking, payment or travel partners you choose to use;
- from members of your group or the lead guest making a booking; and
- from public sources or social media when you communicate with us through those services.
4. How and Why We Use Personal Information
We use personal information only when we have an appropriate legal basis. Depending on the circumstances and the law that applies, our purposes and legal bases include:
| Purpose | Typical legal basis |
|---|---|
| Answering enquiries and preparing a requested quotation | Taking steps at your request before entering a contract; legitimate interests |
| Creating, managing and completing bookings | Performance of a contract |
| Taking payments, issuing refunds and maintaining financial records | Performance of a contract; compliance with legal obligations |
| Arranging surf lessons, equipment, trips, activities and any other services included in your package | Performance of a contract |
| Recording relevant health, dietary or safety information | Explicit consent; protection of vital interests in an emergency; other conditions permitted by applicable law |
| Communicating changes, safety information and customer-service messages | Performance of a contract; legitimate interests |
| Protecting our website, customers, staff and business against fraud or misuse | Legitimate interests; compliance with legal obligations |
| Understanding website performance through non-essential analytics | Consent where required |
| Sending marketing by email, text or WhatsApp | Consent, or an existing-customer exception where legally available and all requirements are met |
| Establishing, exercising or defending legal claims | Legitimate interests; compliance with legal obligations |
Where we rely on legitimate interests, we consider whether our use is necessary and whether your rights outweigh our interests. Where we rely on consent, you may withdraw that consent at any time without affecting processing that took place before withdrawal.
We do not use personal information for solely automated decisions that produce legal or similarly significant effects unless we tell you, explain the applicable safeguards and have a lawful basis.
5. Booking, Payment and Health Information
Certain information is necessary to provide a quotation or fulfil a booking. If you do not provide required information, we may be unable to confirm or deliver the requested service.
We use booking details to coordinate your surf programme, equipment, trips, activities and any other services included in your package. We share only the information reasonably necessary with the relevant provider.
Health and safety information may receive additional legal protection. We limit access to people who need it to provide a safe service. Unless an incident, legal requirement or claim requires longer storage, we aim to delete or anonymise this information shortly after your trip. You may withdraw consent for optional health-data processing, but this may mean we cannot safely provide a particular activity.
6. Cookies and Similar Technologies
Our website may use:
- Strictly necessary cookies for security, website operation, forms, bookings and remembering privacy choices.
- Preference cookies to remember settings such as language or display preferences.
- Analytics cookies to understand how visitors use the website and improve performance.
- Advertising or social-media cookies to measure campaigns or support embedded content, if we use these services.
Where required, we do not place non-essential analytics, advertising or social-media cookies until you actively consent through our cookie banner. You can accept, reject or change your choices at any time through [INSERT COOKIE SETTINGS LINK OR BUTTON]. Rejecting non-essential cookies will not prevent you from using the essential parts of the website.
Before publishing this policy, Spear Surf should maintain a separate Cookie Policy or cookie table identifying each cookie, its provider, purpose and duration.
7. Marketing Communications
We may send offers or news only when we have a valid legal basis. You can unsubscribe at any time by using the link in an email, replying “STOP” where available, changing your preferences or contacting us.
Service messages about an active enquiry or booking are not marketing, so we may still send information needed to manage your booking after you opt out of promotional messages.
We maintain a limited suppression record to ensure that we respect unsubscribe requests. We do not sell or rent personal information for third-party marketing.
8. When We Share Personal Information
We may share information with trusted recipients when necessary, including:
- Spear Surf camp staff, surf instructors, activity guides, trip providers and transport providers where relevant;
- booking and customer-management platforms;
- payment processors, banks and fraud-prevention providers;
- website hosting, security, analytics and technical-support providers;
- email, messaging and marketing providers;
- accountants, insurers, lawyers and professional advisers;
- public authorities, emergency services or regulators where required by law or necessary to protect someone; and
- a buyer, investor or successor if our business or assets are reorganised, sold or transferred.
Our current key providers are: [LIST HOST, BOOKING SYSTEM, PAYMENT PROCESSOR, ANALYTICS, EMAIL PLATFORM AND OTHER MATERIAL PROVIDERS].
If you contact us through WhatsApp, Instagram, Facebook or another third-party service, that service also processes information under its own privacy policy. Review its settings and policy before sending sensitive information.
We require service providers acting on our behalf to use personal information only for agreed purposes, protect it appropriately and comply with applicable data protection obligations.
9. International Data Transfers
Spear Surf operates in Morocco and welcomes international guests. Your information may therefore be processed in Morocco and in countries where our service providers operate.
Where UK or European data protection rules apply to a restricted international transfer, we use a permitted transfer mechanism or appropriate safeguards where required. Depending on the transfer, these may include an adequacy decision, approved contractual clauses, the UK International Data Transfer Agreement or Addendum, or a legally available exception. You may contact us for more information about safeguards relevant to your information.
10. How Long We Keep Information
We keep personal information only as long as reasonably necessary for the purpose collected, including legal, accounting, safety and dispute-resolution requirements. Our intended retention approach is:
| Information | Intended retention period |
| Enquiries that do not become bookings | Up to 12 months after the last communication |
| Booking and customer-service records | For the stay and up to 6 years afterwards, unless applicable law requires a different period |
| Payment, tax and accounting records | For the period required by applicable Moroccan tax and accounting law |
| Health and safety information | Normally deleted or anonymised within 30 days after the activity, unless an incident, legal obligation or claim requires longer retention |
| Marketing records | Until consent is withdrawn or after [INSERT INACTIVITY PERIOD] without engagement |
| Unsubscribe/suppression records | As long as necessary to respect the opt-out |
| Website security logs and cookie records | [INSERT PERIODS BASED ON ACTUAL WEBSITE CONFIGURATION] |
We may retain anonymised information that can no longer identify you.
11. How We Protect Information
We use reasonable administrative, organisational and technical safeguards designed to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure. Measures may include access controls, strong passwords, encrypted connections, backups, staff confidentiality and secure payment providers.
No internet transmission or storage system is completely secure. If a personal-data breach creates a legal duty to notify affected individuals or a regulator, we will make the required notification.
12. Your Privacy Rights
Depending on where you live and which law applies, you may have the right to:
- ask whether we process your personal information and obtain a copy;
- correct incomplete or inaccurate information;
- request deletion of information in certain circumstances;
- restrict how information is used;
- object to processing based on legitimate interests or to direct marketing;
- receive certain information in a portable format;
- withdraw consent at any time;
- obtain information about safeguards for international transfers; and
- complain to an appropriate data protection authority.
These rights are not absolute, and legal exceptions may apply. To make a request, contact admin@spearsurf.com. We may ask for information needed to verify your identity. We will respond within the period required by the applicable law.
13. Children and Group Bookings
Our website is not intended to collect booking information directly from children. Bookings for anyone under 18 must be made or authorised by a parent or legal guardian. Where a child participates in an activity, we may collect limited information from the responsible adult to organise the activity safely and comply with legal or insurance requirements.
If you believe a child provided information without appropriate permission, contact us so we can review and, where appropriate, delete it.
15. Photographs and Video
We may invite guests to agree to photographs or videos for our website or social media. Participation is optional. Where consent is the basis, you may withdraw it for future use by contacting us. Withdrawal cannot always remove material already lawfully printed, shared by others or incorporated into completed publications, but we will take reasonable steps regarding content under our control.
16. Third-Party Links
Our website may link to third-party websites or services. We do not control their privacy practices. Review their privacy information before providing personal information.
17. Changes to This Policy
We may update this Privacy Policy when our services, providers or legal obligations change. The latest version will appear on this page with a revised “Last updated” date. If a change materially affects how we use personal information, we will provide additional notice where required.
18. Contact Us
For questions, requests or complaints about privacy, contact:
Spear Surf
Address: Tamraght, Agadir, Morocco
Email: admin@spearsurf.com