Privacy Policy

Last updated: 14 February 2026

This Privacy Policy explains how Amana Group Pty Ltd trading as Booking My Surf registered in Australia (ACN 683 549 582) (“Booking My Surf”, “Company”, “we”, “us”, “our”) collects, uses, stores, shares, and protects personal data when individuals or businesses access or use our website, mobile applications, booking platform, and related services (collectively, the “Platform” or “Services”). Booking My Surf operates a global online marketplace connecting independent surf-related service providers (“Partners”) with individual customers (“Users”). By accessing or using the Platform, you agree to this Privacy Policy.

1. Scope of This Policy

This Privacy Policy applies to:

  • Users browsing or booking services via the Platform
  • Partners creating listings, receiving bookings, and delivering services
  • Visitors interacting with our website, content, communications, or marketing

It does not apply to services delivered by Partners outside the Platform. Each Partner operates independently and processes personal data under their own privacy obligations.

2. Information We Collect

2.1 Information You Provide to Us

Depending on whether you are a User or Partner, we may collect:

Identity & Contact Information

  • Full name
  • Business or trading name
  • Email address
  • Phone number
  • Country of residence
  • Billing address

Account & Platform Data

  • Username, account ID, login credentials
  • Listings, messages, reviews, and communications
  • Uploaded content (images, videos, descriptions, stories, testimonials)

Booking & Transaction Data

  • Booking dates, locations, services booked
  • Payment confirmations and transaction references
  • Cancellation history and booking behaviour

Partner-Specific Data

  • Licences, qualifications, certifications
  • Insurance documentation
  • Bank and payout details
  • Business verification information

2.2 Information About Other Individuals

If you provide personal data about another person (e.g. group bookings), you confirm that you have authority to do so.

2.3 Information Collected Automatically

When you use the Platform, we automatically collect:

  • IP address
  • Device identifiers
  • Browser type and operating system
  • Approximate location
  • Pages visited, time spent, interactions
  • Cookies and similar technologies

This information helps us maintain security, performance, analytics, and product development.

3. How We Use Personal Data

We may process personal data for any lawful business purpose, including the following core categories:

3.1 Platform Operations & Service Delivery

  • Creating and managing accounts
  • Enabling bookings, payments, and communications
  • Customer support and dispute handling
  • Fraud prevention and security monitoring

3.2 Marketing, Content & Surf Storytelling

By using the Platform, you acknowledge and agree that Booking My Surf may use personal data and content for:

  • Internal and external marketing
  • Editorial content, my surf stories, destination features
  • Social media, newsletters, website content, campaigns
  • Case studies, testimonials, and community highlights

This may include identifiable data where lawful, or aggregated/anonymised data. Where required by law, we will seek additional consent.

3.3 Research, Analytics & Industry Insights

We may use Platform data (including booking behaviour, preferences, and trends) to:

  • Conduct market and industry research
  • Improve the Platform and Services
  • Produce internal reports and insights
  • Support surf tourism development globally

Data used for research may be aggregated, anonymised, or identifiable where permitted by law.

3.4 Legal, Compliance & Risk Management

  • Compliance with applicable laws and regulations
  • Enforcing Platform Terms & Conditions
  • Responding to legal requests or claims
  • Protecting rights, safety, and integrity of the Platform

4. Legal Bases for Processing (International)

Depending on jurisdiction, we process personal data based on one or more of the following:

  • Performance of a contract
  • Legitimate business interests
  • Legal obligations
  • User or Partner consent
  • Public interest or regulatory requirements

5. Sharing Personal Data

5.1 With Partners (Trip & Service Providers)

To complete bookings, we share relevant data with the Partner you book with, including:

  • Name and contact details
  • Booking details and preferences
  • Payment confirmation status

Partners process this data independently and under their own privacy policies.

5.2 With Platform & Technology Providers

We may share data with trusted third parties that support Platform operations, including:

  • Payment processors
  • Hosting and cloud services
  • Analytics and marketing platforms
  • Communication tools

These providers are contractually required to protect your data.

5.3 Legal & Regulatory Disclosure

We may disclose personal data where required by law, court order, or government authority.

6. International Data Transfers

Booking My Surf operates globally. Your data may be stored or processed in countries outside your own. We take reasonable steps to ensure appropriate safeguards are in place.

7. Cookies & Tracking

We use cookies and similar technologies to:

  • Operate the Platform
  • Improve performance and usability
  • Deliver relevant content and marketing

You may manage cookies via your browser settings.

8. Data Retention

We retain personal data only for as long as it is reasonably necessary to fulfil the purposes for which it was collected, including to:

  • Provide and operate our services, such as managing accounts, processing bookings, facilitating payments, and delivering customer support
  • Comply with legal and regulatory obligations, including taxation, accounting, fraud prevention, and record-keeping requirements
  • Resolve disputes and enforce agreements, including investigating complaints, claims, or potential misuse of the platform
  • Conduct internal research, analytics, and service improvements, helping us enhance platform performance, user experience, and security

When personal data is no longer required for these purposes, we take reasonable steps to securely delete, anonymise, or de-identify it in accordance with applicable laws.

9. Your Rights

Depending on your location, you may have rights to:

  • Access your personal data
  • Request correction or deletion
  • Object to processing
  • Withdraw consent
  • Request data portability

Requests can be made via the contact details below.

10. Children’s Privacy

The Platform is not intended for individuals under 18. We do not knowingly collect personal data from children.

11. Data Security

We take the protection of your personal data seriously and implement appropriate administrative, technical, and organisational safeguards designed to protect it against unauthorised access, loss, misuse, alteration, or disclosure. While we continuously review and improve these measures, no method of data transmission or storage is completely secure, and absolute security cannot be guaranteed.

Where personal data is transferred across borders, we apply appropriate safeguards to ensure compliance with applicable data protection laws and to maintain a level of protection comparable to that provided in your country of residence.

How You Can Further Protect Your Personal Data on Booking My Surf

  • Create and maintain an account where available. Using an account allows you to securely access and manage your personal information, booking history, and preferences. We recommend choosing a strong, unique password and enabling additional security features where available to help protect your account from unauthorised access.
  • Use unique passwords for each online service. Avoid reusing the same username and password across different platforms, including Booking My Surf. If login details are reused and another service experiences a data breach, malicious actors may attempt to use those same credentials to access your account. Where we identify suspicious activity affecting our users, we may take protective measures such as temporarily restricting access and notifying affected account holders.
  • Be alert to online fraud and phishing attempts. Online fraud often involves impersonation, social engineering, or phishing messages. For example, someone may falsely claim to represent a surf camp, accommodation provider, or Booking My Surf and request payment or personal information outside the platform. Booking My Surf will never ask you to share sensitive information or make payments outside our secure systems.
  • Contact us if something doesn’t feel right. If you suspect fraudulent activity, receive suspicious communications related to your booking, or believe your account security may be compromised, please contact our Customer Support team as soon as possible so we can investigate and assist.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Platform constitutes acceptance of the updated Policy.

13. Contact Us

For privacy-related enquiries or data requests: admin@bookingmysurf.com  |  www.bookingmysurf.com