Privacy Policy

• Contact information (name, email address, phone number, postal address)
• Booking details and preferences
• Payment information (processed securely through our payment providers)
• Health information relevant to participating in activities
• Information about your use of our website
• Marketing preferences

Our booking system is licensed to us by Endless Surf, with appropriate data processing agreements in place to protect your information.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: Processing necessary for the performance of a contract with you (e.g., when you make a booking)
• Legitimate Interests: Where we have a legitimate business interest to do so and the impact on individuals is limited
• Consent: Where you have given us consent to process your data, particularly for marketing communications
• Legal Obligation: Where we need to comply with a legal or regulatory obligation

5. How We Use Your Personal Data

We use your personal data to:

• Process and manage your bookings
• Provide the services you have requested
• Communicate with you about your booking or account
• Send you marketing communications (where you have consented)
• Improve our website and services
• Comply with legal obligations
• Ensure safety during activities

6. Data Sharing

We may share your personal data with:

• Our booking system provider (Endless Surf)
• Payment processors to handle transactions
• Our staff who need access to provide services
• IT service providers who support our systems
• Legal and regulatory authorities when required by law

We will never sell your personal data to third parties or share it for marketing purposes without your explicit consent.

7. Data Security

We have implemented appropriate security measures to protect your personal data from accidental loss, unauthorised access, alteration, or disclosure. Access to your personal data is limited to those employees, agents, and contractors who need it to perform their duties.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

For bookings and waiver information, we typically keep records for 3 years after your last activity with us due to potential liability claims. For marketing purposes, we will keep your data until you unsubscribe or ask us to delete your information.

9. Your Data Protection Rights

Under UK data protection law, you have rights including:

• Right of access: You have the right to ask us for a copy of your personal information.
• Right to rectification: You have the right to ask us to rectify information you think is inaccurate or incomplete.
• Right to erasure: You have the right to ask us to erase your personal information in certain circumstances.
• Right to restriction of processing: You have the right to ask us to restrict the processing of your information in certain circumstances.
• Right to object to processing: You have the right to object to the processing of your personal data in certain circumstances. You have an absolute right to object to direct marketing.
• Right to data portability: You have the right to ask that we transfer the information you gave us to another organization, or to you, in certain circumstances.

You can exercise these rights by contacting us at privacy@lostshore.com. There is no charge for making a request, and we will respond within one month. We may need to verify your identity before providing information to you.

10. Cookies and Similar Technologies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

For detailed information about the cookies we use and the purposes for which we use them, please see our Cookie Policy.

11. International Transfers

Your personal data is primarily stored and processed within the United Kingdom. However, some of our service providers may be based outside the UK or European Economic Area (EEA). When we transfer your personal data outside the UK or EEA, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards, such as using standard contractual clauses approved by the UK Government.

12. How to Complain

If you have any concerns about the way that we collect and use your data, please contact us using the details above, and we will do our best to address these concerns.

However, you can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data. The ICO’s contact details can be found here.

13. Changes to Our Privacy Policy

We keep our privacy policy under review and will update it from time to time. Any substantial updates will be highlighted on our website. This privacy policy was last updated on the date shown at the top of this document.