Privacy Policy

Last updated: 22 September 2026

ChillOut Taghazout Surf Camp ("we", "us", "our") operates chilloutsurf.local (the "Site"). This Privacy Policy explains what personal data we collect when you use the Site, why we collect it, who we share it with, and the choices and rights you have.

1) Who We Are

ChillOut Taghazout Surf Camp
Taghazout Bay, 80023
Morocco

Email: booking@chilloutsurf.com
Phone / WhatsApp: +212 715 511 910

For any question about this Policy or your personal data, contact us using the details above.

2) What Personal Data We Collect

Information you give us directly — when you fill in a contact, inquiry, or booking form on the Site, we collect the details you provide: your name, email address, phone number, the package or dates you're asking about, and any message you write. If you contact us via the WhatsApp button on the Site, WhatsApp (Meta) handles that conversation according to its own privacy policy — we only see the messages you choose to send us.

Unfinished bookings — if you start a booking on the Site and enter your email address but do not finish, we may keep the details you entered (such as your name, email address, phone number and the dates or package you chose) for up to 30 days, so that our team can contact you to help you complete your booking or answer your questions. We use this only to help with your booking, not for newsletters or marketing. If you complete the booking, this temporary record is deleted. You can ask us to delete it at any time using the contact details above.

Information collected automatically — like most websites, our hosting and analytics tools automatically log some technical information when you visit: your approximate location (derived from IP address), browser and device type, pages viewed, and how you arrived at the Site. This is described further in our Cookie Policy.

We do not collect or store payment card details on the Site. Booking deposits are paid through PayPal, which handles your payment details on its own secure pages. We only receive confirmation of the payment, together with the payer’s name and email address.

3) Why We Use Your Data

• To respond to your inquiry or booking request — so we can answer your questions, confirm availability, and arrange your stay. This is necessary to take the steps you ask us to take before entering into a booking with us.
• To run and improve the Site — understanding, in aggregate, which pages are useful and which aren't, based on our legitimate interest in operating a working website, and, where analytics cookies require it, your consent.
• To keep the Site secure — for example, limiting repeated failed login attempts, based on our legitimate interest in preventing abuse.

4) Who We Share Data With

We don't sell your personal data, and we don't share it with third parties for their own marketing purposes. We do use a small number of service providers who process data on our behalf, strictly to help us run the Site:

• Google Analytics (Google LLC) — website usage statistics. Only activated for visitors who consent, where consent is required (see our Cookie Policy).
• Google Maps (Google LLC) — to show our location on the Contact/Accommodation pages.
• Trustindex — to display our genuine Google and TripAdvisor reviews on the Site.
• PayPal — to take your booking deposit securely. PayPal processes your payment under its own privacy policy.
• Our booking and contact forms — your submissions are processed and stored in our own site’s database.
• Our email and hosting providers — to deliver booking notification emails and to keep the Site online.

We may also disclose information if required to by law, or to protect our rights, guests, or staff.

5) International Transfers

We are based in Morocco. If you are visiting from the European Economic Area, UK, or elsewhere, your data may be processed in Morocco and in other countries where our service providers (such as Google) operate, which may have different data protection laws than your own country. Where this happens, we rely on the safeguards those providers put in place (such as Google's own compliance with the EU-U.S. Data Privacy Framework and standard contractual clauses) to protect your data.

6) How Long We Keep Your Data

We keep booking and inquiry data for as long as needed to handle your stay and for a reasonable period afterwards, for accounting and legal record-keeping purposes. Analytics data is retained according to Google Analytics' own default retention settings. You can ask us to delete your data sooner — see Section 8.

7) Cookies

The Site uses cookies and similar technologies for essential site functions, and, with your consent, for analytics. Full details, including how to change your choice at any time, are in our Cookie Policy.

8) Your Rights

Depending on where you live, you may have the right to:

• Ask what personal data we hold about you, and get a copy of it;
• Ask us to correct inaccurate data;
• Ask us to delete your data;
• Ask us to restrict or object to certain processing;
• Receive your data in a portable format;
• Withdraw consent at any time, where we rely on consent (e.g. analytics cookies) — this won't affect anything done before you withdrew it;
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details in Section 1.

9) Children

The Site is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

10) Changes to This Policy

We may update this Privacy Policy from time to time, for example if we start using a new service or a law changes. We'll update the "Last updated" date at the top when we do. Significant changes will be reflected on this page.

11) Contact Us

Questions about this Privacy Policy or your data? Reach us at booking@chilloutsurf.com or +212 715 511 910.