Privacy Policy
Effective date: | Last updated:
1. What this policy covers
This Privacy Policy describes how Strictly Surf collects, uses, shares, and protects information about you when you use the Strictly Surf website and services, including the Brand Hub, Official Shop, and Community Marketplace.
2. Information we collect
- Account information (name, email, profile fields you provide).
- Order, listing, message, and shipping information you submit.
- Payment metadata processed by Stripe (we do not store card numbers).
- Device, log, and usage data necessary to operate the service.
- Analytics data through Google Analytics 4, only when you have granted analytics consent via the cookie banner.
3. How we use information
We use information to operate, secure, and improve the service; communicate with you about transactions, support, and service updates; detect and prevent fraud and abuse; and comply with legal obligations. We do not sell personal information to third parties.
4. Cookies & analytics
Essential cookies (authentication, security, consent state) are always on. Analytics and advertising cookies are off by default and only activate after you accept them via the cookie banner. You can change your choice anytime via the “Cookie preferences” link in the footer.
We use Google Analytics 4 with IP anonymization and Consent Mode v2. No analytics data is collected before you grant consent.
5. International transfers (GDPR, UK GDPR, EEA) — FR-024a
Strictly Surf is established in the United States. If you are located in the European Economic Area, the United Kingdom, or Switzerland, the personal information you provide may be transferred to and processed in the United States. Where such transfers occur, we rely on the European Commission's Standard Contractual Clauses (SCCs, 2021/914) and equivalent UK International Data Transfer Addenda to provide an adequate level of protection.
You have the right under the GDPR / UK GDPR to access, correct, port, and erase your personal data, to object to or restrict processing, and to lodge a complaint with your local supervisory authority. To exercise these rights, contact us using the information below.
6. California privacy rights (CCPA / CPRA)
California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the “sale” or “sharing” of personal information. Strictly Surf does not sell personal information for monetary value; if our practices change, we will provide a clear opt-out link. To exercise your California privacy rights or make a “Do Not Sell or Share” request, contact us using the link below.
7. Retention & security
We retain personal information only as long as needed for the purposes described in this policy, and apply industry-standard administrative, technical, and physical safeguards to protect it.
8. Children's privacy
The service is not directed to children under 13 (or under 16 in the EEA / UK). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.
9. Contact
Strictly Surf — Privacy
575 Montauk Highway, Amagansett, NY 11930