Privacy Policy

This Policy applies to all users of Surfaway worldwide, including Hosts, Volunteers, and visitors to our website. It covers personal data processed by Surfaway in connection with:

• Platform registration and account management;
• Communication and messaging between users;
• Website analytics and security monitoring; and
• General platform maintenance and improvement.

This Policy does not apply to information collected by third-party websites or services linked to from Surfaway.

Surfaway collects only the information necessary to operate the Platform and facilitate connections between Hosts and Volunteers.

Information You Provide Directly

• Full name and email address;
• Encrypted password;
• Country, languages, and general location;
• Surf level, skills, and areas of interest;
• Profile photo and personal biography (optional);
• Information contained in your messages, applications, or listings.

Information Automatically Collected

• Device information (IP address, browser type, operating system);
• Usage data (pages visited, session duration, access time);
• Cookies and tracking technologies used to maintain sessions and improve functionality.

Sensitive Data

Surfaway does not intentionally collect sensitive personal data (e.g., health, ethnicity, religion). Please do not share such information in your profile or messages.

• To create, manage, and maintain your account;
• To display your profile to other registered users;
• To enable communication between Hosts and Volunteers;
• To ensure Platform integrity, safety, and user support;
• To monitor performance and improve Platform features;
• To comply with legal obligations or enforce our Terms of Service.

We do not sell, rent, or trade personal data to third parties.

• Consent: When you voluntarily provide data to create an account or share a profile.
• Contractual necessity: When processing is required to provide the Platform's core services.
• Legitimate interest: For improving services, preventing fraud, and ensuring user safety.
• Legal obligation: When required by applicable law or legal authorities.

Surfaway retains personal data only for as long as necessary to fulfill the purposes outlined above. When you delete your account, Surfaway will remove your personal data within a reasonable time frame, except where retention is required for:

• Backup and recovery systems;
• Compliance with legal obligations; or
• Legitimate business interests (e.g., security records).

• Keep users logged in between sessions;
• Remember preferences and language settings;
• Analyze usage patterns to improve functionality.

• HTTPS encryption for all connections;
• Encrypted password storage;
• Restricted data access to authorized personnel only.

While Surfaway takes appropriate precautions, no internet-based platform can guarantee absolute security. Users share information at their own discretion and risk.

• Access to and a copy of your personal data;
• Correction or update of inaccurate information;
• Deletion ("right to be forgotten") of your account data;
• Restriction or objection to processing;
• Data portability, where applicable;
• Withdrawal of consent, without affecting the lawfulness of prior processing.

To exercise these rights, contact info@surfaway.org. We may verify your identity before processing such requests.

Surfaway may use third-party services (e.g., hosting providers, analytics tools) solely for operational purposes. Such providers are bound by confidentiality and data protection agreements consistent with this Policy. Surfaway is not responsible for the privacy practices of third-party websites or services linked from the Platform.

Because Surfaway operates globally, your personal data may be transferred to and processed in countries other than your own. Surfaway takes reasonable steps to ensure that such data transfers comply with applicable data protection laws and that appropriate safeguards (such as Standard Contractual Clauses) are in place.

Surfaway is intended for users aged 18 and over. We do not knowingly collect personal information from minors. If we become aware that data has been collected from a person under 18, we will promptly delete it.

Surfaway may revise this Privacy Policy periodically to reflect changes in law or Platform operations. Users are encouraged to review this Policy regularly.

For inquiries regarding privacy, data protection, or this Policy, please contact: info@surfaway.org