splashcy.com


Privacy Policy

Privacy Policy

Last updated: August 14, 2026

1. Who We Are

splashcy.com (“Splashpoint”) operates a water sports booking marketplace connecting customers with activity providers in Cyprus. Our website is splashcy.com.

2. Information We Collect

Account information: Name, email address, and password when you create an account.

Booking information: Date, time, number of people, and payment details when you make a booking. Payment card details are processed securely by Stripe and never stored on our servers.

Usage data: Pages visited, features used, and anonymized analytics to improve our service. We store hashed (anonymized) IP addresses for view analytics — we cannot identify you from this data.

Business information: If you register as a business, we collect your business name, address, phone number, services offered, and Stripe connected account ID for payment processing.

3. How We Use Your Information

  • Process and confirm bookings
  • Send booking confirmations and updates via email
  • Provide activity reviews and recommendations
  • Improve our platform and user experience
  • Send weekly digest emails (you can unsubscribe at any time)

4. Payment Processing

All payments are processed through Stripe. We never see, store, or have access to your full card number. Stripe’s privacy policy applies to payment data: stripe.com/privacy.

5. Data Sharing

We share your booking details (name, email, date/time) with the activity provider you book with so they can fulfil your reservation. We do not sell your personal data to third parties.

6. Cookies

We use essential cookies for login sessions and site functionality. We do not use advertising or tracking cookies.

7. Your Rights (GDPR)

As we operate in the EU (Cyprus), you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Unsubscribe from marketing emails
  • Export your data

To exercise any of these rights, contact us at privacy@splashcy.com.

8. Data Retention

We retain your account data for as long as your account is active. Booking records are kept for 2 years for legal/tax purposes. You can request deletion at any time.

9. Security

We use HTTPS encryption, secure password hashing, and follow WordPress security best practices. Payment data is handled entirely by Stripe’s PCI-compliant infrastructure.

10. Contact

For privacy-related questions: privacy@splashcy.com