Privacy policy

Last updated: 1 October 2026

1. Who we are

TheKITECAT Ltd is a company registered in England and Wales (company number 15773913), registered office: 50 North Street, Havant, Hampshire, PO9 1QU, United Kingdom. We organise kitesurfing trips on catamarans. For everything described here we are the "data controller".

Contact for any question about your data: info@thekitecat.com

2. What we collect

  • When you write to us or click "I'm interested": your name, email, phone / WhatsApp number, country, the weeks you are interested in, your message, and the name or code of the person who told you about us.
  • When you book: for each traveller, name, email, phone, sex, age or date of birth, nationality, country of residence, languages, kitesurfing level, sailing experience, weight (to choose the right kite size), diet and allergies, and optionally your Instagram name.
  • When you pay: the amount, date, currency and reference of your payment. Card and bank details are handled by our payment provider; we never see or store your full card number.
  • When you subscribe to our news: your email and name.
  • When you use the site: technical data needed to run it (see section 9).

Diet and allergy information can reveal something about your health. We only ask for it to keep you safe and fed on board, we use it for nothing else, and giving it is optional.

3. Why we ask for your sex

Cabins are shared by two people. We never place a man and a woman who do not know each other in the same cabin, so we need to know each traveller's sex to allocate cabins. It is not used for anything else.

4. What we use your data for, and on what basis

  • To answer your enquiry and to organise your trip (cabins, crew, safety, catering, equipment): this is necessary to prepare and perform our contract with you.
  • To take your payment and keep our accounts: contract, and our legal obligations.
  • To contact you about a week you asked about, or about a waiting list you joined: at your request.
  • To send you our news and offers: only with your consent, which you can withdraw at any time with the link in each email or by writing to us.
  • Diet and allergies: with your consent, given when you fill in the field.
  • To improve our trips and our site, and to keep both secure: our legitimate interest.

We do not sell your data, and we make no automated decision about you.

5. Who can see your data

  • Our team (the founders and the crew of your week), only what they need.
  • The person who referred you. If you came through one of our trip promoters (their link, their code, or because you gave their name), that promoter can see your name, email and phone / WhatsApp number, and whether you have booked, so that they can stay in touch with you. They never see what you paid, your other details, or the people referred by someone else.
  • Companies that provide services to us and act on our instructions: our website host and database, Google (workspace, storage and email), our payment provider Revolut (and Stripe for past payments), and our accounting software.
  • The authorities, where the law requires it (for example port or immigration authorities for a crew list).

Some of these providers store data outside the United Kingdom and the European Economic Area. Where they do, the transfer is covered by the safeguards the law requires (adequacy decisions or standard contractual clauses).

6. How long we keep it

  • Enquiries that did not become a booking: 3 years after our last contact.
  • Bookings, travellers and payments: 6 years after the end of the trip, as required for tax and accounting.
  • Diet and allergies: deleted or anonymised 1 year after your trip.
  • Newsletter: until you unsubscribe.

7. Your rights

You can ask us at any time to: see the data we hold about you, correct it, delete it, limit or object to what we do with it, receive it in a reusable format, or withdraw a consent you gave. Write to info@thekitecat.com; we answer within one month, free of charge. We may ask you to confirm who you are.

If you are not satisfied, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority of the EU country where you live.

8. Children

Bookings are made by adults. A traveller under 18 must be booked by a parent or guardian, who gives us the child's details.

9. Cookies

This site uses only the cookies and local storage that are strictly necessary to make it work (for example to keep your booking in progress). It sets no advertising cookie.

10. Changes

If we change this policy we will update this page and its date. For an important change we will tell the people concerned by email.