Privacy Policy

How we handle your personal data when you browse, contact us, or book.

Privacy Policy

Last updated: 28 February 2026

This Privacy Policy explains how Jho’La Surf Camp (“we”, “us”) collects, uses, and protects your personal data when you visit https://www.jholasurfcamp.com (the “Website”), contact us, or make a booking.

1) Who we are

Controller: Jho’La Surf CampLocation: Praia da Luz, Algarve, PortugalContact (privacy): info@jholasurfcamp.com

2) What data we collect

Depending on how you use the Website, we may collect:

  • Contact details: name, email, phone/WhatsApp (if you provide it)
  • Booking details: dates, package/room selection, number of guests, messages you send us
  • Payment-related data: we may receive confirmation of payment status and transaction references from payment providers; we do not store full card details on our servers
  • Technical data: IP address, device/browser information, approximate location, pages visited, and similar analytics data
  • Communications: messages you send via forms, email, or WhatsApp

3) How we collect data

We collect data when you:

  • Fill in a contact form
  • Book a stay or experience through our checkout
  • Email or message us on WhatsApp
  • Browse the Website (via cookies/analytics)

4) Why we use your data (purposes)

We use your data to:

  • Respond to enquiries and provide customer support

  • Process and manage bookings

  • Communicate important booking information (arrival details, schedule, changes)

  • Improve the Website and understand how visitors use it (analytics)

  • Comply with legal and accounting obligations

5) Legal bases (GDPR)

We process personal data under these legal bases:

  • Contract: to manage your booking and provide the services you requested

  • Legitimate interests: to respond to enquiries, prevent fraud, and improve our Website

  • Legal obligation: for tax/accounting and other required records

  • Consent: where required for non-essential cookies and (in the future) newsletter marketing

6) Cookies and analytics

We use cookies and similar technologies

Google Analytics

We use Google Analytics to understand Website traffic and improve performance. Google may process technical data (such as IP address and device identifiers) to provide analytics.

You can:

  • Adjust your browser settings to block cookies

  • Use browser extensions/tools that limit tracking

If you implement a cookie banner, you can choose to only load analytics after consent.

7) Sharing your data

We only share personal data when necessary to run the Website and deliver services, for example with:

  • Website/hosting and security providers
  • Booking/checkout tools and plugins (WordPress/WooCommerce)
  • Payment providers (e.g., card processor/PayPal/bank transfer handling)
  • Analytics providers (Google Analytics)

We do not sell your personal data.

8) International transfers

Some service providers (such as analytics or payment providers) may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards (such as standard contractual clauses) as required.

9) How long we keep your data

We keep personal data only as long as needed:

  • Enquiries: typically up to 12–24 months (unless you become a guest)

  • Bookings/invoices: as required by Portuguese/EU accounting and tax rules

  • Analytics: according to the retention settings in Google Analytics

10) Your rights (EU/EEA)

If you are in the EU/EEA, you have rights including:

  • Access to your data
  • Correction of inaccurate data
  • Deletion (where applicable)
  • Restriction and objection to processing
  • Data portability
  • Withdraw consent (where processing is based on consent)

To exercise your rights, email info@jholasurfcamp.com.

You also have the right to lodge a complaint with your local data protection authority

11) Security

We take reasonable technical and organizational measures to protect your personal data. No method of transmission or storage is 100% secure, but we work to protect your information.

12) Children

Our services are designed for adults and families. If you believe a child has provided personal data without appropriate consent, contact us and we will address it.

13) Third-party links (WhatsApp, partners, etc.)

The Website may link to third-party services (for example WhatsApp or activity partners). Their privacy practices are governed by their own policies.

14) Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the updated date.

Questions about privacy?

Email us

Questions about privacy?