Privacy policy

Last Updated: August 2026 Operator: Surf Camp International ("SCI", "we", "us", "our") Contact & Information Officer: info@surfcampinternational.com Domain: surfcampinternational.com 1. SCOPE & PURPOSE Surf Camp International operates an online surf networking, content storage, and introduction directory connecting candidate crew members with verified hosts, eco-lodges, and water sports camps. This Privacy Policy details how personal information is collected, processed, displayed, and protected in compliance with South Africa's Protection of Personal Information Act ("POPIA") and applicable international privacy laws (including GDPR). 2. INFORMATION WE COLLECT By registering and setting up a profile on SCI, you voluntarily provide the following personal data: • Identification & Contact Data: Full name, phone number, WhatsApp details, and email address. • Professional & Profile Data: ISA certifications, water safety qualifications, language proficiencies, bio, work history, uploaded CVs, certificates, photos, and embedded video links (Loom, Vimeo, YouTube). • Security Data: Custom profile blur controls and Access PIN preferences set by you. 3. HOW WE STORE & PROCESS YOUR DATA Your personal information is securely processed and stored using the following technical infrastructure: • Primary Database & Storage: Supabase (encrypted cloud database hosting user accounts, profile tables, and file storage buckets). • Communications & Mail Infrastructure: Mail Merge and automated transactional mail services to send account updates, candidate alerts, and direct job application notifications. • Third-party processors act strictly under contractual obligations to process data safely and in compliance with global privacy standards. Internal Platform Analytics: We collect first-party usage metrics (such as page visits, feature usage, and button interactions) directly within our infrastructure. This data is used exclusively for internal optimization, security, and feature development, and is never sold or shared with external advertising networks. 4. VISIBILITY CONTROLS, DATA MASKING & PIN ACCESS We provide granular control over how your information is displayed to third parties: • Standard Data Masking (Default Blurring): By default, sensitive contact details (direct phone numbers, direct emails, and full CV attachments) are masked/blurred to general visitors and unverified accounts. • Verified Host Unmasking: Sensitive data is automatically unmasked only to Host accounts that pass SCI internal verification requirements. • Candidate Blur Override: You retain the ability to manually adjust visibility settings, obscure personal information, or override default masking preferences directly within your user dashboard. • One-Time PIN (OTP) & Custom URL Sharing: You may generate a custom URL slug protected by a temporary access PIN (active for 30 to 60 days) to share your profile with external employers. While the PIN limits unauthorized online viewing, SCI cannot control or delete information downloaded, saved, or screenshotted by external recipients once unlocked. 5. USER CONSENT & OFFSITE DATA DISCLAIMER • Internal Display Authorization: By agreeing to our Terms and publishing a profile, you grant SCI the right to host, display, and format your information within our directory to facilitate job introductions. • Offsite Sharing Disclaimer: When you send your custom URL, PIN, or profile information to employers, camps, or third parties outside the SCI platform, those recipients store and control that information independently. SCI expressly disclaims all liability for the privacy practices, retention, or misuse of personal data shared by you offsite. 6. ACCOUNT DELETION & RIGHT TO BE FORGOTTEN • Instant Dashboard Deletion: You retain full ownership of your data and may permanently delete your profile at any time via your account dashboard. • Supabase Database Purge: Executing an account deletion triggers an automated cascade purge that permanently deletes your profile data, uploaded files, and associated records from our active Supabase database and active mailing lists. • External Copies Notice: Deleting your SCI account purges your data from our servers immediately. It does NOT automatically recall, delete, or wipe copies of your profile previously sent or stored by external camp employers offsite. 7. DATA SECURITY MEASURES We maintain appropriate administrative, technical, and physical safeguards—including database encryption at rest and in transit, role-based access restrictions, and secure tokenization—to protect your personal information against unauthorized access, loss, or alteration. 8. CONTACT & POPIA PRIVACY REQUESTS For any questions regarding this policy, or to exercise your rights to access, rectify, or audit your personal information, please contact our Information Officer at: Email: info@surfcampinternational.com