Privacy Policy
Last updated: 1 January 2026
Table of Contents
- Introduction
- Who We Are
- Scope of This Privacy Policy
- Personal Data We Collect
- Information You Provide to Us
- Booking, Payment, and Transaction Information
- Health, Safety, and Participation Information
- Information Collected Automatically
- Cookies and Similar Technologies
- Mobile App, Device, and Location Information
- Photos, Videos, CCTV, and Venue Media
- Information from Third Parties
- How We Use Personal Data
- Legal Basis for Processing Personal Data
- Marketing Communications
- When We Share Personal Data
- Service Providers and Third-Party Platforms
- International Transfers
- How Long We Keep Personal Data
- How We Protect Personal Data
- Children and Minors
- Your Privacy Rights
- How to Access, Correct, or Delete Your Data
- Account Closure and Data Deletion
- Links to Other Websites and Services
- Changes to This Privacy Policy
- Contact Us
1. Introduction
This Privacy Policy explains how QWave collects, uses, stores, shares, and protects personal data when you use our website, mobile application, booking system, venue, services, events, customer support channels, or any other service connected with QWave.
By using our services, creating an account, making a booking, purchasing a product or service, attending a session, contacting us, or submitting information to us, you acknowledge that your personal data will be handled as described in this Privacy Policy.
If you do not agree with this Privacy Policy, you should not use our website, mobile application, booking system, or services.
2. Who We Are
QWave is operated by:
Q-Wave Sports & Entertainment
Doha Sports Club
Lusail
Qatar
In this Privacy Policy:
- “QWave”, “we”, “us”, and “our” mean Q-Wave Sports & Entertainment.
- “You” and “your” mean the customer, participant, website visitor, app user, account holder, parent, guardian, or any person whose personal data we process.
- “Personal data” means information that identifies you or can reasonably be linked to you.
You can contact us at:
Email: [email protected]
Phone: +(974) 5078 7899
3. Scope of This Privacy Policy
This Privacy Policy applies to personal data collected through:
- our website;
- our mobile application;
- our booking system;
- customer accounts;
- online payments;
- venue bookings;
- surf sessions, lessons, events, camps, and activities;
- packages, vouchers, credits, memberships, and promotions;
- customer support by phone, email, WhatsApp, forms, or social media;
- CCTV, photography, video, and venue media where applicable;
- marketing communications;
- analytics, cookies, and similar technologies.
This Privacy Policy does not apply to third-party websites, payment providers, app stores, social media platforms, or external services that operate under their own privacy policies.
4. Personal Data We Collect
The personal data we collect depends on how you interact with QWave.
We may collect:
- identity information;
- contact information;
- account information;
- booking information;
- payment and transaction information;
- participant information;
- health, safety, and waiver information;
- technical and device information;
- location information;
- marketing preferences;
- communication records;
- photos, videos, and CCTV images;
- feedback, reviews, and survey responses.
We collect only the personal data that is reasonably necessary for the purposes described in this Privacy Policy.
5. Information You Provide to Us
You may provide personal data when you:
- create an account;
- make a booking;
- buy a package, voucher, membership, or product;
- complete a waiver or consent form;
- attend a session;
- contact customer support;
- subscribe to marketing;
- submit a review or feedback;
- enter a promotion, competition, event, or survey;
- interact with us on social media;
- update your account or preferences.
This information may include:
- full name;
- email address;
- phone number;
- date of birth or age;
- gender, where relevant to the service;
- username and password;
- billing details;
- booking details;
- participant names;
- parent or guardian details;
- emergency contact details;
- swimming ability or experience level;
- session preferences;
- communication preferences;
- messages, requests, complaints, or support queries;
- reviews, comments, and feedback.
You must ensure that the personal data you provide is accurate, complete, and up to date.
If you provide personal data about another person, including a minor or another participant, you confirm that you have authority to provide that information and, where required, have obtained their consent.
6. Booking, Payment, and Transaction Information
When you make a booking or purchase, we may collect and process information such as:
- booking date and time;
- session type;
- number of participants;
- selected package or product;
- price;
- deposit amount;
- payment status;
- transaction reference;
- refund, credit, or cancellation history;
- invoices, receipts, and account records.
Payment card details may be processed by third-party payment providers. QWave does not need to store full card details where payments are handled by an external payment processor.
Your payment provider may process your payment information under its own privacy policy and security standards.
7. Health, Safety, and Participation Information
Because QWave provides physical and water-based activities, we may collect information needed to assess safety and manage participation.
This may include:
- swimming ability;
- fitness or experience level;
- injuries or medical conditions disclosed to us;
- pregnancy information, where voluntarily disclosed and relevant to participation;
- disability or accessibility requirements;
- medication or health information relevant to safety;
- emergency contact details;
- waiver and consent records;
- incident or accident reports;
- staff notes related to safety, participation, or conduct.
We use this information only where necessary for safety, participation, legal, insurance, incident management, or customer support purposes.
You should not provide unnecessary medical information. You should provide only information that is relevant to safe participation in QWave activities.
8. Information Collected Automatically
When you use our website, mobile application, booking system, or digital services, we may automatically collect technical information, including:
- IP address;
- browser type and version;
- device type;
- operating system;
- language settings;
- referral source;
- pages viewed;
- links clicked;
- dates and times of access;
- app usage data;
- error logs;
- crash reports;
- session data;
- security logs.
We use this information to operate, secure, monitor, troubleshoot, improve, and analyse our digital services.
9. Cookies and Similar Technologies
We may use cookies, pixels, tags, local storage, SDKs, and similar technologies.
These technologies may be used to:
- keep you logged in;
- remember preferences;
- enable booking and checkout features;
- secure the website and app;
- measure website and app usage;
- understand customer behaviour;
- improve performance;
- support marketing and advertising where permitted.
Some cookies are necessary for the website or app to work. Others may be used for analytics or marketing.
You can control cookies through your browser settings. If you block or delete cookies, some features of our website, app, or booking system may not work properly.
Where required by law, we will request consent before using non-essential cookies.
10. Mobile App, Device, and Location Information
If you use the QWave mobile application, we may collect app-related information, including:
- device type;
- operating system;
- app version;
- device identifiers;
- crash logs;
- usage data;
- notification preferences;
- login and authentication data.
If the app uses location features, we may collect approximate or precise location information only where needed for a feature and where you allow location access through your device settings.
You can disable location access through your device settings. Some app features may not work properly if location access is disabled.
We may use push notifications to send booking reminders, service updates, account alerts, or marketing messages where permitted. You can manage push notification settings on your device.
11. Photos, Videos, CCTV, and Venue Media
QWave may use photos, videos, CCTV, or other visual recordings at the venue.
These may be used for:
- safety and security;
- incident investigation;
- operational monitoring;
- staff training;
- customer support;
- marketing and social media, where permitted;
- event coverage;
- dispute resolution;
- legal or insurance purposes.
CCTV, where used, is primarily for safety, security, and operational purposes.
Photos or videos used for marketing will be handled in accordance with applicable consent requirements. For minors, consent must come from a parent or legal guardian where required.
If you do not want to appear in marketing photos or videos, you should inform QWave staff before your session.
Customers may not photograph or film others in a way that breaches privacy, safety rules, staff instructions, or venue rules.
12. Information from Third Parties
We may receive limited information from third parties where relevant to our services.
This may include information from:
- payment providers;
- booking platforms;
- app stores;
- analytics providers;
- social media platforms;
- marketing platforms;
- customer support tools;
- event partners;
- fraud prevention or security providers.
If you interact with us through social media, the platform may provide us with information such as your profile name, message content, comments, or other information depending on your privacy settings and the platform’s rules.
We do not control how third-party platforms collect or use your data. You should review their privacy policies separately.
13. How We Use Personal Data
We may use personal data to:
- create and manage customer accounts;
- process bookings;
- provide surf sessions, lessons, events, and related services;
- process payments, deposits, refunds, credits, and invoices;
- verify identity and account access;
- communicate booking confirmations, reminders, changes, and updates;
- provide customer support;
- manage safety, waivers, incidents, and participation requirements;
- administer packages, vouchers, memberships, and promotions;
- personalise customer experience;
- improve our website, app, booking system, venue, and services;
- monitor service performance;
- prevent fraud, misuse, abuse, and security incidents;
- send marketing communications where permitted;
- conduct surveys, feedback requests, and service reviews;
- manage complaints and disputes;
- maintain business, accounting, tax, legal, and compliance records;
- enforce our Terms & Conditions and venue rules;
- protect the rights, safety, and property of QWave, our customers, staff, and others.
14. Legal Basis for Processing Personal Data
We process personal data only where we have a valid reason to do so.
Depending on the situation, we may process personal data because:
- it is necessary to provide services or perform a contract with you;
- it is necessary before entering into a contract with you;
- you have given consent;
- it is necessary for safety or to protect vital interests;
- it is necessary to comply with legal, accounting, tax, regulatory, or reporting obligations;
- it is necessary for legitimate business purposes, provided those purposes do not unfairly override your rights;
- it is necessary to establish, exercise, or defend legal claims.
Where we rely on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect processing that took place before consent was withdrawn.
15. Marketing Communications
We may send marketing communications about QWave services, offers, packages, events, promotions, and updates where permitted by law.
Marketing may be sent by:
- email;
- SMS;
- WhatsApp;
- app notification;
- social media;
- online advertising.
You can opt out of marketing communications at any time by using the unsubscribe link, changing your preferences, or contacting us.
Even if you opt out of marketing, we may still send non-marketing messages, including booking confirmations, payment notices, account alerts, safety notices, service updates, and customer support messages.
16. When We Share Personal Data
We may share personal data where necessary for the purposes described in this Privacy Policy.
This may include sharing with:
- payment processors;
- booking system providers;
- website and app hosting providers;
- IT support providers;
- customer support tools;
- email, SMS, and notification providers;
- analytics providers;
- marketing platforms, where permitted;
- professional advisers;
- insurers;
- legal, regulatory, or government authorities;
- event partners, where relevant;
- business buyers or successors if QWave is involved in a merger, acquisition, restructuring, or sale of business assets.
We do not sell personal data.
We require service providers to handle personal data only for authorised purposes and to apply appropriate protection measures.
17. Service Providers and Third-Party Platforms
QWave may use third-party providers to operate parts of its business.
These may include:
- website hosting;
- app hosting;
- cloud storage;
- booking software;
- payment processing;
- analytics;
- advertising;
- email and SMS delivery;
- customer support;
- accounting and invoicing;
- security monitoring;
- maps and location services;
- social media integrations.
Third-party providers may process personal data on our behalf or as independent controllers, depending on the service.
Where a third party acts independently, its own privacy policy will apply.
18. International Transfers
Some of our systems, service providers, or technology partners may process or store personal data outside Qatar.
Where personal data is transferred internationally, we will take reasonable steps to ensure that appropriate protections are in place, taking into account the nature of the data, the country involved, the service provider, contractual protections, and applicable law.
By using our services, you acknowledge that your personal data may be processed in Qatar and other countries where our service providers operate.
19. How Long We Keep Personal Data
We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Retention periods depend on the type of data and the reason it is held.
We may retain data for purposes including:
- active account management;
- booking history;
- customer support;
- safety and incident records;
- payment and refund records;
- accounting and tax obligations;
- fraud prevention;
- legal claims or disputes;
- business reporting;
- compliance with applicable law.
Examples of typical retention periods include:
- account data: while your account remains active and for a reasonable period after closure;
- booking and transaction records: for as long as needed for accounting, tax, legal, and business records;
- safety waivers and incident records: for as long as needed for legal, insurance, safety, and dispute purposes;
- marketing data: until you unsubscribe or we no longer need the data;
- technical logs: for a limited period unless needed for security, fraud prevention, or investigation;
- CCTV footage: for a limited period unless needed for safety, investigation, insurance, legal, or dispute purposes.
When personal data is no longer needed, we will delete, anonymise, or securely archive it.
20. How We Protect Personal Data
We use reasonable technical and organisational measures to protect personal data.
These measures may include:
- access controls;
- account authentication;
- password protection;
- encryption where appropriate;
- secure payment processing through third-party providers;
- system monitoring;
- backups;
- staff access limits;
- supplier controls;
- security updates;
- incident response procedures.
No digital system, website, app, transmission, or storage method can be guaranteed to be completely secure. However, we take reasonable steps to protect personal data against unauthorised access, loss, misuse, alteration, and disclosure.
You are responsible for keeping your account login details secure and for notifying us if you believe your account has been compromised.
21. Children and Minors
QWave services may involve minors, but bookings and accounts for minors must be managed by a parent or legal guardian where required.
We do not knowingly collect personal data from minors without appropriate parent or guardian involvement where required.
For minors, we may collect information such as:
- name;
- age or date of birth;
- booking details;
- parent or guardian contact details;
- emergency contact details;
- participation, waiver, and safety information;
- photos or videos where consent is obtained or otherwise permitted.
Parents and guardians are responsible for ensuring that information provided about minors is accurate and that the minor is suitable to participate.
If you believe a minor has provided personal data without proper consent or authority, please contact us.
22. Your Privacy Rights
Depending on applicable law, you may have rights in relation to your personal data.
These may include the right to:
- request access to personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion of personal data;
- withdraw consent where processing is based on consent;
- object to certain processing;
- request restriction of certain processing;
- request information about how your data is used;
- complain about how your personal data is handled.
These rights may be subject to legal limits. For example, we may need to retain certain data for accounting, legal, safety, fraud prevention, insurance, or dispute purposes.
23. How to Access, Correct, or Delete Your Data
You can request access, correction, or deletion of your personal data by contacting us at:
To protect your privacy and security, we may need to verify your identity before responding to a request.
Depending on the request, we may ask for information such as:
- your name;
- email address;
- phone number;
- booking reference;
- account details;
- proof of authority if you are acting for another person or a minor.
We will respond to requests in accordance with applicable law.
24. Account Closure and Data Deletion
You may request closure of your QWave account by contacting us.
If your account is closed, we may delete, deactivate, anonymise, or archive personal data connected with your account.
We may retain certain information where necessary for:
- bookings already made;
- payment and refund records;
- tax and accounting records;
- fraud prevention;
- safety or incident records;
- legal claims;
- dispute resolution;
- enforcement of our Terms & Conditions;
- compliance with applicable law.
Deleting your account may affect your ability to access booking history, credits, packages, memberships, or app features.
25. Links to Other Websites and Services
Our website, mobile app, messages, or social media pages may contain links to third-party websites or services.
We are not responsible for the privacy practices, content, security, or policies of third-party websites or services.
If you use third-party services, you should review their privacy policies before providing personal data.
26. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
The latest version will be posted on our website or app with the updated date.
If we make material changes, we may notify you by email, app notice, website notice, or another appropriate method.
Your continued use of QWave services after an updated Privacy Policy is posted means you acknowledge the updated Privacy Policy.
27. Contact Us
For questions, requests, complaints, or concerns about this Privacy Policy or how QWave handles personal data, contact:
Q-Wave Sports & Entertainment
Doha Sports Club
Lusail
Qatar
Email: [email protected]
Phone: +(974) 5078 7899