This document explains what information we collect, why we collect it, how we use it, how we keep your data safe and how long it will be retained.


Pembrokeshire Surf School Ltd – is the data controller and is registered at companies house.


What information do we collect
Medical and risk awareness forms are used to forewarn both customer and Pembrokeshire Surf School of risks associated with the activity involved and any ailments that a customer may have that a coach should be aware of – this personal medical information remains private between the coach and the customer and will not be shared.


Customer payment information is collected through Paypal and Bookly.


Customers doing SLSGB or ASI courses also have their information collected by Surf Lifesaving GB and Academy of Surfing Instructors.

Find their data protection info here:


Why we need it
We only collect data from you for insurance and booking purposes so that we can do our best to help you from a coaching point of view ie. Determining the right level of intensity or duration. Your contact details will also be used should we need to contact you for a change of location making you aware of the next step in your progression or cancellation.


How we use it
The instructor reads any medical info regarding their customers prior to the sport taking place to help them set the activity at the appropriate level and to be aware of ailments or injuries that could be aggravated by certain movements in the sport and to let the customer know this.


What we do with it
Online it is kept by Paypal for payment purposes and for booking purposes. In paper form it is kept in our office in a locked cupboard.

See Paypal’s data protection info here:

See Bookly’s data protection info here:


How long we keep it
To satisfy our insurance requirements, should a claim be made against us we have to keep the information our customers provide for 3 years or 3 years from their 18th birthday if it is a child. After this point it will be deleted, burnt or shredded.


Site usage information
Cookies – This site uses cookies to store information on your computer. Some of these cookies are essential to make our site work and others help us to improve by giving us some insight into how the site is being used. These cookies are set when you submit a form, login or interact with the site by doing something that goes beyond clicking some simple links. We also use some non-essential cookies to anonymously track visitors or enhance your experience of this site. If you’re not happy with this, we won’t set these cookies but some nice features on the site may be unavailable.

To control third party cookies, you can also adjust your browser settings. By using our site you accept the terms of our privacy policy.


What are your rights
The GDPR provides the following rights for individuals:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• Rights in relation to automated decision making and profiling


More information on your rights as an individual can be found at:


If at any point you believe the information we process on you is incorrect you can request to see this information and have it corrected or deleted. If you wish to raise a complaint on how we have handled your personal data, you can contact us to have the matter investigated. [email protected]


If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office


Changes to this privacy policy
If this privacy policy changes in any way, we will place an updated version on this page. This version: May 2018.


This privacy policy explains how we protect and respect the data we collect from you. We may at any time revise these terms and conditions without notice. Please check regularly. Continued use of this site after a change has been made is deemed to be your acceptance of the change.