Privacy Policy
Last updated: 14 February 2026
This Privacy Policy explains how Amana Group Pty Ltd trading as Booking My Surf registered in Australia (ACN 683 549 582) (“Booking My Surf”, “Company”, “we”, “us”, “our”) collects, uses, stores, shares, and protects personal data when individuals or businesses access or use our website, mobile applications, booking platform, and related services (collectively, the “Platform” or “Services”). Booking My Surf operates a global online marketplace connecting independent surf-related service providers (“Partners”) with individual customers (“Users”). By accessing or using the Platform, you agree to this Privacy Policy.
1. Scope of This Policy
This Privacy Policy applies to:
- Users browsing or booking services via the Platform
- Partners creating listings, receiving bookings, and delivering services
- Visitors interacting with our website, content, communications, or marketing
It does not apply to services delivered by Partners outside the Platform. Each Partner operates independently and processes personal data under their own privacy obligations.
2. Information We Collect
2.1 Information You Provide to Us
Depending on whether you are a User or Partner, we may collect:
Identity & Contact Information
- Full name
- Business or trading name
- Email address
- Phone number
- Country of residence
- Billing address
Account & Platform Data
- Username, account ID, login credentials
- Listings, messages, reviews, and communications
- Uploaded content (images, videos, descriptions, stories, testimonials)
Booking & Transaction Data
- Booking dates, locations, services booked
- Payment confirmations and transaction references
- Cancellation history and booking behaviour
Partner-Specific Data
- Licences, qualifications, certifications
- Insurance documentation
- Bank and payout details
- Business verification information
2.2 Information About Other Individuals
If you provide personal data about another person (e.g. group bookings), you confirm that you have authority to do so.
2.3 Information Collected Automatically
When you use the Platform, we automatically collect:
- IP address
- Device identifiers
- Browser type and operating system
- Approximate location
- Pages visited, time spent, interactions
- Cookies and similar technologies
This information helps us maintain security, performance, analytics, and product development.
3. How We Use Personal Data
We may process personal data for any lawful business purpose, including the following core categories:
3.1 Platform Operations & Service Delivery
- Creating and managing accounts
- Enabling bookings, payments, and communications
- Customer support and dispute handling
- Fraud prevention and security monitoring
3.2 Marketing, Content & Surf Storytelling
By using the Platform, you acknowledge and agree that Booking My Surf may use personal data and content for:
- Internal and external marketing
- Editorial content, my surf stories, destination features
- Social media, newsletters, website content, campaigns
- Case studies, testimonials, and community highlights
This may include identifiable data where lawful, or aggregated/anonymised data. Where required by law, we will seek additional consent.
3.3 Research, Analytics & Industry Insights
We may use Platform data (including booking behaviour, preferences, and trends) to:
- Conduct market and industry research
- Improve the Platform and Services
- Produce internal reports and insights
- Support surf tourism development globally
Data used for research may be aggregated, anonymised, or identifiable where permitted by law.
3.4 Legal, Compliance & Risk Management
- Compliance with applicable laws and regulations
- Enforcing Platform Terms & Conditions
- Responding to legal requests or claims
- Protecting rights, safety, and integrity of the Platform
4. Legal Bases for Processing (International)
Depending on jurisdiction, we process personal data based on one or more of the following:
- Performance of a contract
- Legitimate business interests
- Legal obligations
- User or Partner consent
- Public interest or regulatory requirements
5. Sharing Personal Data
5.1 With Partners (Trip & Service Providers)
To complete bookings, we share relevant data with the Partner you book with, including:
- Name and contact details
- Booking details and preferences
- Payment confirmation status
Partners process this data independently and under their own privacy policies.
5.2 With Platform & Technology Providers
We may share data with trusted third parties that support Platform operations, including:
- Payment processors
- Hosting and cloud services
- Analytics and marketing platforms
- Communication tools
These providers are contractually required to protect your data.
5.3 Legal & Regulatory Disclosure
We may disclose personal data where required by law, court order, or government authority.
6. International Data Transfers
Booking My Surf operates globally. Your data may be stored or processed in countries outside your own. We take reasonable steps to ensure appropriate safeguards are in place.
7. Cookies & Tracking
We use cookies and similar technologies to:
- Operate the Platform
- Improve performance and usability
- Deliver relevant content and marketing
You may manage cookies via your browser settings.
8. Data Retention
We retain personal data only for as long as it is reasonably necessary to fulfil the purposes for which it was collected, including to:
- Provide and operate our services, such as managing accounts, processing bookings, facilitating payments, and delivering customer support
- Comply with legal and regulatory obligations, including taxation, accounting, fraud prevention, and record-keeping requirements
- Resolve disputes and enforce agreements, including investigating complaints, claims, or potential misuse of the platform
- Conduct internal research, analytics, and service improvements, helping us enhance platform performance, user experience, and security
When personal data is no longer required for these purposes, we take reasonable steps to securely delete, anonymise, or de-identify it in accordance with applicable laws.
9. Your Rights
Depending on your location, you may have rights to:
- Access your personal data
- Request correction or deletion
- Object to processing
- Withdraw consent
- Request data portability
Requests can be made via the contact details below.
10. Children’s Privacy
The Platform is not intended for individuals under 18. We do not knowingly collect personal data from children.
11. Data Security
We take the protection of your personal data seriously and implement appropriate administrative, technical, and organisational safeguards designed to protect it against unauthorised access, loss, misuse, alteration, or disclosure. While we continuously review and improve these measures, no method of data transmission or storage is completely secure, and absolute security cannot be guaranteed.
Where personal data is transferred across borders, we apply appropriate safeguards to ensure compliance with applicable data protection laws and to maintain a level of protection comparable to that provided in your country of residence.
How You Can Further Protect Your Personal Data on Booking My Surf
- Create and maintain an account where available. Using an account allows you to securely access and manage your personal information, booking history, and preferences. We recommend choosing a strong, unique password and enabling additional security features where available to help protect your account from unauthorised access.
- Use unique passwords for each online service. Avoid reusing the same username and password across different platforms, including Booking My Surf. If login details are reused and another service experiences a data breach, malicious actors may attempt to use those same credentials to access your account. Where we identify suspicious activity affecting our users, we may take protective measures such as temporarily restricting access and notifying affected account holders.
- Be alert to online fraud and phishing attempts. Online fraud often involves impersonation, social engineering, or phishing messages. For example, someone may falsely claim to represent a surf camp, accommodation provider, or Booking My Surf and request payment or personal information outside the platform. Booking My Surf will never ask you to share sensitive information or make payments outside our secure systems.
- Contact us if something doesn’t feel right. If you suspect fraudulent activity, receive suspicious communications related to your booking, or believe your account security may be compromised, please contact our Customer Support team as soon as possible so we can investigate and assist.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of the Platform constitutes acceptance of the updated Policy.
13. Contact Us
For privacy-related enquiries or data requests: admin@bookingmysurf.com | www.bookingmysurf.com