Skip to content

Privacy policy

Here we explain in plain words who uses your data when you book, what for and for how long.

Updated on 27 Jul 2026

Some details on this page are still to be completed. If you have questions, write to the school.

Who is responsible for your data

The school you book with is responsible. It decides what your data is used for.

Name
Surf School Demo
Tax ID
to be completed
Address
Paseo Marítimo 12, 39540 San Vicente de la Barquera
Email
info@surfschool.demo
Phone
+34 900 000 000

Who handles it on the school's behalf

BookToSurf is the booking platform the school uses. It handles your data only on behalf of the school and for what the school asks.

Name
BookToSurf
Tax ID
to be completed
Address
to be completed
Email
to be completed

Companies that help BookToSurf

  • Anthropic: the artificial intelligence model behind the Marea assistant.
  • Stripe: takes the payments. Stripe receives your card number directly: neither the school nor BookToSurf sees or stores it.

What data is used and what for

  • Your booking: name, email, phone, language, dates, activities and, if needed, the age and size of those taking part. It is used to prepare your lesson and let you know if anything changes.
  • Your payment: amount, status (paid or pending) and the receipt. It is used to charge you and to issue the invoice.
  • The signed liability waiver: your name, the date and your signature. It is used to show that you accepted the safety rules of the activity.
  • Your messages: those you write in the chat or to the school. They are used to answer you.

The Marea AI assistant

Marea is an assistant with artificial intelligence. We always tell you that you are talking to an AI and you can ask to talk to a person at any time.

  • What it uses: your first name, language, the dates and activities of your booking, the age and size of those taking part, whether it is paid, and the messages you write.
  • What it never uses or stores: card numbers or bank accounts (if you type them, they are hidden before reaching the AI), identity documents, your address or health data.
  • How long: chat messages are deleted automatically after 90 days.
  • Who else sees it: to answer you, the text is sent to Anthropic, the company that makes the AI model. It does not use it to train its models and keeps it only for the time set by its contract.

How long data is kept

  • Your booking and its invoice are kept for as long as tax and commercial law require. After that they are deleted or anonymised.
  • Your conversations with the AI are deleted after 90 days.

Your rights

You can ask at any time to:

  • Access: know what data we hold about you.
  • Rectification: correct anything that is wrong.
  • Erasure: have it deleted.
  • Objection: stop us using it for something.
  • Portability: receive it in a format you can take with you.

Write to the school: info@surfschool.demo.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Cookies

We only use what is needed for booking to work: the session if you sign in, and your cart and the light or dark theme, which are kept in your browser. We do not use advertising or tracking cookies or third-party analytics tools.

Back to home