Privacy Policy

1. Introduction

This Privacy Policy explains how equipsurfsale.com ("equipsurfsale", "we", "us" or "our") collects, uses, shares and protects personal information when you visit www.equipsurfsale.com (the "Site"), buy products from us, subscribe to our newsletter or otherwise contact us.

We respect your privacy and are committed to handling your data transparently and securely. We only collect the information we need to run our shop, deliver your orders and — with your permission — tell you about products and surf content you may enjoy. We never sell your personal information.

By using the Site you acknowledge that you have read this Policy. If you do not agree with it, please do not use the Site.

2. Who is responsible for your data

The data controller responsible for your personal data is:

Equip Surf Sale, 16400 Pacific Coast Hwy, Suite 210, Huntington Beach, CA 92649, USA
Email: [email protected]
Phone: +1 (949) 555-0142

For any question about this Policy or your data, including requests to exercise your rights, write to us at [email protected] with the subject line "Privacy request".

3. The information we collect

3.1 Information you give us

• Identity and contact data — first and last name, email address, phone number, billing and shipping address.
• Order data — products purchased, sizes, quantities, prices, coupon codes, order notes and return requests.
• Payment data — payments are processed by certified third-party payment providers. We do not store full card numbers or security codes on our servers. We may receive a token, the card type, the last four digits and the expiry date.
• Communication data — messages you send through our contact form, email or social media, and your newsletter preferences.
• Optional fit information — height, weight or body measurements you choose to enter in our size tools. These tools run in your browser and the values are not sent to us.

3.2 Information collected automatically

• Technical data — IP address, browser type and version, device type, operating system, time zone and language settings.
• Usage data — pages visited, products viewed, time spent on pages, referring website and search terms used on our Site.
• Local storage data — your cart, wishlist, recently viewed products and cookie choices are saved in your own browser's local storage so they are still there when you return. See our Cookie Policy.

3.3 Information from third parties

We may receive limited information from payment providers (confirmation that a payment succeeded), delivery companies (tracking status) and fraud-prevention services.

3.4 Children

Our Site is not directed at children under 16 and we do not knowingly collect their personal data. If you believe a child has provided us with personal information, please contact us and we will delete it.

4. How and why we use your data

We use your personal data only where we have a lawful basis to do so:

We do not use automated decision-making that produces legal or similarly significant effects on you.

5. Who we share your data with

We share personal data only with trusted service providers who help us run our business, and only to the extent necessary:

• Payment processors to take payments securely and prevent fraud.
• Shipping and logistics partners to deliver your order and provide tracking.
• Hosting and IT providers that host our Site and email.
• Email marketing platform to send newsletters to subscribers who have opted in.
• Professional advisers such as accountants and lawyers, under strict confidentiality.
• Authorities where required by law, court order or to protect our rights.

All service providers are bound by contracts requiring them to protect your data and use it only on our instructions. We do not sell, rent or trade your personal information to third parties for their own marketing.

6. International transfers

Some of our service providers may process data outside your country, including outside the European Economic Area (EEA) or the United Kingdom. When this happens we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision, so that your data receives an equivalent level of protection.

7. How long we keep your data

• Order and invoice data: for as long as required by tax and accounting laws (usually 6–10 years depending on jurisdiction).
• Customer service messages: up to 3 years after the last contact.
• Newsletter data: until you unsubscribe, after which we keep only your email on a suppression list so we do not contact you again.
• Analytics data: in aggregated or pseudonymised form, for up to 26 months.
• Local storage in your browser: until you clear it or remove items yourself.

8. How we protect your data

We use appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration or disclosure. These include encrypted HTTPS connections, access controls, regular software updates and working only with PCI-DSS compliant payment providers. No online transmission is ever completely secure, but we work hard to keep your information safe and will notify you and the relevant authorities of any breach where the law requires.

9. Your privacy rights

Depending on where you live, you may have the following rights:

• Access — ask for a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data where there is no reason to keep it.
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests, including profiling, and to direct marketing at any time.
• Withdraw consent — where we rely on consent, you can withdraw it at any time without affecting earlier processing.
• Complain — lodge a complaint with your local data-protection authority.

California residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, use and disclose; the right to delete; the right to correct; and the right to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioural advertising. We will not discriminate against you for exercising any of these rights.

To exercise any right, email [email protected]. We will respond within 30 days (or sooner where required by law) and may need to verify your identity first.

10. Newsletter and marketing

We only send marketing emails if you have subscribed. Every email contains an unsubscribe link, and you can also unsubscribe by writing to us. We may measure whether our emails are opened and which links are clicked to improve our content; you can prevent this by disabling images in your email client.

11. Third-party links

Our Site may contain links to social networks and other websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.

12. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The date at the top of this page shows when it was last updated. Significant changes will be announced on the Site or by email where appropriate.

13. Contact us

If you have any questions about this Privacy Policy, please contact us:

Email: [email protected]
Phone: +1 (949) 555-0142
Post: Equip Surf Sale, 16400 Pacific Coast Hwy, Suite 210, Huntington Beach, CA 92649, USA

You can also use our contact form.