Privacy policy

This policy explains how Swell Portugal ("we") processes personal data when you use our website and Trip Builder.

Controller

Swell Portugal. Contact: hello@swellportugal.com

Data we collect

• Identity & contact: name, email, optional phone.
• Trip brief: level, region preference, dates, group, budget, accommodation, notes.
• Attribution: referrer URL and UTM parameters when present.
• Technical: standard server logs from hosting (e.g. Vercel) may include IP and user agent.

Purposes & legal bases (GDPR)

• Respond to your request: performance of steps prior to a contract and legitimate interests in operating a surf-trip planning service.
• Improve the product: legitimate interests in analytics and conversion diagnostics (aggregated where possible).
• Founders' waitlist / pre-launch updates: consent (opt-in where required; you can unsubscribe any time).

Processors

We use reputable processors such as Vercel (hosting), Supabase (database), and optionally Resend (transactional email). Subprocessors may be located outside the EEA, in which case we rely on appropriate safeguards (e.g. Standard Contractual Clauses) where applicable.

Retention

We retain lead data for as long as needed to fulfil your request and manage our business, typically up to 24 months unless a longer period is required by law. You may request deletion earlier (see Your rights below).

Your rights

Depending on jurisdiction, you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability. Contact us at the email above. You may also lodge a complaint with your local supervisory authority (in Portugal: CNPD).

Cookies

We minimise cookies. Analytics may use privacy-friendly, aggregated metrics via our hosting provider. See provider documentation for details.