Privacy Policy

SUP Club Positano

Effective Date: [Insert Date]

SUP Club Positano (“we”, “us”, or “our”) is committed to protecting your privacy and respecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website, book our services, or participate in any SUP Club activities.

1. What Information We Collect

We may collect and process the following personal data:

Identity Data: name, age, nationality
Contact Data: phone number, email address
Booking & Payment Data: booking details, payment confirmation (we do not store card numbers)
Health & Safety Information: relevant medical details for participation
Media Data: photographs and video recordings taken during activities
Technical Data: cookies, IP address, browser type, device info

2. How We Use Your Information

We use your data to:

Process and manage bookings
Communicate with you about your reservation
Ensure health and safety during our tours
Improve our services and customer experience
Send newsletters, offers, or updates (only with your consent)
Promote our services through media content (see below)

3. Media Collection & Promotional Use

We may take photos and video footage during our tours and events. These may feature participants and be used for promotional purposes, including:

Website galleries and blog posts
Social media (e.g. Instagram, Facebook, TikTok)
Flyers, brochures, and advertising campaigns
Content shared with partners, sponsors, and collaborators

If you prefer not to appear in any media content, simply inform your instructor or guide before your session. We will ensure that you are excluded from published footage and images where reasonably possible.

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following lawful grounds:

Consent: You have given clear permission for specific uses (e.g. newsletters, photos)
Contractual Necessity: To fulfil your booking and provide services
Legal Obligation: For safety regulations and insurance
Legitimate Interests: For business development and marketing

5. Cookies & Tracking Technologies

Our website uses cookies to:

Improve website performance
Understand how visitors use our site
Enable third-party analytics (e.g. Google Analytics)
Personalise your browsing experience

You may manage or disable cookies through your browser settings at any time.

6. Data Sharing and Storage

We do not sell or rent your data. We may share it with:

Payment processors (e.g. Stripe, PayPal)
Tour insurance providers or legal authorities if required
Marketing platforms (e.g. Instagram, Mailchimp – where applicable)

All data is stored securely, and we retain it only as long as necessary for operational and legal requirements.

7. Your Rights

You have the right to:

Access, correct or delete your personal data
Withdraw consent at any time
Object to marketing use of your data
Request a copy of the data we hold about you

To exercise these rights, contact us at: [your email address]

8. Children’s Privacy

We do not knowingly collect personal data from children under 13 without parental consent. If you are a parent or guardian and believe your child has provided us data, please contact us immediately.