Privacy Policy

Last updated: 22 September 2026

ChillOut Taghazout Surf Camp ("we", "us", "our") operates chilloutsurf.local (the "Site"). This Privacy Policy explains what personal data we collect when you use the Site, why we collect it, who we share it with, and the choices and rights you have.

1) Who We Are

ChillOut Taghazout Surf Camp
Taghazout Bay, 80023
Morocco

Email: booking@chilloutsurf.com
Phone / WhatsApp: +212 715 511 910

For any question about this Policy or your personal data, contact us using the details above.

2) What Personal Data We Collect

Information you give us directly — when you fill in a contact, inquiry, or booking form on the Site, we collect the details you provide: your name, email address, phone number, the package or dates you're asking about, and any message you write. If you contact us via the WhatsApp button on the Site, WhatsApp (Meta) handles that conversation according to its own privacy policy — we only see the messages you choose to send us.

Information collected automatically — like most websites, our hosting and analytics tools automatically log some technical information when you visit: your approximate location (derived from IP address), browser and device type, pages viewed, and how you arrived at the Site. This is described further in our Cookie Policy.

We do not knowingly collect payment card details. We do not currently take online payments through the Site — bookings are confirmed and paid for directly with our team.

3) Why We Use Your Data

• To respond to your inquiry or booking request — so we can answer your questions, confirm availability, and arrange your stay. This is necessary to take the steps you ask us to take before entering into a booking with us.
• To run and improve the Site — understanding, in aggregate, which pages are useful and which aren't, based on our legitimate interest in operating a working website, and, where analytics cookies require it, your consent.
• To keep the Site secure — for example, limiting repeated failed login attempts, based on our legitimate interest in preventing abuse.

4) Who We Share Data With

We don't sell your personal data, and we don't share it with third parties for their own marketing purposes. We do use a small number of service providers who process data on our behalf, strictly to help us run the Site:

• Google Analytics (Google LLC) — website usage statistics. Only activated for visitors who consent, where consent is required (see our Cookie Policy).
• Google Maps (Google LLC) — to show our location on the Contact/Accommodation pages.
• Trustindex — to display our genuine Google and TripAdvisor reviews on the Site.
• WPForms — the form software that processes and stores your inquiry/booking submissions on our site's own database.
• Our email and hosting providers — to deliver booking notification emails and to keep the Site online.

We may also disclose information if required to by law, or to protect our rights, guests, or staff.

5) International Transfers

We are based in Morocco. If you are visiting from the European Economic Area, UK, or elsewhere, your data may be processed in Morocco and in other countries where our service providers (such as Google) operate, which may have different data protection laws than your own country. Where this happens, we rely on the safeguards those providers put in place (such as Google's own compliance with the EU-U.S. Data Privacy Framework and standard contractual clauses) to protect your data.

6) How Long We Keep Your Data

We keep booking and inquiry data for as long as needed to handle your stay and for a reasonable period afterwards, for accounting and legal record-keeping purposes. Analytics data is retained according to Google Analytics' own default retention settings. You can ask us to delete your data sooner — see Section 8.

7) Cookies

The Site uses cookies and similar technologies for essential site functions, and, with your consent, for analytics. Full details, including how to change your choice at any time, are in our Cookie Policy.

8) Your Rights

Depending on where you live, you may have the right to:

• Ask what personal data we hold about you, and get a copy of it;
• Ask us to correct inaccurate data;
• Ask us to delete your data;
• Ask us to restrict or object to certain processing;
• Receive your data in a portable format;
• Withdraw consent at any time, where we rely on consent (e.g. analytics cookies) — this won't affect anything done before you withdrew it;
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details in Section 1.

9) Children

The Site is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

10) Changes to This Policy

We may update this Privacy Policy from time to time, for example if we start using a new service or a law changes. We'll update the "Last updated" date at the top when we do. Significant changes will be reflected on this page.

11) Contact Us

Questions about this Privacy Policy or your data? Reach us at booking@chilloutsurf.com or +212 715 511 910.