Legal

Privacy Policy

Last updated: October 3, 2026

Who we are

Girls Who Paddle SD (“we”, “us”) is a community-organized women's paddleboarding group based in San Diego, California, founded by Hannah Ohman. This Privacy Policy explains how we handle information collected through this website.

Hannah Ohman operates Girls Who Paddle SD as a community volunteer. She is not personally liable for the collection, storage, or processing of data by the third-party service providers (authentication, hosting, database) that power this site, and she is not personally liable for any incident, loss, or damage arising from participation in meetups. Legal responsibility rests with the community group and, where applicable, the respective service providers under their own terms.

Information we collect

Account information — when you sign in with Apple, Google, or email, we receive your name and email address (and, for Google, a profile picture). If you sign in with Apple and choose “Hide My Email”, we only ever receive Apple's private relay address, and Apple shares your name with us at most once, on your first sign-in.
Event signup information — full name, emergency contact name and phone, self-reported paddleboarding experience, and any optional notes you share.
Technical information — standard server logs (IP address, browser, timestamps) used to operate and secure the site.

How we use it

To manage your account and let you sign up for and manage paddle meetups.
To contact emergency contacts if needed during a paddle.
To send occasional service messages related to events you signed up for.
To secure the site and prevent abuse.

Sharing

We do not sell your personal information. Signup information is visible to Girls Who Paddle SD organizers and moderators for the paddles you sign up for. We use trusted service providers (authentication, hosting, database) that process data on our behalf under their own security terms.

Your rights

You can view and cancel your signups from your dashboard. You can delete your account at any time — in the app or on the web — from My account → Delete my account. No email or web form is required.

Deleting your account permanently removes your profile, bio, interests, profile photo, paddle signups and waitlist spots, chat messages and reactions, saved push-notification devices, and your sign-in credentials.

What we retain: for safety and legal reasons we keep a de-identified record in our internal safety and audit log showing that a waiver and code of conduct were accepted for a given paddle, plus any incident or moderation report already filed. These records are no longer linked to your account. Where the law requires it (for example donation and financial records), we retain those records for the required period.

If you organize a chapter, you must hand the chapter over to another organizer before deleting your account, so that chapter events, members and chat are never removed by an individual account deletion. For a copy of your data (including GDPR / CCPA requests), email us at girlswhopaddlesd@gmail.com.

Your California privacy rights (CCPA / CPRA)

If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you these rights:

Right to know what personal information we collect, use and disclose, and why.
Right to access a copy of the personal information we hold about you.
Right to delete your personal information (you can also delete your account from your profile settings).
Right to correct inaccurate personal information.
Right to opt out of sale or sharing. We do not sell your personal information and do not share it for cross-context behavioral advertising.
Right to limit use of sensitive personal information. We only use it to run the service, such as safety and emergency contact details for paddles.
Right to non-discrimination. We will never deny service or treat you differently for using these rights.

Categories we collect: identifiers (name, email, phone), profile details you choose to share (photo, bio, interests), event signup and waiver records, chat messages, and basic device and usage data needed to keep the site working. We collect it directly from you and use it to run meetups, keep members safe and communicate with you. We disclose it only to service providers that help run the site (hosting, sign-in, payments, maps) under contracts that limit their use.

Retention: we keep account data while your account is active, and signup, waiver and financial records for as long as the law requires.

How to make a request: email girlswhopaddlesd@gmail.com with the subject "California privacy request". We will confirm within 10 business days and respond within 45 days. We may need to verify your identity, and you may use an authorized agent. We honor Global Privacy Control (GPC) browser signals as an opt-out of sale or sharing.

Children

This site is not directed at children under 13, and we do not knowingly collect their information.

Cookies

We use only the cookies required to keep you signed in and to make the site work. We do not use advertising or cross-site tracking cookies.

Accessibility

We aim to meet WCAG 2.1 Level AA so the site works with screen readers, keyboards and other assistive technology. If anything is hard to use, email girlswhopaddlesd@gmail.com and we will help and fix it.

Changes

We may update this policy from time to time. Material changes will be posted on this page with a new “Last updated” date.