Privacy Policy

Last updated: 16 April 2026

This Privacy Policy explains how Daiokan SA ("Mirage Dakhla", "we", "us", or "our") collects, uses, and protects your personal data when you visit kitedakhla.com, contact us, or book a kitesurfing lesson with us.

We comply with the EU General Data Protection Regulation (GDPR) and Belgian data protection law.

1. Who we are (data controller)

Daiokan SA (trading as Mirage Dakhla)
Rue Lieutenant Lotin 40
1190 Bruxelles, Belgium
VAT / BCE: BE 0690.950.794
Email: support@kitedakhla.com

For any privacy-related question or to exercise your rights, please contact us at support@kitedakhla.com.

2. What data we collect

We collect the following categories of personal data:

• Contact & booking data you submit voluntarily through our contact form, booking form, WhatsApp, or email: name, email, phone number, country, kitesurfing level, preferred dates, accommodation preferences, and any message you send us.
• Technical & usage data collected automatically when you browse the site: IP address, browser type and version, device type, operating system, pages viewed, referring URL, time zone, and session duration.
• Marketing & analytics identifiers collected via cookies and similar technologies: advertising IDs, pixel events, UTM parameters, and conversion signals (only with your consent where required).
• Transaction data if you pay us: name, billing address, and payment confirmation. We do not store full card details — these are processed directly by our payment provider.

3. Why we use your data (purposes & legal bases)

• To respond to your enquiries and deliver the service you booked — legal basis: performance of a contract and pre-contractual steps (Art. 6(1)(b) GDPR).
• To send operational messages (booking confirmation, lesson reminders, logistics) — legal basis: contract.
• To comply with Belgian accounting, tax, and consumer-protection obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR).
• To improve our website and understand how visitors use it — legal basis: your consent for non-essential analytics cookies, or our legitimate interest in running and securing the site where consent is not required.
• To run advertising and measure campaign performance on Meta (Facebook/Instagram) and Google — legal basis: your consent via our cookie banner.
• To prevent fraud, misuse, and security incidents — legal basis: legitimate interest.

4. Third parties we share data with

We only share personal data with the processors and partners strictly necessary to run our business:

• Webflow, Inc. — website hosting and form submissions (USA, covered by EU-US Data Privacy Framework).
• Meta Platforms, Inc. — Meta Pixel and Conversions API for advertising measurement on Facebook and Instagram (USA/EU).
• Google LLC — Google Analytics, Google Ads, and Google Tag Manager for analytics and campaign measurement (USA/EU).
• WhatsApp / Meta — if you contact us through WhatsApp, Meta processes that message under its own privacy terms.
• Email service provider — to deliver operational and transactional emails.
• Payment processor — to process payments securely (we never see or store your full card number).
• Professional advisors — accountants, lawyers, and tax authorities when required by Belgian law.

All processors are bound by a Data Processing Agreement (DPA) and may only use your data on our instructions.

5. International transfers

Some of our processors (e.g., Meta, Google, Webflow) are established in the United States or may transfer data outside the European Economic Area. These transfers are protected by the EU-US Data Privacy Framework, Standard Contractual Clauses approved by the European Commission, or equivalent safeguards, so your data remains protected to an EU-equivalent standard.

6. Cookies and tracking technologies

We use the following categories of cookies:

• Strictly necessary cookies — required for the site to function (e.g., session, security). No consent required.
• Analytics cookies (Google Analytics) — help us understand traffic and improve content. Loaded only with your consent.
• Advertising cookies (Meta Pixel, Google Ads) — measure ad performance and enable retargeting. Loaded only with your consent.

You can accept, refuse, or change your cookie preferences at any time via the cookie banner on our site. You can also block cookies in your browser settings, but some site features may stop working.

7. How long we keep your data

• Enquiries that do not lead to a booking: up to 12 months, then deleted.
• Customer & booking records: up to 7 years after the last transaction, as required by Belgian accounting law.
• Marketing / consent records: until you withdraw consent or 24 months of inactivity, whichever comes first.
• Server logs: up to 12 months for security and troubleshooting.

8. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten"), subject to our legal retention obligations.
• Restrict or object to processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.
• Lodge a complaint with the Belgian Data Protection Authority — Autorité de Protection des Données / Gegevensbeschermingsautoriteit: autoriteprotectiondonnees.be, Rue de la Presse 35, 1000 Bruxelles.

To exercise any of these rights, email support@kitedakhla.com. We will respond within one month.

9. Security

We apply technical and organisational measures to protect your data: encryption in transit (HTTPS), access controls, secure hosting, and periodic review of our processors. No method of transmission over the internet is 100% secure, but we work hard to protect your data.

10. Children

Our services are aimed at adults. Minors may participate in lessons, but bookings must be made by a parent or legal guardian. We do not knowingly collect personal data from children under 16 without parental consent.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will always reflect the current version. Material changes will be announced on the site or by email where appropriate.

12. Contact

Questions about this policy or our data practices? Email support@kitedakhla.com or write to Daiokan SA, Rue Lieutenant Lotin 40, 1190 Bruxelles, Belgium.