top of page

Privacy Policy

Effective Date: May 23, 2023
Business Name: Fozzy Surf School LLC
Business Location: O‘ahu, Hawai‘i
Contact Email: contact@fozzysurfschool.com

Contact Phone: 808-458-9319

 

At Fozzy Surf School (“we,” “our,” or “us”), we are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, store, and disclose your personal data through our website and mobile app (collectively, the “Services”), in compliance with the California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), and applicable Hawai‘i state laws.

​

1. Information We Collect

We collect the following types of personal and usage data:

a. Personal Information (PI)

  • Name

  • Email address

  • Phone number

  • Age (for minors, with parental consent)

  • Height, weight, and surfing experience (used for lesson preparation)

  • Payment details (processed via third-party providers like Stripe or Wix Payments)

b. Device & Usage Data

  • IP address

  • Device and browser type

  • Time zone and language

  • Website or app interaction logs

  • Pages or features accessed

c. Lesson & Media Data

  • Surf lesson bookings and schedule history

  • Lesson video recordings (with prior consent)

  • Progress tracking notes

2. Legal Bases for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

  • Consent (e.g., subscribing to updates, recording videos)

  • Performance of a Contract (e.g., booking and delivering lessons)

  • Legal Obligation (e.g., accounting and tax purposes)

  • Legitimate Interest (e.g., improving services, safety tracking)

3. How We Use Your Information

We use your information to:

  • Schedule and manage surf lessons

  • Process payments securely

  • Communicate via confirmations, reminders, or updates

  • Provide lesson video reviews and coaching feedback

  • Improve our website, services, and customer experience

  • Comply with legal and regulatory obligations

4. Sharing of Information

We do not sell your personal data. We may share limited data with:

  • Payment processors (e.g., Stripe, Square)

  • Booking and scheduling platforms (e.g., Calendly)

  • Cloud storage and media tools for videos (e.g., Google Drive or Vimeo)

  • Staff or instructors for operational purposes

  • Government or regulatory agencies when legally required

All third-party providers are bound by strict data processing agreements.

5. Your Rights Under GDPR & CCPA

Depending on your location, you may have the following rights:

Under GDPR (for EU Residents):

  • Right to Access – Request a copy of your personal data

  • Right to Rectification – Correct inaccurate or incomplete data

  • Right to Erasure – Request deletion of your data

  • Right to Restrict or Object – Limit how your data is used

  • Right to Data Portability – Request transfer to another service

  • Right to Withdraw Consent – At any time

Under CCPA (for California Residents):

  • Right to Know – What data we collect and how we use it

  • Right to Delete – Request deletion of personal data

  • Right to Opt Out of Sale – (Note: We do not sell data)

  • Right to Non-Discrimination – No penalty for exercising your rights

To exercise any of these rights, please email us at contact@fozzysurfschool.com with the subject line Privacy Request. We may need to verify your identity before processing your request.

6. Data Storage & Retention

We retain personal data only as long as necessary to fulfill service obligations, meet legal requirements, and support internal analysis. Lesson videos are stored for up to 12 months, unless otherwise requested by the client.

7. Data Protection & Security

We take reasonable technical and organizational measures to safeguard your data, including:

  • Encrypted payment processing

  • Secure storage of client data

  • Staff access limited to authorized personnel only

While no system is 100% secure, we regularly monitor and update our practices to reduce risk.

8. Children's Privacy (COPPA Compliance)

We do not knowingly collect personal data from children under 13 without parental or guardian consent. For clients under 18, data is collected solely for lesson delivery and safety purposes. Parents/guardians may request access, modification, or deletion of their child’s data.

9. International Data Transfers

If you are located outside of the United States, your data may be transferred to and processed in the U.S., where data protection laws may differ. We ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place when required.

10. Changes to This Policy

We may update this policy periodically. Any changes will be posted on this page with an updated Effective Date. We encourage you to review this policy regularly.

11. Contact Us

If you have questions or requests regarding your privacy, please contact:

Fozzy Surf School
Email: contact@fozzysurfschool.com
Phone: 808-458-9319
Location: North Shore, O‘ahu, Hawai‘i

Mailing Address: PO Box 1168, Haleiwa, HI 96712

bottom of page