Privacy Policy

Last updated: February 10, 2026

This Privacy Policy explains how Competitive Wake Surf Association, Inc. ("CWSA", "we", "us", and "our") collects, uses, discloses, and protects information across our websites, portals, events, and related services, including the CWSA marketing site, membership portal, board portal, event organizer portal, national organization portal, and related API services (collectively, the "Services").

1. Scope

This policy applies to information we collect when you visit our sites, create or use an account, register for memberships, events, seminars, or programs, submit forms, receive communications, or otherwise interact with CWSA Services.

2. Information We Collect

Depending on how you use our Services, we may collect:

• Account and profile information: name, email, phone, username, password hash, country, region, demographic details, athlete details, and account preferences.
• Membership and registration information: membership level, application details, event and seminar registrations, status history, waivers, and related submission data.
• Competition and ranking data: divisions, event entries, scores, rankings, basepoints, transfer history, and related competition records.
• Transaction and billing data: invoice records, payment status, and limited payment metadata. Card numbers are processed by our payment providers (for example, Stripe) and are not fully stored by CWSA systems.
• Communications: contact form submissions, support messages, subscription status, and notices sent through our notification systems.
• Technical and usage data: IP address, device/browser details, session data, page views, referrers, logs, and analytics data collected through cookies or similar technologies.

3. How We Use Information

We use information to:

• Provide, operate, and improve CWSA Services.
• Authenticate users and secure accounts.
• Process memberships, registrations, invoices, refunds, and related workflows.
• Administer rankings, event scoring, and competition operations.
• Send transactional messages, support replies, and service announcements.
• Send newsletters or marketing communications when permitted.
• Detect abuse, enforce policies, and protect platform integrity.
• Comply with legal obligations and maintain business records.

4. Legal Basis and Consent

Where applicable, we process information under at least one legal basis, including performance of a contract, legitimate interests, consent, and compliance with legal obligations. You may withdraw consent for optional communications at any time, including by using unsubscribe controls where provided.

5. How We Share Information

We may share information with:

• Service providers supporting hosting, analytics, email delivery, payments, and infrastructure operations.
• Event and organizational stakeholders when necessary to administer memberships, events, judging, rankings, sanctions, or official competition workflows.
• Legal and regulatory recipients when required by law, subpoena, court order, or to protect rights, safety, and platform security.
• Business transfer contexts in connection with merger, financing, acquisition, or asset transfer, where permitted.

We do not sell personal information for money.

6. Cookies and Analytics

We use cookies and similar technologies for session management, authentication, performance, analytics, and user experience improvements. You can control cookies through browser settings, but some functionality may be limited if cookies are disabled.

7. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this policy, including to maintain competition and membership records, resolve disputes, enforce agreements, and comply with legal, tax, accounting, or reporting requirements.

8. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

9. Your Choices and Rights

Depending on your location and applicable law, you may have rights to:

• Access, correct, or update personal information.
• Request deletion of personal information, subject to legal and operational exceptions.
• Object to or restrict certain processing.
• Opt out of marketing communications.

To submit a request, please contact us at info@thecwsa.org or through the contact page.

10. Children

CWSA supports youth participation in competition contexts, but account and data processing may involve parent, guardian, coach, or organizer workflows depending on age and role. If you believe personal information was submitted inappropriately, contact us and we will review and address the request.

11. Third-Party Content and Links

Our Services may contain links to third-party sites, streams, maps, payment pages, or social platforms. Their privacy practices are governed by their own policies, not this Privacy Policy.

12. International Use

CWSA operates with participants and organizations in multiple countries. Information may be processed in jurisdictions where data protection laws differ from your home jurisdiction.

13. Changes to This Policy

We may update this Privacy Policy periodically. Updates are effective when posted on this page. Continued use of the Services after updates means the revised policy is acknowledged and agreed to.

14. Contact

If you have questions about this Privacy Policy or CWSA privacy practices, contact us at info@thecwsa.org or visit /contact.