Privacy Policy

Last updated: May 29, 2026

SurfPostings ("we," "us") operates a zero-commission marketplace that connects people listing surf properties with people looking for them. This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the choices and rights you have. By using SurfPostings you agree to the practices described here.

1. Information You Provide to Us

We collect information you give us directly, including:

• Account information — your username, name, email address, and (if you provide one) phone number.
• Listing information — the property details, descriptions, photos, videos, location, and the contact details you choose to attach to a listing.
• Inquiries and messages — when you contact a lister or our team, the content of your message and the contact details you provide.
• Reports — if you report a listing, the reason and any details you submit.
• Saved preferences — listings and surf breaks you save, and your searches and filters, which help us personalize and show you relevant results.

We do not currently process payments on the platform; buyers and listers transact directly with one another, so we do not collect payment-card information.

2. Technical and Usage Information (Including IP Addresses)

When you use SurfPostings, we automatically collect certain technical information, including your IP address, browser and device type, and the pages and actions you take on the site (server access logs). We specifically record the IP address and related technical details when you submit a contact inquiry, report a listing, or create or sign in to an account.

We use this technical information to:

• operate, secure, and debug the service;
• detect, prevent, and investigate fraud, spam, and abuse, and to enforce rate limits;
• enforce our Terms of Service and content guidelines; and
• keep records required for safety and legal compliance (see Section 4).

For users in the European Economic Area and the United Kingdom, our legal basis for processing this technical information is our legitimate interest in keeping the platform secure and preventing abuse.

3. How We Use Your Information

• Provide, maintain, personalize, and improve the service.
• Connect you with listers or buyers when you choose to make or receive an inquiry.
• Send required service messages — for example, account verification, password resets, and inquiry notifications — through our third-party email provider.
• With your opt-in consent, send optional marketing communications such as newsletters and new-listing updates. These are optional and you can withdraw consent or unsubscribe at any time; the service messages above are required to use your account.
• Respond to your questions and provide support.
• Maintain the security and integrity of the platform, as described above.

4. Content Reports, Moderation, and Legal Preservation

To keep the marketplace safe, we review listings and may hold, remove, or quarantine content that violates our guidelines or the law. When this happens, we retain associated records — including the submitter's account details, IP address, and the content itself — as evidence for moderation, dispute resolution, and to comply with our legal obligations.

Where content involves suspected child sexual abuse material (CSAM) or other illegal material, we preserve the content and associated records and report it to the National Center for Missing & Exploited Children (NCMEC) and/or law enforcement as required by law (including 18 U.S.C. § 2258A). For this category of content, applicable preservation-and-reporting obligations override any request to delete it.

5. How We Share Information

We do not sell or rent your personal information. We share it only as follows:

• With the listing party you contact. When you choose to send an inquiry, we share your message and the contact details you provide with that lister so they can respond.
• With service providers who process information on our behalf — for example, hosting, email delivery, image and media storage, search, maps and location lookup, and translation — under agreements that limit their use of it.
• Maps and location. When you create a listing, we use a third-party mapping provider to look up and display the property's location.
• Translation. When you view a listing in a language other than the one it was written in, we send that content to a third-party translation provider to display it in your language.
• For legal and safety reasons — with NCMEC, law enforcement, or other authorities where required by law or to protect the rights, safety, and security of our users, the public, or SurfPostings.

6. Data Retention

We keep personal information for as long as needed to provide the service and for the purposes described in this policy, and then delete or anonymize it. Records retained for safety, dispute, or legal-compliance reasons (Section 4) are kept for as long as required by applicable law.

7. Data Security

We use appropriate technical and organizational measures — including encryption in transit, access controls, and rate limiting — to protect your information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on where you live (including the EEA, the United Kingdom, and California), you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and — for California residents — to opt out of the "sale" or "sharing" of personal information (we do not sell or share personal information for cross-context behavioral advertising). To exercise these rights, contact us at the address below. These rights are subject to limits where we are required or permitted by law to retain information, including the safety and legal-preservation purposes in Section 4.

9. Cookies

We use only essential cookies needed to run the site — for example, to keep you signed in, to protect against cross-site request forgery, and to remember your language preference. We do not use third-party advertising or cross-site tracking cookies. You can control cookies through your browser settings, though disabling essential cookies may affect how the site works.

10. International Users

SurfPostings is operated from the United States, and information we collect may be processed and stored in the United States and other countries, which may have data-protection laws different from those in your country.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above, and significant changes will be communicated as required by law.

12. Contact Us

If you have any questions about this Privacy Policy or your personal information, contact us at privacy@surfpostings.com.