Privacy Policy

A. Membership & Booking Information

• Full name
• Emirates ID / Passport details (where required)
• Date of birth
• Contact details (email, phone, address)
• Emergency contact details
• Medical disclosures relevant to surf participation
• Skill level and training records
• Signed waivers and consent forms

B. Payment Information

• Billing details
• Transaction history
• Membership subscription data

(Full card details are processed via secure third-party payment gateways and are not stored by SurfBase.)

C. Merchandise Sales Information

• Shipping address
• Order history
• Size preferences
• Product returns data

D. Website & Technical Data

• IP address
• Device information
• Cookies
• Website usage analytics

E. CCTV & Facility Monitoring

Our premises may be monitored by CCTV for safety and security purposes.

We process personal data to:

• Register and manage memberships
• Schedule surf sessions and training programs
• Assess participant eligibility and safety
• Maintain medical and emergency records
• Process payments and subscriptions
• Deliver merchandise
• Respond to inquiries
• Improve services and facilities
• Ensure safety and regulatory compliance
• Prevent fraud or misuse
• Comply with legal obligations

Under UAE PDPL, we process personal data based on:

• Your consent
• Performance of a contract (membership, bookings, purchases)
• Protection of vital interests (health and safety)
• Compliance with legal and regulatory requirements
• Legitimate business interests

Medical information provided is processed strictly for safety purposes. Access is limited to authorized personnel and retained only as necessary for safety and compliance.

For participants under 18 years of age:

• Parental or legal guardian consent is required
• Guardian contact details are collected
• Enhanced safety and data handling measures apply

We may share data with:

• Payment processors
• Insurance providers (where required)
• Government authorities (if legally required)
• Emergency medical providers
• IT and hosting service providers
• Delivery partners (for merchandise)

We do not sell personal data.

We retain data for the duration of membership, as required by insurance or legal compliance, for accounting and tax purposes, and for dispute resolution. After this period, data is securely deleted or anonymized.

If data is processed outside the UAE (e.g., cloud hosting providers), appropriate safeguards are implemented in accordance with UAE PDPL.

Subject to applicable law, you may:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion (where legally permissible)
• Withdraw consent
• Object to certain processing

Requests may be submitted to: info@surfbase.com

We use cookies to improve website functionality, analyze traffic, and enable secure login and membership access. You may disable cookies in your browser settings.

We implement appropriate technical and organizational safeguards including SSL encryption, secure cloud hosting, access controls, role-based data access, and internal confidentiality obligations.

We may update this Privacy Policy periodically. The revised version will be posted on our website with the updated effective date.