This Privacy Policy explains how Ayusa Surfcamp (“Ayusa Surfcamp”, “we”, “us” or “our”) collects, uses, stores and protects personal data when you visit our website, contact us, request information, submit a booking request or use our services. Ayusa Surfcamp is a legally registered Moroccan company based in Tamraght, Agadir, Morocco. We are committed to processing personal data in a lawful, fair and transparent way, in accordance with applicable data protection laws, including Moroccan Law No. 09-08 and, where applicable, the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller is: For any questions about this Privacy Policy or about how we process your personal data, you can contact us at: ayusasurf@gmail.com

2. Personal Data We Collect

We may collect personal data when you visit our website, contact us, complete a contact form, submit a booking form or communicate with us by email, WhatsApp, phone or other channels. The personal data we may collect includes:

• name and surname;
• email address;
• phone number;
• nationality or country of residence;
• arrival and departure dates;
• number of participants;
• booking preferences;
• selected services, packages or activities;
• messages and requests sent through our forms or contact channels;
• payment-related information, where applicable;
• technical data, such as IP address, browser type, device information, pages visited and cookie preferences.

To provide our services safely and properly, we may also ask you to provide information such as:

• surfing level;
• swimming ability;
• medical information relevant to the activities;
• allergies;
• disabilities or mobility needs;
• dietary requirements;
• other special needs or requests related to your stay or activities.

We only ask for this type of information when it is relevant to your booking, safety or the organisation of the services requested.

3. How We Collect Your Data

We collect personal data when:

• you browse our website;
• you fill in a contact form;
• you fill in a booking form;
• you contact us by email, WhatsApp, phone or social media;
• you request information about our surf camp, surf lessons, accommodation or related services;
• you make or confirm a booking;
• you provide additional information before or during your stay.

We may also collect limited technical data through cookies and similar technologies, as explained in our Cookie Policy.

4. Purposes of Processing

a. To respond to your requests

We use your contact details and the content of your message to reply to enquiries, provide information and communicate with you.

b. To manage booking requests and reservations

We use your personal and booking data to check availability, prepare offers, confirm bookings, manage your stay and organise the services you requested.

c. To provide surf camp services safely

We may process information about surfing level, swimming ability, health conditions, allergies, disabilities or dietary requirements in order to organise activities safely and provide a suitable service.

d. To manage payments and administration

We may process payment-related and booking-related data to manage deposits, balances, invoices, accounting and administrative obligations.

e. To improve website functionality and user experience

We may use technical data and analytics tools, such as Google Analytics, to understand how visitors use our website and improve its content, structure and performance.

f. To protect our rights and business

We may process personal data where necessary to prevent misuse of the website, manage disputes, enforce our terms and conditions or protect our legal interests.

g. To comply with legal obligations

We may process and retain certain data where required by applicable law, including accounting, tax, administrative or legal obligations.

5. Legal Basis for Processing

Depending on the situation, we process your personal data on one or more of the following legal bases:

• performance of a contract, when processing is necessary to manage your booking or provide the requested services;
• pre-contractual steps, when you request information before making a booking;
• legal obligation, when we are required to retain or process data for legal, accounting or tax reasons;
• legitimate interest, such as responding to requests, maintaining website security, improving our services or protecting our business;
• consent, where required, for example for non-essential cookies, analytics cookies or the processing of sensitive information voluntarily provided by you.

You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

6. Special Categories of Personal Data

Some information you provide may be sensitive, such as medical information, allergies, disabilities, dietary requirements or other health-related details. We process this information only when necessary to:

• organise your stay or activities;
• ensure your safety during surf lessons, surf guiding or related activities;
• adapt the service to your needs;
• respond to specific requests you voluntarily provide.

Please only share sensitive information that is relevant to your booking or to the services requested.

7. Marketing

Ayusa Surfcamp does not use your personal data for marketing newsletters, advertising campaigns, remarketing or profiling. If we decide to introduce newsletters or marketing communications in the future, we will update this Privacy Policy and request your consent where required.

8. Cookies, Analytics and Third-Party Tools

Our website may use cookies and similar technologies to:

• ensure the website works correctly;
• protect the website from spam or misuse;
• remember cookie preferences;
• collect anonymous or aggregated statistics about website usage;
• display third-party content or services.

We may use third-party tools such as:

• Google Analytics;
• Google Maps;
• Google reCAPTCHA;
• YouTube embeds;
• Instagram embeds;
• WhatsApp links or buttons;
• booking tools;
• payment providers such as Stripe, PayPal or bank transfer-related tools, where applicable.

These third-party services may collect technical data, set cookies or process data according to their own privacy policies. For more details, please see our Cookie Policy below.

9. Data Sharing

We may share personal data only where necessary with trusted third parties, including:

• website hosting providers;
• website maintenance providers;
• email and communication providers;
• booking system providers;
• payment providers;
• analytics providers;
• anti-spam and security tools;
• accountants, consultants or legal advisors;
• public authorities, where required by law.

We do not sell your personal data to third parties.

10. International Data Transfers

Ayusa Surfcamp is based in Morocco and may receive enquiries and bookings from users located in different countries, including the European Union and the United Kingdom. Some third-party providers used by our website or business operations may process data outside Morocco or outside your country of residence. Where required by applicable law, we take reasonable steps to ensure that personal data is protected through appropriate safeguards.

11. Data Retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy. As a general rule:

• contact form enquiries are kept for up to 24 months;
• booking-related data is kept for up to 24 months, unless a longer retention period is required for accounting, tax, legal or administrative reasons;
• payment and invoice-related data may be kept for the period required by applicable laws;
• sensitive information, such as medical details, allergies, disabilities or dietary requirements, is kept only for the time necessary to manage the booking, provide the service and ensure safety, unless a longer retention period is required for legal reasons;
• technical logs may be kept for a limited period for security and maintenance purposes;
• cookie preferences may be stored for the duration indicated in the Cookie Policy.

At the end of the retention period, personal data will be deleted, anonymised or securely archived where legally required.

12. Data Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, disclosure, alteration or destruction. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

13. Your Rights

Depending on the applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interest;
• withdraw consent where processing is based on consent;
• request data portability, where applicable;
• lodge a complaint with a competent data protection authority.

To exercise your rights, please contact us at: ayusasurf@gmail.com We may need to verify your identity before responding to your request.

14. Third-Party Links

Our website may contain links to third-party websites, platforms or services, including social media platforms, maps, payment providers or booking tools. We are not responsible for the privacy practices, content or security of third-party websites. We recommend reading their privacy policies before providing personal data.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published on this page with a new “Last updated” date. This Cookie Policy explains how Ayusa Surfcamp uses cookies and similar technologies on its website.

1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help the website function correctly, remember preferences, improve security, analyse website usage and, where applicable, allow third-party services to work.

2. Types of Cookies We Use

Our website may use the following categories of cookies:

a. Strictly Necessary Cookies

These cookies are required for the website to work correctly. They may be used to:

• load pages correctly;
• ensure website security;
• remember cookie preferences;
• prevent spam or misuse;
• manage basic website sessions;
• allow contact and booking forms to work properly.

These cookies do not require consent because they are necessary for the operation of the website.

b. Analytics Cookies

We may use Google Analytics to understand how visitors use our website. Analytics cookies may collect information such as:

• pages visited;
• time spent on the website;
• browser and device type;
• approximate location;
• traffic source;
• user interactions with the website.

Google Analytics helps us improve the website, but these cookies are not strictly necessary. Where required by law, they are activated only after your consent.

c. Functional and Third-Party Cookies

Some third-party services may place cookies or similar technologies when they are displayed or used on the website. These may include:

• Google Maps;
• YouTube videos;
• Instagram embeds;
• Google reCAPTCHA;
• WhatsApp buttons or links;
• booking tools;
• payment providers.

These services may collect technical data or interact with your device according to their own privacy and cookie policies.

d. Marketing Cookies

Ayusa Surfcamp does not use marketing, advertising, remarketing or profiling cookies. If marketing cookies are introduced in the future, this Cookie Policy will be updated and consent will be requested where required.

3. Cookie Table

The exact cookies used may vary depending on the website configuration, WordPress plugins and third-party tools activated.

4. Google Analytics

We may use Google Analytics to collect aggregated statistical information about how users interact with our website. Google Analytics may use cookies or similar technologies to measure website activity. You can choose whether to accept or reject analytics cookies through the cookie banner or cookie settings available on the website.

5. Google reCAPTCHA

Our website may use Google reCAPTCHA to protect contact and booking forms from spam, abuse and automated submissions. reCAPTCHA may collect technical information about your device, browser and interaction with the website in order to determine whether the form is being submitted by a human user. The use of reCAPTCHA is intended to protect the security and reliability of the website.

6. Google Maps, YouTube and Instagram Embeds

Our website may include embedded content such as maps, videos or social media posts. Embedded content from third-party platforms may behave as if you visited the third-party website directly. These platforms may collect data, use cookies or track your interaction with the embedded content, especially if you are logged into their services.

7. Managing Cookie Preferences

When you visit our website, you may be able to accept, reject or manage non-essential cookies through the cookie banner. You can change your preferences at any time by accessing the cookie settings on the website, where available. You can also manage or delete cookies through your browser settings. Most browsers allow you to:

• view cookies;
• delete cookies;
• block cookies;
• set cookie preferences for specific websites.

Please note that blocking strictly necessary cookies may affect the correct functioning of the website.

8. Changes to This Cookie Policy

We may update this Cookie Policy from time to time, especially if we add, remove or change cookies, plugins or third-party services. The updated version will be published on this page with a new “Last updated” date.