Privacy Policy

Last updated: 2 November 2026

Surf Hideaways ("we", "our" or "us") respects your privacy. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, join the Surf Hideaways Society, subscribe to our newsletter or otherwise interact with us.

1. Who we are

Surf Hideaways is a curated collection of exceptional stays in surf destinations around the world. We provide travel inspiration, hotel recommendations and access to selected benefits at participating properties.

For data protection purposes, the organisation operating Surf Hideaways is responsible for the personal information described in this Policy.

For privacy enquiries, contact contact@surfhideaways.com.

2. Information we collect

We may collect the following information:

Information you provide

• Newsletter subscriptions: your email address and, where provided, your name.

• Member accounts: your name, email address, account details and authentication information.

• Enquiries: your contact details and any information included in your messages.

• Hotel partnerships: property details, business contact information and related correspondence.

Information collected through your use of our website

• Technical information: IP address, browser, device type and operating system.

• Website activity: pages visited, links clicked, referring websites and interactions with our content.

• Member activity: hotels viewed, saved stays and booking-link clicks, where these features are available.

• Cookies and similar technologies: information collected through cookies, pixels and other tracking tools, as described in Section 7.

We may also receive information from service providers and hotel partners, including booking attribution information where relevant to our services.

3. How we use your information

We use personal information to:

• Operate and improve our website and services.

• Create and manage member accounts.

• Provide access to member benefits and booking information.

• Send newsletters and updates where you have subscribed.

• Respond to enquiries and manage hotel partnerships.

• Understand website performance and improve the visitor experience.

• Attribute referrals and bookings to Surf Hideaways, where applicable.

• Maintain website security and comply with legal obligations.

We do not sell your personal information.

4. Legal basis for processing

Under applicable UK and EU data protection laws, we process personal information on the following grounds:

• Consent: for newsletters and marketing communications, and for cookies or tracking technologies where consent is required.

• Contractual necessity: to provide services you request, including the creation and management of member accounts.

• Legitimate interests: to operate and improve our services, respond to enquiries, manage business relationships, measure relevant activity and protect our website, where those interests are not overridden by your rights.

• Legal obligations: where processing is necessary to comply with applicable law.

You may withdraw your consent at any time.

5. Sharing your information

We may share personal information with trusted third parties where necessary to operate our services, including:

• Technology providers: website hosting, member authentication, email delivery, analytics and customer relationship management services.

• Hotel partners: where necessary to facilitate enquiries, recognise referrals or provide member benefits.

• Professional advisers: including legal and accounting advisers where appropriate.

• Public authorities: where required by law.

Our hotel partners operate their own booking systems and may collect information directly when you visit their websites or make a reservation. Their privacy policies govern their handling of that information.

We require service providers acting on our behalf to handle personal information securely and in accordance with applicable data protection requirements.

6. International transfers

Surf Hideaways works with hotels and technology providers around the world. Your information may therefore be processed outside the United Kingdom or European Economic Area.

Where applicable data protection law requires safeguards for international transfers, we use recognised mechanisms, such as adequacy regulations or decisions and approved contractual safeguards.

7. Cookies and tracking technologies

We may use cookies, pixels and similar technologies to operate our website, understand visitor behaviour and measure the effectiveness of our services.

These may include:

• Essential technologies: necessary for website security, account authentication and basic functionality.

• Analytics technologies: used to understand website traffic and how visitors interact with our content.

• Preference technologies: used to remember relevant settings and choices.

• Marketing and attribution technologies: used to measure referral activity and the effectiveness of our communications.

Where consent is required, we will ask for it before activating non-essential technologies. You can manage or withdraw your choices through our cookie settings, where available.

You may also control cookies through your browser settings, although disabling certain technologies may affect website functionality.

8. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, subject to applicable legal requirements.

For example:

• Newsletter subscriptions: until you unsubscribe, subject to limited records needed to respect your preferences.

• Member accounts: while your account remains active, followed by an appropriate period for deletion or legal compliance.

• General enquiries: normally up to six months after resolution, unless further retention is justified.

• Partnership records: for the duration of the business relationship and any necessary period afterwards.

• Analytics and referral data: according to the relevant operational purpose and applicable retention settings.

You may request deletion of your personal information, subject to applicable legal exceptions.

9. Your rights

Depending on where you live and applicable data protection laws, you may have the right to:

• Request access to your personal information.

• Correct inaccurate information.

• Request deletion of your information.

• Restrict or object to certain processing.

• Request the transfer of eligible personal information.

• Withdraw consent where processing relies on consent.

• Object to direct marketing.

To exercise these rights, email contact@surfhideaways.com.

You may also lodge a complaint with the UK Information Commissioner's Office at ico.org.uk, or another competent data protection authority.

10. Security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse and disclosure.

However, no online service can guarantee absolute security.

11. Third-party websites

Our website links to hotel websites, booking platforms and other third-party services.

We are not responsible for their privacy practices. We recommend reviewing their privacy policies before providing personal information.

12. Children's privacy

Our services are not directed at children under 16, and we do not knowingly collect their personal information through member registration or newsletter subscriptions.

If you believe a child has provided personal information to us, please contact us.

13. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology or legal obligations.

The latest version will be published on this page with an updated date.

14. Contact

For questions about this Privacy Policy or how we handle personal information, please contact:

Surf Hideaways

Email: contact@surfhideaways.com