This document explains what information we collect, why we collect it, how we use it, how we keep your data safe and how long it will be retained.
Pembrokeshire Surf School Ltd – is the data controller and is registered at companies house.
What information do we collect
Medical and risk awareness forms are used to forewarn both customer and Pembrokeshire Surf School of risks associated with the activity involved and any ailments that a customer may have that a coach should be aware of – this personal medical information remains private between the coach and the customer and will not be shared.
Customer payment information is collected through Paypal and Bookly.
Customers doing SLSGB or ASI courses also have their information collected by Surf Lifesaving GB and Academy of Surfing Instructors.
Why we need it
We only collect data from you for insurance and booking purposes so that we can do our best to help you from a coaching point of view ie. Determining the right level of intensity or duration. Your contact details will also be used should we need to contact you for a change of location making you aware of the next step in your progression or cancellation.
How we use it
The instructor reads any medical info regarding their customers prior to the sport taking place to help them set the activity at the appropriate level and to be aware of ailments or injuries that could be aggravated by certain movements in the sport and to let the customer know this.
What we do with it
Online it is kept by Paypal for payment purposes and Bookly.com for booking purposes. In paper form it is kept in our office in a locked cupboard.
See Paypal’s data protection info here: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
See Bookly’s data protection info here: https://bookly.co/privacy
How long we keep it
To satisfy our insurance requirements, should a claim be made against us we have to keep the information our customers provide for 3 years or 3 years from their 18th birthday if it is a child. After this point it will be deleted, burnt or shredded.
Site usage information
What are your rights
The GDPR provides the following rights for individuals:
• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• Rights in relation to automated decision making and profiling
More information on your rights as an individual can be found at: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
If at any point you believe the information we process on you is incorrect you can request to see this information and have it corrected or deleted. If you wish to raise a complaint on how we have handled your personal data, you can contact us to have the matter investigated. email@example.com
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office https://ico.org.uk/