Privacy Policy

---

Effective date: 17 September 2026

This policy explains what personal information Cayman eFoil Ltd. collects, why we collect it, who we share it with, how long we keep it and what your rights are. It covers visiting caymanefoil.com, booking with us, signing a waiver, riding or renting with us, and our board service page at efoilcayman.com.

Who we are

Cayman eFoil Ltd. runs eFoil demos, lessons, sessions and rentals in Grand Cayman, Cayman Islands. We are a company registered in the Cayman Islands (company number 399653), and we are the data controller for the information described here.

• Email: admin@caymanefoil.com
• Phone and WhatsApp: +1 345 926 9933

What we collect and why

Bookings. Online bookings go through Calendly. We collect your name, email address and phone number, the session you chose and your answers to our booking questions, such as swimming ability and group size. If someone books for you, such as a concierge or a friend, we get your details from them. We use this to take and manage your booking.

Waivers. Every rider signs a liability release through SmartWaiver before riding. It records your name, date of birth, email address, phone number, an emergency contact, your signature and your answers to two questions, one about marketing emails and one about photos and video. When you arrive we check you in on SmartWaiver, which records the time. Our marine insurance requires a signed release from every rider.

Riders under 18. A parent or guardian completes and signs the waiver for a rider under 18 and answers the email and photo questions for them.

Health and safety. Before a session we ask about injuries, medical conditions or physical limitations, and we may note your riding ability. This is sensitive personal data under the Data Protection Act. We use it only to keep you and others safe.

Messages. We use WhatsApp Business and email to confirm bookings, share meeting points, send weather updates and payment links, and follow up after your session. We keep short notes about your bookings, preferences and any safety concerns so we can look after you next time.

Payments. Card payments are made through a TrekkSoft payment link and processed by Payyo, so we receive your name, what you bought, the amount and the payment date. We also accept cash. If you pay in cryptocurrency, the payment is recorded on a public blockchain.

Rentals. Our insurance requires every renter to complete a demo with us first and to give us a signed rental agreement, photo ID, a card deposit, proof of riding experience (which can include rides logged in the EASI™ app) and a declaration about past insurance claims, licences and criminal record. We use this only to decide whether we can rent to you.

Photos and video. We film sessions on phones and a drone and post the best clips on our website and social media (Instagram, Facebook, TikTok and YouTube), sometimes tagging you. Your waiver asks whether we may use photos and video of you, and the answer is set to Yes unless you change it. If you would rather we did not use footage of you, choose No or tell us at any time, and we will stop using footage of you and take down posts on our own accounts that feature you. We may also use software, including AI tools, to sort our footage and work out which session it is from.

Marketing emails. Your waiver also asks whether you would like to hear from us, and that answer is set to Yes unless you change it. We only send marketing emails to people who said Yes. To stop them, reply to any of our emails or email admin@caymanefoil.com. Booking through Calendly does not sign you up.

Board service page (efoilcayman.com). If we store or repair your board, you can follow its progress on a private page. For that page we hold your name, your WhatsApp number, your board details, the job status, dates, price and payment status, our updates and the photos we choose to show you. You sign in with a PIN, and signing in sets a cookie that lasts 30 days.

Why we are allowed to use it. We use your information to provide what you book, to meet the conditions of our insurance and to run and promote our business. Where we rely on your agreement, such as for marketing emails, photos and video, or website cookies, you can withdraw it at any time.

Website, cookies and advertising

Our website is hosted by GoDaddy. When you visit, the site and the services built into it may collect technical information such as your IP address, browser and device. The cookie banner lets you Accept or Decline. Until you accept, the site tells Google not to use analytics or advertising cookies.

• Google Analytics shows us how many people visit, which pages they read, how they found us and when they click through to book. We keep event data for 2 months and user data for 14 months. Google Signals is switched off.
• Google Ads. We advertise on Google, and booking clicks measured in Google Analytics are shared with our Google Ads account so we can see which ads work. Ad personalisation is switched off on that link.
• Google Search Console gives us search totals, such as how often our pages appear in Google. It does not identify you.
• Videos and fonts from Vimeo, YouTube and Google Fonts may collect technical information when they load.
• Other sites we link to, such as Calendly, SmartWaiver, WhatsApp, Google Maps, social media and EASI™, have their own privacy policies.

To opt out, choose Decline on the cookie banner, block or delete cookies in your browser, install Google's opt-out add-on at https://tools.google.com/dlpage/gaoptout, or manage the ads Google shows you at https://myadcenter.google.com.

How we use Google data

Our Google Cloud project, Cayman eFoil Dashboard, reads and manages our own business Google Ads, Google Analytics and Google Search Console accounts. It connects through a service account that we added to those accounts. Nobody signs in with their Google account through it, and it never accesses any visitor's or customer's Google account.

• What it accesses: our advertising results (spend, clicks, campaigns and the searches our ads appeared on), our website visit totals and our Google search results. These are totals and do not identify you.
• How we use it: to report results to us, alert us to problems, research keywords, and make changes to our own accounts, such as pausing a campaign, setting a budget or resubmitting our sitemap.
• Storage and retention: a summary is kept on our own computer and in our Google Drive and replaced every hour. Alerts sent to our own phone are kept for up to 45 days.
• Sharing: we do not sell it. It is shared only with the service providers that run our own business tools.
• Protection: the key our software uses is kept on our own computer, outside our shared business records, and only people we authorise can access our Google accounts.
• Limited Use: our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Who we share information with

We do not sell your personal information. We share it only where needed to run the business:

• our instructors and staff, to deliver your session
• service providers that handle it for us: Calendly (bookings), SmartWaiver (waivers), TrekkSoft and Payyo (payments), WhatsApp (messages), GoDaddy (website), Google (email, calendar, storage, analytics and advertising), Microsoft (email), Cloudflare (board service page), and the cloud storage, backup and AI assistant tools we use to run the business
• social media platforms, when we post photos and video
• our marine insurer and its underwriters, who can ask to see waivers and rental records
• authorities, where the law requires it

Most of these providers are based outside the Cayman Islands, mainly in the United States and Europe, so your information may be stored and processed there.

How long we keep it

We keep personal information only as long as we need it for the purposes above, or as the law or our insurance requires. In particular:

• waivers, including your email and photo answers: at least 6 years, as our insurance requires
• rental agreements: at least 6 years, as our insurance requires
• Google Analytics: event data 2 months, user data 14 months
• board service page sign-in: the cookie lasts 30 days, and records of wrong PIN attempts are deleted after a day

Your rights

Under the Cayman Islands Data Protection Act, you can:

• ask whether we hold information about you and get a copy of it
• ask us to correct information that is wrong
• tell us to stop using your information, or to stop using it for a particular purpose
• tell us to stop sending you marketing at any time
• withdraw your consent for photos, video or emails at any time
• ask that no decision significantly affecting you is made only by automated means (we do not make decisions like that)
• claim compensation if you suffer damage because we break the Act
• complain to the Ombudsman

To use your rights, email admin@caymanefoil.com or send a WhatsApp message to +1 345 926 9933. Please make your request in writing. We may ask you to confirm who you are. We do not charge for this. We will send you a copy of your information within 30 days, and act on a request to stop using your information within 21 days. If we need to keep using it, for example to meet a legal obligation, we will tell you why.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can put it right. You can also complain to the Office of the Ombudsman, which oversees data protection in the Cayman Islands:

• Email: info@ombudsman.ky
• Phone: +1 345 946 6283
• Post: PO Box 2252, Grand Cayman KY1-1107, Cayman Islands
• Website: https://ombudsman.ky

Changes to this policy

We may update this policy. When we do, we will post the new version here and change the effective date. If we start using your information for a new purpose, we will tell you first.