Privacy Notice

This Privacy Notice describes how P3 Firm, LLC (“we,” “us,” or “our”) collects, uses, and protects your personal information when you use the San Diego Beach Planner website and related services (“Service”).

1. Who we are

P3 Firm, LLC is the data controller for the personal information processed through the Service. If you have questions about this notice or our data practices, you can contact us through the support channels listed on the Service.

2. Information we collect

• Account information: name, email address, and authentication details when you create an account.
• Usage data: beach searches, favorite beaches, alert preferences, and app interactions.
• Device and log data: IP address, browser type, device type, operating system, and approximate location (derived from IP for weather and tide relevance).
• Support data: messages and correspondence when you contact us for help.

3. How we use your information

• To provide and personalize the Service (e.g., beach recommendations, favorites, and alerts).
• To send email alerts and notifications you have requested.
• To process transactions and manage subscriptions through our payment provider, Paddle.
• To maintain security, prevent fraud, and improve the Service.
• To communicate with you about updates, billing, or support.

4. Legal basis for processing

We process personal information on the basis of: (a) contract performance — to provide the Service you signed up for; (b) legitimate interests — to improve security and user experience; (c) consent — for optional marketing communications or non-essential cookies; and (d) legal obligation — where required by law.

5. Who we share data with

We do not sell your personal information. We share data only with:

• Paddle — our Merchant of Record for payments, subscription management, tax compliance, and invoicing.
• Service providers — hosting, analytics, email delivery, and support tooling.
• Professional advisers — legal, accounting, or compliance professionals when necessary.
• Authorities — when required by law or to protect our rights.

6. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove or anonymize your personal data within a reasonable time, except where we are required to retain it by law.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or export your personal information, and to object to or withdraw consent for certain processing. To exercise these rights, contact us through the Service.

If you are in the UK or EEA, you also have the right to lodge a complaint with your local supervisory authority. We aim to respond to requests within one month.

8. Security

We use appropriate technical and organizational measures — including encryption in transit, access controls, and secure authentication — to protect your information.

9. Cookies

We use essential cookies to operate the Service and analytics cookies to understand usage. You can manage cookie preferences through your browser settings.

10. International transfers

Your data may be processed in countries outside the UK or EEA. When this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

11. Changes to this notice

We may update this Privacy Notice from time to time. We will post the revised notice with a new effective date and, for material changes, notify you through the Service or by email.