YOUR INFORMATION
Privacy notice.
Who is responsible
Escondido Surf - Puerto Escondido is responsible for the personal data collected through this website. Our address is Alejandro Cárdenas Peralta, Brisas de Zicatela, 70934 Brisas de Zicatela, Oax., Mexico. The school owner handles privacy requests at pxm@escondido.surf.
Information we collect
For bookings, we collect your name, email, chosen service, dates, number of participants, surf experience and language. Your phone number and booking notes are optional. We also keep the booking reference, booking changes, payment status, amount and payment-provider references. Please do not put card details, identity documents or sensitive health information in the notes field. If you book for someone else, share this notice with them and provide only the information needed for that booking.
How we use your information
We use booking information to arrange classes, manage availability and payments, send confirmations and service updates, respond to questions, handle rescheduling and keep track of paid class credits without expiry. We also use necessary transaction and technical records to prevent misuse, resolve disputes and meet applicable obligations. The hosting service processes connection information, including IP addresses; the website uses derived IP identifiers to limit abusive requests. Booking does not subscribe you to advertising or a mailing list.
Surf camp waitlist
Joining the waitlist is optional and requires separate consent. We collect your name, email and language, plus your travel month and surf level if you provide them. We record the consent version and date to manage your interest and contact you about future camps. Joining creates no booking or payment and sends no automatic welcome email. Entries expire 365 days after signup and are deleted the next time the list is accessed or updated. You can withdraw consent or ask for earlier removal by emailing pxm@escondido.surf; this does not affect a class booking.
Who receives information
Authorized school staff and technical support acting for the school can access information needed for their work. Railway hosts the website and stored records; Resend sends booking emails; Stripe processes payments and receives the booking reference, amount and contact information needed for checkout. Card details are entered directly with Stripe and are not stored in this website's booking database. These services may process data outside Mexico. Each also handles its own security and legal responsibilities. We do not sell your personal information or share it with advertisers. We may disclose information where required by law or necessary to protect a legal right.
How long information is kept
Booking records are kept while needed to provide the service, resolve a payment or claim, or honor an unused paid class credit. Because those credits do not expire, the minimum information needed to identify and redeem a credit may be kept until it is used or otherwise resolved with you. Other records are reviewed for deletion or removal of identifying details when their purpose ends, subject to applicable accounting, tax and legal obligations. This is a staff-managed process; booking records do not all disappear on an automatic expiry date. Restricted backup copies are handled as part of the same review, and approved removals must be reapplied before an older backup is returned to use.
Your choices and privacy rights
You may request access, correction, cancellation or deletion, or object to use of your personal data (ARCO rights). You may also withdraw consent or ask us to limit use or disclosure. Email pxm@escondido.surf with your name, a reply address, the request and any booking reference that helps locate it. For a correction, explain what should change. We will arrange proportionate identity or representative verification before disclosing or changing records; do not send an identity document until we explain what is needed and how to provide it securely. We communicate the decision within 20 business days and, if approved, carry it out within the following 15 business days, subject to justified extensions allowed by law. If some records must be retained, we explain the reason and scope. Removing details essential to an active booking or credit may affect our ability to provide it; we will discuss that with you before taking action.
Cookies and external services
The website uses a language-preference cookie and essential staff sign-in cookies. It does not use advertising cookies or visitor analytics trackers. You can clear or block cookies in your browser; this may reset your language or prevent staff sign-in. Following a WhatsApp, Google Maps or other external link takes you to that service, whose privacy practices apply there.
Updates to this notice
This notice was updated on 27 October 2026. We publish changes on this page with the new date. If a new purpose requires your consent, we request it before using your information for that purpose. Contact pxm@escondido.surf for a copy or questions.