GETSURF PRIVACY POLICY

1. Introduction

This Privacy Policy explains how EVILTEC LLC, a Wyoming limited liability company operating GetSurf (“GetSurf,” “we,” “our,” or “us”), collects, uses, stores, shares, and otherwise processes personal information when individuals access or use the GetSurf website, platform, applications, services, features, and related functionality (collectively, the “Platform”).

GetSurf is a discovery and lead-generation platform that helps people seeking surf instruction connect with independent surf instructors. GetSurf does not itself provide surf lessons and is not a party to agreements made directly between Customers and Instructors.

This Privacy Policy applies to Customers, Instructors, website visitors, account holders, prospective users, support contacts, and other individuals whose personal information is processed in connection with the Platform.

By using the Platform, you acknowledge that your personal information may be processed as described in this Privacy Policy. Where consent is required by applicable law, we will request it separately.

2. Controller and Contact Information

The entity responsible for the processing described in this Privacy Policy is:

EVILTEC LLC

Wyoming, United States

Operating the GetSurf Platform

Website: https://get-surf.com

Privacy and support email: [email protected]

Depending on your location and the relevant processing activity, EVILTEC LLC generally acts as the data controller or business responsible for deciding why and how personal information is processed.

Independent Instructors may separately act as controllers or businesses for personal information they receive from Customers after a Lead is delivered. Their own processing is governed by their legal obligations and privacy practices, not solely by this Privacy Policy.

3. Scope of This Privacy Policy

This Privacy Policy covers personal information processed through:

• the GetSurf website and account areas;

• Customer inquiry and Lead forms;

• Instructor registration, onboarding, and profiles;

• email-and-password login;

• Google account login;

• Credit purchases and related Stripe payment processing;

• WhatsApp, email, telephone, and support communications connected with the Platform;

• cookies, pixels, analytics, measurement, and similar technologies;

• Platform security, fraud prevention, system administration, and customer support; and

• related services that link to this Privacy Policy.

This Privacy Policy does not govern the independent practices of surf Instructors, Google, Meta, Stripe, WhatsApp, Hostinger, internet service providers, or other third parties that operate under their own privacy policies.

4. Categories of Individuals

We may process personal information concerning:

• Customers seeking surf instruction;

• Instructors and prospective Instructors;

• individuals acting for surf schools or businesses;

• visitors to the GetSurf website;

• account holders using email/password or Google login;

• individuals contacting customer support;

• persons identified in reports, reviews, disputes, or fraud investigations; and

• authorized representatives exercising privacy rights.

5. Information You Provide Directly

5.1 Account and Identity Information

When you create or manage an account, we may collect:

• name;

• email address;

• telephone number;

• WhatsApp number;

• profile photograph;

• account type, such as Customer or Instructor;

• login credentials, where email-and-password login is used;

• Google account identifiers and basic profile information, where Google login is used; and

• account settings, preferences, and verification status.

Passwords are intended to be stored in protected, non-plain-text form. We do not receive your Google password when you use Google login.

5.2 Customer Inquiry and Lead Information

When a Customer requests surf instruction, we may collect:

• first and last name or display name;

• email address;

• telephone or WhatsApp number;

• preferred surf location or beach;

• requested lesson date and time;

• surf experience level;

• lesson type;

• number of participants;

• language preferences;

• age-related information where relevant;

• messages, notes, and additional information voluntarily provided; and

• technical and verification information associated with the submission.

A Customer should not provide medical information or other highly sensitive information through a general inquiry form unless it is reasonably necessary and the Customer intends to share it with a selected Instructor.

5.3 Instructor Information

When an Instructor creates a profile, applies for access, purchases Credits, or uses the Platform, we may collect:

• legal name and public display name;

• business or surf-school name;

• email, telephone, and WhatsApp details;

• profile image and other profile photographs;

• teaching experience;

• surf locations or beaches served;

• languages spoken;

• licenses, qualifications, certifications, and insurance information, where submitted;

• service descriptions, equipment information, availability, and pricing indications;

• account approval, verification, suspension, and compliance records;

• Credit balance and transaction records;

• Lead unlock and response activity; and

• communications with GetSurf and Customers.

5.4 Communications and Support Information

When you contact us, we may collect the content of your message, email address, contact details, screenshots, attachments, support history, and other information needed to investigate or respond.

If communications occur through WhatsApp, email, or telephone, the relevant third-party provider may process additional metadata under its own privacy terms.

5.5 Reviews, Ratings, and Reports

We may collect information submitted in reviews, ratings, complaints, incident reports, fraud reports, intellectual-property notices, safety reports, and disputes. This may include the identity of the reporting person, the subject of the report, supporting evidence, and investigation notes.

6. Information Collected Automatically

When you access or use the Platform, we and our service providers may automatically collect information such as:

• IP address;

• device type, model, and operating system;

• browser type and version;

• language and time-zone settings;

• device identifiers and advertising identifiers, where available;

• approximate location derived from IP address;

• referring and exit pages;

• pages viewed and features used;

• timestamps and session duration;

• clicks, navigation paths, and interaction events;

• account login and authentication events;

• cookie, pixel, tag, and similar identifiers;

• error logs, performance data, and diagnostic information;

• network information and security signals; and

• fraud, bot, abuse, and risk indicators.

7. Information from Third Parties

We may receive personal information from third parties, including:

• Google, when you choose Google login;

• Stripe, in connection with payment status, transaction identifiers, billing details, fraud signals, disputes, and refunds;

• Google Analytics and Google Tag Manager, in connection with analytics and measurement;

• Meta, in connection with Meta Pixel measurement, attribution, and advertising activity;

• Google Search Console, regarding aggregated website performance and search visibility;

• Hostinger and technical infrastructure providers, regarding hosting logs, security events, and system performance;

• WhatsApp or related technical providers, where number validation or communication links are used;

• payment institutions, banks, and card networks in connection with payment disputes; and

• other Users who submit reviews, reports, communications, or information concerning you.

8. Sensitive Personal Information

GetSurf is not designed to collect highly sensitive information such as government identification numbers, precise financial account credentials, medical records, biometric templates, political opinions, religious beliefs, or sexual-orientation information.

Where sensitive information is voluntarily provided in a support, safety, discrimination, or legal context, we process it only as reasonably necessary and where permitted by law.

9. Information About Minors

The Platform is not directed to children under thirteen (13). We do not knowingly permit children under thirteen to create accounts or submit independent requests.

A minor who has reached the minimum age permitted under applicable law but has not reached the age of legal majority should use the Platform only with the involvement and consent of a parent or legal guardian.

Where a parent or guardian arranges a lesson involving a minor, the adult should provide the adult’s own contact information and only the minimum information about the minor reasonably necessary to arrange the service.

If we learn that we collected personal information from a child in violation of applicable law, we may delete or restrict the information and close the relevant account.

10. Accuracy of Information

Users are responsible for ensuring that personal information submitted to GetSurf is accurate, complete, current, and not misleading. Users should promptly update account information when it changes.

Providing false or misleading information may affect Lead quality, account security, payment processing, Platform access, or another User’s ability to communicate.

END OF PART 1