Privacy Notice
Last updated: October 28, 2026
Who we are
This notice explains how Surfskin LLC ("Surfskin", "we") collects and uses personal information through www.surfskin.surf, our emails and our social channels. Surfskin LLC is the controller of that information.
Surfskin LLC
447 Broadway, 2nd Floor #1269
New York, NY 10013, USA
Email: tom@surfskin.net
To ask a question or exercise any of your rights, email us at the address above. We reply within one month, or within 45 days where US state law sets that period.
What we collect and why
We collect only what we need to run the site and send the emails you ask for. We don't collect payment details, and we don't use your information for automated decisions about you.
| What | When | Why | Legal basis (UK/EU) |
|---|---|---|---|
| Email address and, if you give it, first name | When you join our list | To send launch news and offers | Your consent |
| Record of your sign-up: the wording you agreed to, date and time, page, and your approximate location (country, region and city) | When you join our list | To prove consent and apply the right rules for where you are | Legal obligation and our legitimate interest in showing compliance |
| Approximate location (country, region and city), worked out from your IP address | When a page loads | To show the right cookie and sign-up choices for where you are. We don't store it unless you sign up | Our legitimate interest in following local law |
| Whether you open our emails and click their links | When you read our emails | To see what's useful and keep our list healthy | Your consent (part of signing up) |
| Pages viewed and general device and browser information, through Google Analytics | Only if you accept analytics cookies | To understand, in aggregate, how the site is used | Your consent |
| Your cookie choice | When you choose in the banner | To remember your choice | Necessary to provide the site |
| What you send us | When you email us | To reply | Our legitimate interest in answering you |
We don't knowingly collect sensitive information, and we never collect your precise location.
Cookies and similar technologies
We use one optional category of cookies, analytics, and it stays off unless you accept it. You can change your choice at any time with the "Manage preferences" link in the cookie banner.
| Name | Provider | Purpose | Category | Lasts |
|---|---|---|---|---|
| cc_consent (browser storage) | Surfskin, via our consent tool | Remembers your cookie choice | Strictly necessary | 180 days |
| _ga, _ga_3F1HZC2LVM | Google Analytics | Counts visits and pages viewed, in aggregate | Analytics (optional) | Up to 2 years in your browser |
Where you are matters. If you visit from the UK, the EU or EEA, Switzerland or California, or we can't tell where you are, analytics stays off until you click "Accept all". Elsewhere it's on by default, and you can turn it off in "Manage preferences".
Browser signals. We treat a Do Not Track signal as a "no" to analytics. We also honor Global Privacy Control as an opt-out of any sale or sharing of personal information, though we don't do either.
We've switched off Google's advertising features (Google Signals and ad personalization) for this site. We use no advertising or social-media pixels.
Who we share it with, where it goes, and how long we keep it
We share personal information only with the service providers below, who process it on our behalf under contract. They may not use it for their own purposes.
| Provider | What they do for us |
|---|---|
| Framer B.V. | Hosts this website |
| Klaviyo, Inc. | Stores our mailing list and sends our emails |
| Google LLC | Website analytics (only with your consent); email and documents for our business |
| Cloudflare, Inc. | Works out your approximate location when a page loads; stores nothing |
| The Plugins Company (Consentful) | Runs our cookie banner; your choice stays in your own browser |
We may also disclose information if the law requires it, or to protect our rights. If Surfskin is sold or merged, information may transfer to the new owner under this notice.
International transfers. Surfskin is based in the United States, and our providers process data in the US and elsewhere. For people in the UK, EU and Switzerland, we rely on safeguards the law recognizes: the EU-US Data Privacy Framework and its UK and Swiss extensions where a provider is certified, or standard contractual clauses (with the UK Addendum) where it isn't.
How long we keep it.
- Mailing list: until you unsubscribe. We then keep only your email address on a suppression list, so we never email you again by mistake.
- Sign-up records: for as long as you're subscribed, plus 3 years, to show you agreed.
- Analytics: Google keeps it for 2 months.
- Emails you send us: as long as needed to deal with your message.
Your rights
You can unsubscribe from our emails at any time, using the link at the bottom of every email or by writing to us. Wherever you live, we'll also honor requests to see, correct or delete your information.
UK, EU and Switzerland. You have the right to access your personal data, and to have it corrected, deleted or limited. You can also object to how we use it, and receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time; that doesn't affect what we did before. You can also complain to your data protection authority. In the UK that's the Information Commissioner's Office (ico.org.uk); in the EU, the authority where you live or work.
US states. Residents of California and of other states with privacy laws can ask what personal information we hold, and ask us to correct or delete it. Under California law, you can also request a copy of it. If we turn down your request, you can appeal by replying to our decision, and we'll answer within the time the law sets. We won't treat you differently for using any of these rights.
No sale or sharing. We don't sell personal information, and we don't share it for cross-context behavioral (targeted) advertising. We haven't done either in the past 12 months.
Verifying requests. We may confirm a request comes from you, for example by replying to the email address we hold. An authorized agent can make a request for you with your signed permission.
Children
Our site and emails are for adults. We don't knowingly collect information from anyone under 16. If you think a child has signed up, tell us and we'll delete their details.
Security
We use reputable providers and limit access to our list to the people who need it. No system is perfectly secure, so we'll tell you, and the authorities, if a breach affects you and the law requires it.
Changes to this notice
When we change this notice, we'll update the date at the top. If a change materially affects how we use your information, we'll tell subscribers by email first.