top of page



Our Privacy Policy. Please take time to read and understand our commitment to your privacy.


Surf School Wales ("We") remain fully committed to the protection of your privacy at all times. The information contained in this policy has been published to inform you of the way in which any personal data you provide us with or we collect from you will be used. We recommend that you read this information carefully in order to fully understand how we treat your personal information. 

This Notice is intended to comply with the provisions of the General Data Protection Regulation EU 2016/679 (GDPR) which governs how Personal Data is processed within the European Economic Area (EEA).We are the “data controller” for the purposes of GDPR. This means that we decide how your Personal Data is processed and for what purposes.



We may obtain and use the following data about you:

  • Any correspondence we have with you should you contact us

  • Data you provide when you fill out forms, including but not limited to data you provide when you register for our services

  • Details of transactions made by you through our site

  • Responses to terms & conditions and medical declaration that you complete

  • Details of your visits to our site, which includes without limitation location and traffic data, weblogs, resources you access and other communication data. We may collect this information for both the purposes of our own billing and otherwise


We may obtain information about your computer, which includes your IP address, browser type and operating system where available. This accumulation of data is used to assist system administration, and customer support. The collection of this data does not identify any personal information about you. We may also collect information regarding your browsing activity and interests through use of a cookie file. This cookie file is stored on the hard drive of your computer, and contains information that is transferred to your computer's hard drive. We use the collection of this data to help us improve the experience of users on our site and to deliver a more personalised service with more relevant content. The collection of this data allows us to:

  • Store data indicative of your preferences, allowing us to adjust our application to appeal to your individual interests

  • Estimate the size and usage patterns of our audience

  • Record the details of any transactions carried out by you through our site

  • Identify you upon your return to our site

You remain entitled to refuse cookies by adjusting your browser settings accordingly. Doing so however may restrict your access to certain areas within our site. Unless you adjust your browser settings to refuse cookies, our system will issue cookies when you log on to our site. Our advertisers may also issue cookies, however we have no control over the cookies they issue.


The information we obtain from you may be moved to and stored at a destination within the European Economic Area ("EEA"). Staff members operating within the EEA who work for or on behalf of us may process this information. Such staff members may, among other things, be involved in the processing of payment details, the provision of support services and the delivery of your request(s) for us to provide services. When submitting your personal information, you are agreeing to such processing, transfer or storage as outlined above. We will ensure at all times to take all reasonable steps necessary to maintain the security of your data in accordance with this privacy policy.

Because the transmission of data via the internet cannot be assumed completely secure, we cannot guarantee the security of any of your data transmitted to our site; you are therefore responsible for any risk associated with such transmission. We will however at all times take all reasonable steps to ensure the transmission of your data is executed as securely as possible, and upon receipt of your data we will continue at all times to enforce strict security procedures and features in an attempt to prevent any unauthorised access.


The information we hold about you may be used in any of the following ways:

  • To send you further information about our services for which we think you may have an interest. This information will be supplied only where you have given consent

  • To send you further information about our services based on a request we have received from you

  • To fulfil the obligations we have in relation to any contracts we have in place with you

  • To provide you with notification about any changes to our services

  • Administer our website and web application, on any of our domains

  • To improve and personalise your experience with us

  • To deal with enquiries and complaints made by or about you relating to the website

Your rights are explained in a later section of this policy, and subject to such rights we may also use the data we hold about you to provide you with information about other services we offer which we feel may be of interest to you. We may provide this information electronically via email, telephonically via SMS or telephone, or physically by post.

We will never supply your data to third parties unless under the conditions stated beneath this section of our policy.

If you wish to reject such communication regarding our other services, we will give you the opportunity each time we contact you to terminate our permission to contact you for such purposes.

We use Google Analytics to analyse the use of this website. Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users' computers. The information generated relating to our website is used to create reports about the use of the website. Google will store this information. We may at our discretion take advantage of the following Google Analytics features: Google Display Network Impression Reporting, the DoubleClick Campaign Manager integration, or Google Analytics Demographics and Interest Reporting. Google's privacy policy is available at:

We make use of Google Analytics Demographics and Interest Reporting using Google's 3rd-party audience data (such as age, gender, and interests) with Google Analytics


Your Personal Data will be treated as strictly confidential and will be shared only with organisations whose services are required in order to provide the services we offer. We use other companies to help us process your Personal Data so that we can offer you the best possible service for example we use WIX as our website and booking system provider.

We will only share your Personal Data with other third parties with your consent. These third parties, in turn, may rely on data processors to provide services that help them help us.  

When you give your consent to our holding of your Personal data you agree to us sharing your Personal Data (including special categories of Personal Data – where we have your explicit consent) with third party processors and sub-processors.



You retain the right to request us to refrain from processing your data for the purposes of marketing. To exercise such right, you may reply to any information we send you, detailing your request that we refrain from sending any marketing correspondence, or you can exercise this same right by contacting us electronically via email at If at any time we intend to use your data for such marketing purposes however, it is standard practice for us to make you aware in advance of collecting such data.

Unless we have an exemption under GDPR, you have the following rights with respect to your Personal Data: -

  • The right to request a copy of the Personal Data which we hold about you, without any charge.

  • The right to request that we correct any Personal Data found to be inaccurate or out of date.

  • The right to request that your Personal Data is erased where it is no longer necessary for us to keep it.

  • The right to withdraw your consent to the processing we carry out at any time. 

  • The right to request that we provide you with your Personal Data and, where possible, to send that data directly to another data controller. 

  • The right, where there is a dispute in relation to the accuracy or processing of your Personal Data, to ask us to restrict further processing.

  • The right to object to the processing of Personal Data.

  • The right to lodge a complaint with the Information Commissioners Office and to seek legal recourse.

We may at times provide links on our site to third party websites, including without limitation those owned or managed by our partner networks, affiliates or advertisers. These websites have separate privacy policies, and we therefore cannot accept any responsibility for the content. As such, choosing to follow these links is a choice you make at your own risk, and we advise that you check these websites' individual privacy policies before submitting any personal data.


In accordance with the Act, you retain at all times the right to access any data we hold about you. You may exercise this right by making a request in accordance with the Act.


If at any time we make a change to our privacy policy, we will update this page to reflect such change. We recommend you review this page periodically to ensure you remain happy with the latest version.


We welcome any questions or comments in relation to this privacy policy, and advise you to send any such communication to

You can contact the Information Commissioners Office on 0303 123 1113 or via email or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.

bottom of page