GYLLY SURF SCHOOL – PRIVACY POLICY
Business Name: Gylly Surf School
Location: Falmouth, Cornwall, UK
Contact Email: gyllysurfschool@gmail.com
This Privacy Policy explains how we collect, use, and protect your personal data in accordance with UK GDPR and the Data Protection Act 2018.
1. Information We Collect
We may collect and process the following personal data:
- Name
- Email address
- Phone number (optional)
- Address
- Booking details
- Emergency contact information
- Medical information (where voluntarily provided)
- Signed waiver forms
2. How We Collect Your Data
We collect data when you:
- Make a booking on our website or in-person
- Fill in a contact or booking form
- Sign a waiver
- Contact us via email (gyllysurfschool@gmail.com) or social media
- Use our website (via cookies)
3. How We Use Your Data
We use your personal data to:
- Manage bookings and payments
- Communicate with you regarding your lesson or enquiry
- Ensure your safety during activities
- Maintain records for insurance and legal purposes
- Improve our services and customer experience
We only use your data where we have a lawful basis to do so.
4. Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
- Contract – to provide services you have booked
- Legal obligation – for safety and record-keeping
- Legitimate interests – to operate and improve our business
5. Data Sharing
We do not sell your personal data.
We may share your data where necessary with:
- Payment providers
- Booking systems
- Insurance providers (including claims if required)
- Legal or regulatory authorities when required
6. Data Storage & Retention
Your data is stored securely and only kept for as long as necessary:
- Booking and contact data: retained for business and legal purposes
- Waivers and safety records: retained in line with insurance requirements
7. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing in certain circumstances
- Withdraw consent at any time
To exercise these rights, contact us at: gyllysurfschool@gmail.com
8. Cookies
Our website may use cookies to:
- Improve user experience
- Analyse website traffic
You can control or disable cookies through your browser settings.
9. Photography & Media
Photos and videos may be taken during lessons for promotional purposes.
Consent will be obtained where possible. You may opt out by informing us before your session.
10. Data Security
We take appropriate measures to protect your data from:
- Unauthorised access
- Loss or misuse
However, no system is completely secure, and we cannot guarantee absolute security.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.
13. Contact Us
For questions about this Privacy Policy or your personal data, please contact:
Email: gyllysurfschool@gmail.com