Last updated: 7/25/2025

Welcome to Our Community

At Golven Surf Morocco, we believe in authentic connections, sustainable adventures, and building a community that respects both the ocean and each other. This privacy policy reflects those same values – we're transparent about how we handle your personal information, just like we're transparent about everything else we do.

Whether you're an Adventure Seeker chasing the perfect wave, a Wellness Traveler finding balance through surf and yoga, or a Digital Nomad building your remote lifestyle by the sea, we want you to feel completely confident about how we protect and use your data.

Who We Are

Data Controller: Golven Surf Morocco

Address: Taghazout center, Taghazout 80022, Morocco
Phone: +212613-457110
Email: [email protected]
Website: https://golvensurfmorocco.com/

We are the data controller responsible for your personal information. If you have any questions about this policy or how we handle your data, we're always here to help.

What Information We Collect

Booking & Reservation Information

When you book your surf adventure with us, we collect :

• Personal details: Name, email, phone number, date of birth

• Payment information: Bank account details for secure transfers, billing address, cash payment records

• Travel information: Arrival/departure dates, passport details for international guests

• Accommodation preferences: Room type, dietary requirements, accessibility needs

• Emergency contacts: For your safety during surf activities

• Surf experience level: To match you with appropriate lessons and conditions

• Health information: Medical conditions, swimming ability, injuries that might affect surfing

• Insurance details: Coverage information for surf activities
  

Website & Digital Interactions

• Contact form submissions: When you ask questions or request information

• Newsletter subscriptions: Email address and preferences for our surf community updates

• Blog comments and reviews: Your thoughts and experiences shared with our community

• Live chat conversations: Real-time support and booking assistance

• Social media interactions: Comments, tags, and shares on our Instagram, Facebook, and TikTok

• Website analytics: How you navigate our site, pages visited, time spent (anonymized)

• Cookie data: Preferences, login status, and site functionality (see our Cookie Policy below)
  

Content & Media

• Photos and videos: During surf lessons, yoga sessions, and community activities

• Social media content: When you tag us or use our hashtags

• Testimonials and reviews: Your experiences shared on our platforms or review sites

• User-generated content: Stories, photos, and videos you share about your Golven experience
  

Location & Environmental Data

• Surf spot preferences: Your favorite breaks and wave conditions

• Sustainability participation: Involvement in beach cleanups, eco-friendly practices

• Carbon footprint tracking: Travel impact calculations for our environmental initiatives

• Local experience bookings: Cultural activities, local guide services, community visits
  

How We Get Your Information

We collect your information through:

Direct Collection

• Booking forms on our website for direct retreat bookings

• Contact forms for inquiries and support

• Newsletter signup for community updates and surf conditions

• Account registration for returning guests

• Check-in process at our accommodations

• Activity waivers for surf lessons and yoga classes

• Banking information for secure deposit and payment transfers

• Survey responses about your experience with us
  

Automatic Collection

• Website cookies and similar tracking technologies

• Analytics tools like Google Analytics (anonymized data)

• Social media pixels for Facebook, Instagram, and TikTok marketing

• Email tracking for newsletter engagement and booking confirmations

• Mobile app usage (if you use our app)
  

Third-Party Sources

• Booking platforms like Booking.com for accommodation reservations (note: these guests may book accommodation only, not necessarily our surf retreat packages)

• Social media platforms when you interact with our content

• Review sites like TripAdvisor, Google Reviews

• Banking institutions for secure payment processing

• Travel partners for package bookings and transfers
  
  

Why We Use Your Information

Primary Purposes

Providing Your Surf Experience

• Processing and managing your bookings (direct retreat bookings and accommodation-only reservations)

• Arranging accommodation, meals, and activities

• Coordinating surf lessons and yoga sessions with our in-house instructors

• Managing equipment from our own surfboard and gear collection

• Coordinating transportation and transfers

• Providing customer support before, during, and after your stay

• Facilitating secure bank transfers for deposits and final payments
  

Safety & Legal Compliance

• Ensuring your safety during water activities

• Meeting insurance requirements

• Complying with Moroccan tourism regulations

• Emergency response and medical assistance

• Age verification for certain activities
  

Community Building & Communication

• Sending booking confirmations and updates

• Sharing surf conditions and weather alerts

• Newsletter with community stories and sustainability tips

• Inviting you to special events and new program launches

• Connecting you with other travelers and local experiences
  

Secondary Purposes

Improving Our Services

• Analyzing booking patterns and preferences

• Personalizing your experience based on past visits

• Developing new programs and amenities

• Optimizing our website and booking process

• Training our team to better serve our community
  

Marketing & Growth

• Creating targeted advertising for similar travelers

• Retargeting campaigns for incomplete bookings

• Social media content featuring guest experiences

• Referral programs and loyalty rewards

• Partnership development with sustainable brands
  

Sustainability Initiatives

• Tracking environmental impact of our operations

• Measuring participation in eco-friendly programs

• Reporting on our community's conservation efforts

• Developing new sustainability partnerships
  

Legal Basis for Processing

We process your personal data based on:
Contract Performance: When necessary to provide your booking and surf experience.
Legitimate Interest: For improving services, safety, and sustainability initiatives.
Consent: For marketing communications, photos/videos, and optional data collection Legal Obligation: For tax, safety, and tourism regulation compliance.
Vital Interest: For emergency situations and medical assistance.

You can withdraw your consent at any time, and we'll respect your decision while continuing to provide your booked services.

How We Share Your Information

Trusted Partners

Service Providers

• Transportation providers for airport transfers and surf spot shuttles

• Local tour operators for cultural experiences and excursions

• Banking institutions for secure payment processing and transfers

• Equipment suppliers (occasionally, when our own inventory requires supplementing)

• Accommodation partners (in exceptional cases when we exceed our capacity)
  

Technology Partners

• Banking systems for secure transfer processing and deposit handling

• Email service providers (Leadconnector) for community communications

• Booking platforms (Booking.com) for accommodation reservation management

• Analytics providers (Google Analytics) for website optimization

• Customer service tools for support ticket management
  

Legal & Safety Requirements

• Insurance companies for coverage verification and claims

• Government authorities when required by Moroccan law

• Emergency services in case of medical or safety incidents

• Legal advisors for contract and liability matters
  

International Transfers

Some of our partners are located outside Morocco, including:

• Cloud storage providers (servers in EU and US)

• International banking networks for transfer processing

• Email and marketing platforms based in the US and EU

• Analytics and advertising platforms with international data centers
  

We ensure all international transfers comply with GDPR and local data protection laws through appropriate safeguards like Standard Contractual Clauses and Privacy Shield frameworks.

Your Rights & Control

Your Data Rights

Access: Request a copy of all personal data we hold about you.
Rectification: Correct any inaccurate or incomplete information.
Erasure: Request deletion of your data (with some legal exceptions).
Restriction: Limit how we process your data in certain circumstances.
Portability: Receive your data in a portable format to transfer elsewhere.
Objection: Opt out of certain types of processing, especially marketing.
Consent Withdrawal: Remove consent for any processing based on consent

Marketing Preferences

You can control your communication preferences at any time:

• Unsubscribe links in all marketing emails

• Preference center to choose what content you receive

• Email us at [email protected] to update preferences

• Account settings if you have an online account with us

Cookie & Tracking Controls

Manage your cookie preferences through:

• Browser settings to block or delete cookies

• Our cookie banner when you first visit our site

• Opt-out links for advertising and analytics cookies

• Do Not Track browser signals (where technically possible)
  
  

How Long We Keep Your Data

Retention Periods

Booking & Payment Data: 7 years (for tax and legal compliance, including bank transfer records).
Marketing Communications: Until you unsubscribe or request deletion.
Website Analytics: 26 months (Google Analytics default).
Safety & Insurance Records: 10 years (legal requirement for activity providers).
Photos & Videos: Until you request removal or we no longer use them.
Email Communications: 3 years or until you request deletion

Account Data: As long as your account is active, plus 2 years.
Reviews & Testimonials: Permanently (unless you request removal).
Legal Documents: As required by Moroccan and international law

We regularly review and delete data that's no longer needed, and we'll always delete your data upon request unless we have a legal obligation to retain it.

How We Protect Your Information

Security Measures

Technical Safeguards

• SSL encryption for all data transmission

• Encrypted storage for sensitive personal and payment data

• Regular security audits and vulnerability assessments

• Access controls limiting who can view your information

• Secure backups with encryption and access logging

• Regular software updates and security patches
  

Organizational Safeguards

• Staff training on data protection and privacy

• Confidentiality agreements for all team members and contractors

• Data minimization - we only collect what we actually need

• Regular policy reviews and privacy impact assessments

• Incident response plan for any security breaches

• Third-party security requirements for all our partners
  

Breach Notification

If a security incident affects your personal data:

• We'll notify relevant authorities within 72 hours

• We'll inform affected individuals without undue delay

• We'll provide clear information about what happened and what we're doing

• We'll offer support and guidance on protecting yourself
  
  

Cookies & Tracking Technologies

Types of Cookies We Use

Essential Cookies (Always Active)

• Website functionality and security

• Shopping cart and booking process

• Language and accessibility preferences

• Login status and session management
  

Analytics Cookies (With Your Consent)

• Google Analytics for website performance

• Booking funnel optimization

• User experience improvements

• Traffic source analysis
  

Marketing Cookies (With Your Consent)

• Facebook and Instagram advertising

• Google Ads retargeting

• Email marketing optimization

• Social media integration
  

Social Media Cookies

• Instagram feed integration

• Facebook sharing and login

• TikTok content embedding

• Social sharing buttons
  

Managing Cookies

You can control cookies through:

• Our cookie banner on your first visit

• Browser settings to block specific types

• Third-party opt-out tools for advertising cookies

• Incognito/private browsing for temporary sessions
  
  

Special Considerations

Children's Privacy

We don't knowingly collect data from children under 16 without parental consent. For surf lessons involving minors:

• Parental consent required for all data processing

• Guardian supervision during activities

• Limited data collection focused only on safety

• Special protections for any photos or videos
  

Medical & Health Information

Health data you share with us receives extra protection:

• Encrypted storage and limited access

• Medical confidentiality standards

• Emergency use only unless you consent to broader use

• Professional discretion by our qualified staff
  

International Travelers

For guests from different countries:

• Multi-jurisdiction compliance (GDPR, CCPA, etc.)

• Local law respect while traveling in Morocco

• Embassy coordination if needed for emergencies

• Travel document security with encrypted storage
  
  

Third-Party Links & Services

Our website and communications may include links to third-party services:

• Booking platforms with their own privacy policies

• Social media sites with different data practices

• Local business partners with separate policies

• Banking institutions for secure payment processing

• Review and travel sites we don't control
  

We're not responsible for these third-party practices, so please review their privacy policies before sharing your information.

Updates to This Policy

We may update this privacy policy to reflect:

• Changes in our services or business practices

• New legal requirements or regulations

• Technology improvements or new features

• Community feedback and best practices
  

When we make significant changes:

• Email notification to our community members

• Website banner highlighting the updates

• Social media announcements for major changes

• Clear explanation of what changed and why
  
  

Contact Us

Privacy Questions & Requests

Email: [email protected]
Phone: +212613-457110
Address: Taghazout center, Taghazout 80022, Morocco

For Data Requests:

• Include your full name and email address

• Specify what type of request (access, deletion, correction, etc.)

• Provide any relevant booking or account information

• We'll respond within 30 days
  

Regulatory Complaints

If you're not satisfied with how we handle your privacy concerns, you have the right to contact:

• Moroccan Data Protection Authority (local complaints)

• Your home country's data protection authority (for EU, UK, US residents)

• Our legal team for formal disputes
  
  

Our Commitment to You

At Golven, we're building more than just a business – we're creating a community of ocean lovers, adventure seekers, and conscious travelers. Your trust is essential to that community, and we take our responsibility to protect your privacy as seriously as we take our commitment to the ocean.

We believe in transparency, sustainability, and authentic connections. This privacy policy reflects those values, and we're always here to answer your questions or address your concerns.

Welcome to the Golven community – let's make some waves together!

This privacy policy is effective as of 7/08/2025 and applies to all personal information collected by Golven Surf Morocco through our website, mobile applications, and direct interactions.