Who We Are
PaddleBoardShop operates the website paddleboardshop.com (the "Site"). For the purposes of applicable privacy laws, PaddleBoardShop acts as the data controller for personal information collected through the Site. If you have questions about this policy, contact us at privacy@paddleboardshop.com.
Data We Collect & Why
2.1 Data Collected Automatically
When you visit the Site, our servers and third-party analytics tools may automatically log:
- IP address — used to infer approximate geographic region (country / state) for analytics aggregation and server-side fraud prevention; never sold or used for targeted advertising.
- Browser & device type — used to optimise page rendering.
- Referring URL & pages visited — used to understand which content is most useful.
- Date & time of visit — used to measure traffic patterns.
2.2 Data You Provide Voluntarily
- Email address — if you subscribe to our newsletter or submit a contact form. We will not share your e-mail with third parties for their own marketing purposes.
- Comments / feedback — if you submit feedback via an on-site form.
2.3 Data from Affiliate Networks (Third-Party Sources)
When you click an affiliate link and complete a purchase on a third-party retailer's site, that retailer's affiliate network will share aggregated, anonymised conversion data with us (e.g., that a commission was earned). We do not receive your name, credit-card details, shipping address, or any personally identifiable information from retailer transactions.
Your Data Rights
Depending on where you reside, you may have the following rights regarding your personal information. We honour these rights for all users globally, not just residents of specific jurisdictions.
✅ Right to Access
Request a copy of the personal data we hold about you in a portable, machine-readable format.
✏️ Right to Correction
Ask us to correct inaccurate or incomplete personal data we hold about you.
🗑️ Right to Deletion
Request that we delete your personal data (also known as the 'right to be forgotten'). We will honour this request unless we have a legal obligation to retain the data.
🚫 Right to Opt Out of Sale
We do not sell your personal data. If this policy changes, we will notify you and provide a clear opt-out mechanism before any sale occurs.
⚙️ Right to Restrict Processing
Request that we limit how we process your data while a correction or deletion request is pending verification.
📦 Right to Data Portability
Receive your data in a structured, commonly used format (e.g., CSV or JSON) to transfer to another service provider.
To exercise any of these rights, email privacy@paddleboardshop.com with the subject line "Privacy Rights Request." We will respond within 45 days (the maximum required by CCPA and most US state laws). GDPR-subject requests receive a response within 30 days.
California residents (CCPA / CPRA): You have the right to know, delete, correct, and opt out of the sale and sharing of personal information. You also have the right to limit use of sensitive personal information. PaddleBoardShop does not sell or share personal information as defined by the California Consumer Privacy Act.
EEA / UK residents (GDPR / UK GDPR): Our legal basis for processing is legitimate interests (analytics, fraud prevention) and consent (optional cookies). You have the right to lodge a complaint with your local Data Protection Authority.
Other US state residents: We honour equivalent rights under the Virginia CDPA, Colorado CPA, Connecticut CTDPA, Texas TDPSA, and other 2026-effective state privacy statutes.
How We Protect Your Data
We implement industry-standard technical and organisational measures to protect your data, including:
- TLS 1.3 encryption for all data in transit (HTTPS-only).
- Access controls limiting data access to authorised personnel.
- Regular security reviews of third-party service providers.
- Minimal data retention — server logs are purged after 90 days.
While no internet transmission is 100 % secure, we use commercially reasonable measures consistent with applicable law. In the event of a data breach affecting your rights and freedoms, we will notify you within the timeframes required by applicable law (72 hours under GDPR; "expedient" under most US state laws).
Children's Privacy
This Site is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information to us, contact us immediately at privacy@paddleboardshop.com and we will delete it promptly.
Policy Updates
We may update this Privacy & Cookie Policy from time to time to reflect changes in law, our data practices, or our service offerings. We will post the updated policy on this page with a revised "Last updated" date. For material changes, we will also provide a notice in a prominent location on the Site or via email (for newsletter subscribers) at least 30 days before the change takes effect.
Contact Us
For any privacy-related questions, data rights requests, or concerns, please reach us at:
PaddleBoardShop is operated as an online publication. We aim to respond to all privacy-related correspondence within 5 business days.