Privacy Policy

 

Last updated: January 2026

Bunmahon Surf School respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or use our services.

1. Who we are

Bunmahon Surf School is a registered trading name of a sole trader.

Data Controller:
Tadhg Buckley
Bunmahon Surf School
The Beach
Bunmahon
Co. Waterford
Ireland

Email: surf@bunmahonsurfschool.com
Phone: +353 87 6398210
Website: https://www.bunmahonsurfschool.com

2. What personal data we collect

a) Contact forms

When you contact us through our website, we may collect:

  • Name
  • Email address
  • Phone number
  • Subject and message content

This information is:

  • Stored securely in the WordPress website database
  • Sent to our business email (Gmail)

b) Bookings & payments (Rezgo)

Online bookings and payments are handled through our third-party booking system, Rezgo.

Rezgo may collect:

  • Name and contact details
  • Booking and payment details
  • Names of participants attending lessons
  • Other standard booking information required to deliver the service

Payments are processed securely by Rezgo and their payment providers. We do not store full payment card details on our website. 

c) Newsletter sign-ups

When you sign up to our newsletter:

  • Your details are stored in the WordPress backend
  • A notification email is sent to us

We do not currently send marketing emails, but may do so in future using a recognised email marketing platform (e.g. Mailchimp). You will always have the option to unsubscribe.

d) Photos & videos (including children)

We may take photographs or videos during surf lessons for:

  • Promotional use
  • Social media
  • Website content

This may include children or minors.

Consent is handled:

  • Through the booking system
  • Via on-site waiver and disclaimer forms

If you wish to withdraw consent or request removal of an image, please contact us using the details above.

3. Cookies & tracking

We use cookies and similar technologies to improve our website and understand how it’s used.

a) Analytics

We use Google Analytics (GA4) to collect anonymised information such as:

  • Pages visited
  • Time spent on site
  • Device and browser type

This data does not directly identify you.

b) Cookie consent

We use Cookiebot to manage cookie consent. You can:

  • Accept or reject non-essential cookies
  • Change your preferences at any time via the cookie banner or settings

4. How we use your data

We use personal data to:

  • Respond to enquiries
  • Manage bookings and surf lessons
  • Process payments via Rezgo
  • Communicate with customers
  • Improve our website and services
  • Meet legal and safety obligations

5. Legal basis for processing

Under GDPR, we process personal data based on:

  • Consent (e.g. newsletters, photos)
  • Contractual necessity (bookings and lessons)
  • Legal obligation (safety, record keeping)

Legitimate interests (running and improving our business)

6. Who we share data with

We only share data where necessary, including with:

  • Rezgo (booking and payments)
  • Google (Analytics, Gmail, Google Drive)
  • Hosting Ireland (website hosting)

We do not sell or rent your personal data.

Some providers may process data outside the EU, but only where appropriate safeguards (such as Standard Contractual Clauses) are in place.

7. Data storage & retention

We retain enquiry, booking, and waiver data long-term for:

  • Operational purposes
  • Safety and insurance records
  • Legal and compliance reasons

Data is stored securely and only accessed where necessary.

8. Your GDPR rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Withdraw consent at any time
  • Lodge a complaint with the Data Protection Commission (Ireland)

To exercise any of these rights, contact us at surf@bunmahonsurfschool.com.

9. Data security

We take reasonable technical and organisational measures to protect your data, including:

  • Secure hosting
  • Access controls
  • Reputable third-party systems

However, no online system can be guaranteed 100% secure.

10. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.