Privacy policy
Here we explain in plain words who uses your data when you book, what for and for how long.
Updated on 27 Jul 2026
Some details on this page are still to be completed. If you have questions, write to the school.
Who is responsible for your data
The school you book with is responsible. It decides what your data is used for.
- Name
- Surf School Demo
- Tax ID
- to be completed
- Address
- Paseo Marítimo 12, 39540 San Vicente de la Barquera
- info@surfschool.demo
- Phone
- +34 900 000 000
Who handles it on the school's behalf
BookToSurf is the booking platform the school uses. It handles your data only on behalf of the school and for what the school asks.
- Name
- BookToSurf
- Tax ID
- to be completed
- Address
- to be completed
- to be completed
Companies that help BookToSurf
- Anthropic: the artificial intelligence model behind the Marea assistant.
- Stripe: takes the payments. Stripe receives your card number directly: neither the school nor BookToSurf sees or stores it.
What data is used and what for
- Your booking: name, email, phone, language, dates, activities and, if needed, the age and size of those taking part. It is used to prepare your lesson and let you know if anything changes.
- Your payment: amount, status (paid or pending) and the receipt. It is used to charge you and to issue the invoice.
- The signed liability waiver: your name, the date and your signature. It is used to show that you accepted the safety rules of the activity.
- Your messages: those you write in the chat or to the school. They are used to answer you.
The Marea AI assistant
Marea is an assistant with artificial intelligence. We always tell you that you are talking to an AI and you can ask to talk to a person at any time.
- What it uses: your first name, language, the dates and activities of your booking, the age and size of those taking part, whether it is paid, and the messages you write.
- What it never uses or stores: card numbers or bank accounts (if you type them, they are hidden before reaching the AI), identity documents, your address or health data.
- How long: chat messages are deleted automatically after 90 days.
- Who else sees it: to answer you, the text is sent to Anthropic, the company that makes the AI model. It does not use it to train its models and keeps it only for the time set by its contract.
How long data is kept
- Your booking and its invoice are kept for as long as tax and commercial law require. After that they are deleted or anonymised.
- Your conversations with the AI are deleted after 90 days.
Your rights
You can ask at any time to:
- Access: know what data we hold about you.
- Rectification: correct anything that is wrong.
- Erasure: have it deleted.
- Objection: stop us using it for something.
- Portability: receive it in a format you can take with you.
Write to the school: info@surfschool.demo.
If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Cookies
We only use what is needed for booking to work: the session if you sign in, and your cart and the light or dark theme, which are kept in your browser. We do not use advertising or tracking cookies or third-party analytics tools.