This policy explains how Paddleboard Hire Brighton collects, uses, and protects your personal data. We are committed to handling your information responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Paddleboard Hire Brighton is a family-run partnership operating from Hove Lawns, Brighton, East Sussex. We are the data controller for the personal information we collect.
Contact: hello@paddleboardhirebrighton.co.uk
Address: Hove Town Hall, Church Road, Hove, BN3 2AF
2. What data we collect
We may collect the following personal information:
- Contact details — name, email address, phone number
- Booking information — date, session type, board selection, number of participants
- Payment information — processed securely via Stripe; we do not store card details
- Waiver information — name, signature, date, and any health information you choose to provide
- Marketing preferences — email address if you sign up to our mailing list
- Website usage data — anonymous analytics via Google Analytics (cookies)
3. Why we collect it and our legal basis
- To fulfil your booking — processing your reservation, taking payment, and sending confirmation. Legal basis: contract performance.
- To keep you safe — collecting waiver information before your session. Legal basis: legitimate interests / legal obligation.
- To send you marketing emails — only if you have opted in via our mailing list. Legal basis: consent. You can unsubscribe at any time.
- To improve our service — anonymous website analytics. Legal basis: legitimate interests.
4. Who we share your data with
We use trusted third-party services to operate our business. Your data may be processed by:
- Stripe — payment processing. Stripe Privacy Policy
- Mailchimp (Intuit) — email marketing. Mailchimp Privacy Policy
- Google Analytics — anonymous website analytics. Google Privacy Policy
We do not sell your personal data to any third party.
5. How long we keep your data
- Booking records — 7 years (required for tax and accounting purposes)
- Waiver records — 3 years from date of session
- Mailing list — until you unsubscribe
- Enquiry emails — 12 months unless a booking results
6. Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (where no legal obligation to retain exists)
- Restriction — ask us to limit how we use your data
- Portability — request your data in a machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — for any processing based on consent (e.g. marketing emails) at any time
To exercise any of these rights, contact us at hello@paddleboardhirebrighton.co.uk. We will respond within 30 days.
7. Cookies
Our website uses cookies for anonymous analytics (Google Analytics). These cookies do not identify you personally. You can disable cookies in your browser settings at any time.
Note: We will add a cookie consent banner before launching analytics tracking. You will always be able to opt out.
8. Data security
We take reasonable steps to protect your personal data. Payments are handled entirely by Stripe using industry-standard encryption. We do not store card details. Our website uses HTTPS encryption throughout.
9. Under-18s
We do not knowingly collect personal data from children under 13 without verified parental consent. If a participant is under 18, a parent or guardian must complete the booking waiver on their behalf.
10. Changes to this policy
We may update this policy from time to time. The current version will always be available at this URL. Significant changes will be communicated by email where we hold your contact details.
11. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Helpline: 0303 123 1113
This privacy policy was last reviewed and updated in May 2026.