Privacy Policy

Who We Are

wakesys provides booking and management software for activity-based entertainment venues such as aqua parks, trampoline parks, climbing gyms, and similar facilities ("Parks").

The Multi-Park Account Model

When you create a wakesys account, you create a single account that works across all Parks using our platform worldwide. Here's how it works:

• •One account, many Parks: You register once and can book at any wakesys-powered Park without re-registering.
• •Parks see your data only after you book: A Park cannot access your profile until you make a booking or register on-site at that Park.
• •Each Park is responsible for their customers: When you book at a Park, that Park becomes a data controller for your booking and visit data. wakesys acts as a data processor on their behalf.

What Data We Collect

Information You Provide

Information We Collect Automatically

Information About Your Visits

When you book at a Park, we collect:

• What you booked and when
• Check-in times
• Signed waivers (including your signature)
• Purchase history and receipts

How We Use Your Data

We use your data to:

1. Provide our service — Process bookings, send confirmations, manage your account
2. Safety and legal compliance — Manage waivers, verify age requirements, maintain records as required by law
3. Improve our platform — Analyze usage patterns, fix bugs, develop new features
4. Communicate with you — Booking confirmations, receipts, account notifications
5. Measure advertising effectiveness — Understand which ads lead to bookings (see "Advertising Measurement" below)
6. Marketing — With your consent, send you relevant offers

Legal Basis (GDPR)

Who We Share Data With

Parks

When you book at a Park, that Park can access:

• Your profile information (name, email, phone, date of birth)
• Your booking history at their Park
• Your waiver status and signed waivers for their Park
• Your purchase history at their Park

Parks cannot see your activity at other Parks.

Parks may use your contact information to send you marketing communications. Each Park is responsible for their own marketing practices and compliance. To opt out of a Park's marketing, use the unsubscribe link in their emails or contact the Park directly.

Service Providers

Advertising Measurement

When you complete a booking, we share data with advertising platforms to measure the effectiveness of our advertising campaigns. This helps us understand which ads lead to bookings so we can improve our marketing. Personal identifiers are hashed (one-way encrypted) before sharing; technical data is shared unhashed.

Legal Requirements

We may disclose your data if required by law, court order, or to protect our rights, safety, or property.

International Data Transfers

Your data is primarily stored in the European Union (AWS Frankfurt). However, some of our service providers are based in the United States. Where we transfer data outside the EU, we ensure appropriate safeguards are in place, such as:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Certification under recognized frameworks

Cookies

We use only essential cookies required for our service to function:

We do not use advertising or tracking cookies.

Data Retention

When you request account deletion, we:

• Delete your personal profile information (name, email, phone, etc.)
• Retain anonymized records of waivers, receipts, and legal acceptances as required by law
• Cannot delete data already shared with Parks you've visited

Your Rights

Under GDPR, UK GDPR, and other privacy laws, you have the right to:

How to Exercise Your Rights

To exercise any of these rights, including opting out of advertising measurement, contact us at info@wakesys.com with the subject line "Privacy Request".

Response Time: We will respond to your request within 30 days. If your request is complex or we receive many requests, we may extend this by an additional 60 days, but we will notify you within the first 30 days.

Identity Verification: To protect your privacy, we may ask you to verify your identity before processing your request.

Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. You will not receive different pricing or quality of service for exercising your rights.

Right to Object to Advertising Measurement

You have the right to object to our processing of your data for advertising measurement purposes. If you object, we will stop sending your hashed data to advertising platforms (Meta, Google, TikTok) for conversion tracking.

To opt out, email info@wakesys.com with subject line "Opt Out of Advertising Measurement".

Supervisory Authorities

You have the right to lodge a complaint with a data protection supervisory authority:

• Luxembourg: Commission Nationale pour la Protection des Données (CNPD) — cnpd.public.lu
• United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
• Other EU countries: Your local data protection authority

Marketing

From wakesys

We may send you:

• Transactional emails: Booking confirmations, receipts, account notifications, booking reminders (necessary for the service)
• Marketing emails: Promotional offers and new features (only with your consent; you can unsubscribe anytime)

Email Tracking

Our emails may contain tracking pixels and links that help us understand whether you opened the email and which links you clicked. This helps us improve our communications and ensure important messages are being received. You can disable image loading in your email client to prevent pixel tracking.

From Parks

When you book at a Park, they may contact you about offers, events, and promotions related to their services. Each Park is the data controller for their customer communications and is responsible for their own marketing compliance. To opt out, use the unsubscribe link in their emails or contact the Park directly.

Parks may use email marketing platforms (such as Omnisend) integrated with wakesys to send you marketing communications. When a Park uses these integrations, your data at that Park (email address, name, booking history at that Park) may be transferred to the email marketing platform on the Park's behalf.

Children's Privacy

Protecting the privacy of children is important to us. You must be at least 18 years old to create a wakesys account.

Children under 18 can be added to a booking by a parent or legal guardian, who provides information on their behalf and accepts responsibility for their data.

We do not knowingly collect personal information from children under 18 without parental involvement. If we learn that personal data has been collected from a person under 18 years of age without parental consent, we will take appropriate steps to delete this information.

If you are a parent or guardian and discover that your child under 18 has created an account without your consent, please contact us at info@wakesys.com and we will delete that child's personal data from our systems.

Security

We protect your data using:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure password hashing
• Regular security reviews
• Access controls limiting who can view your data

However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security. If you believe your personal data has been compromised, please contact us immediately at info@wakesys.com.

If we become aware of a security breach affecting your personal data, we will inform you and the relevant authorities in accordance with applicable law.

Administrative Access

wakesys team members are authorized to access the administrative sections of the platform when fulfilling customer service requests, providing technical support, and investigating errors or issues. In such cases, they may be able to view:

• Your profile information
• Your booking history and transaction records
• Your waiver and consent records
• Park settings and configurations (for Park operators)
• Financial and billing information

All wakesys team members are trained in data protection and privacy, and are bound by confidentiality obligations. We only access customer data when necessary to provide support or maintain the service.

We will not disclose any personal data without your consent, unless required by law, necessary to enforce our Terms of Service, or needed to provide services through third-party providers as described in this policy.

Additional Disclosures

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date
• For material changes, emailing you or displaying a notice in the app

Contact Us

If you have questions about this Privacy Policy or your personal data: