1. Introduction

Scuba EdVentures Ltd (“we,” “our,” or “us”) is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website at www.scubaedventures.co.uk or use our diving education and adventure services.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact Information:

• Company: Scuba EdVentures
• Website: www.scubaedventures.co.uk
• Email: enquiries@scubaedventures.co.uk
• Address: 57 Hobart Road, Loddon, Norfolk, NR14 6LD
• Phone: 07491826684

 

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us, including:

• Contact Information: Name, email address, phone number, postal address
• Booking Information: Course preferences, dive experience level, emergency contact details
• Medical Information: Medical questionnaires, fitness declarations, dietary requirements, allergies
• Certification Details: Diving qualifications, certification numbers, training records
• Payment Information: Billing address, payment method details (processed securely through third-party providers)
• Identity Verification: Age verification, identification documents for certain courses
• Communication Records: Messages, inquiries, feedback, and support requests

2.2 Information Automatically Collected

When you visit our website, we automatically collect:

• Technical Information: IP address, browser type, operating system, device information
• Usage Data: Pages visited, time spent on site, referral sources, click patterns
• Cookies and Tracking Technologies: As detailed in our Cookie Policy

2.3 Information from Third Parties

We may receive information from:

• Certification Agencies: PADI, SSI, or other diving organisations for verification purposes
• Insurance Providers: For coverage verification and claims processing
• Partner Dive Centres: When arranging collaborative training or trips

3. How We Use Your Information

We process your personal data for the following purposes:

3.1 Service Delivery

• Providing diving courses, certifications, and adventure trips
• Processing bookings and managing reservations
• Conducting safety briefings and risk assessments
• Maintaining training records and issuing certifications
• Arranging accommodation, transport, and equipment

3.2 Safety and Legal Compliance

• Ensuring participant safety and medical fitness for diving activities
• Maintaining emergency contact information
• Complying with diving industry regulations and standards
• Meeting insurance requirements and processing claims
• Fulfilling legal obligations under health and safety legislation

3.3 Communication and Customer Service

• Responding to inquiries and providing customer support
• Sending booking confirmations and course information
• Providing safety updates and important notifications
• Sharing dive conditions and weather information

3.4 Marketing and Promotional Activities

• Sending newsletters and promotional offers (with your consent)
• Informing you about new courses, trips, and services
• Conducting customer satisfaction surveys
• Social media engagement and content sharing (with permission)

3.5 Business Operations

• Processing payments and managing accounts
• Analysing website usage and improving our services
• Maintaining business records and financial reporting
• Preventing fraud and ensuring website security

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: To fulfil our obligations under booking agreements and service contracts
• Legal Obligation: To comply with diving industry regulations, safety requirements, and tax obligations
• Legitimate Interests: To operate our business, improve services, and ensure safety
• Consent: For marketing communications and non-essential cookies (you may withdraw consent at any time)
• Vital Interests: In emergency situations to protect health and safety

5. Information Sharing and Disclosure

We may share your personal information with:

5.1 Service Providers

• Payment Processors: To handle secure payment transactions
• Certification Agencies: To process certifications and maintain training records
• Insurance Companies: For coverage verification and claims processing
• Accommodation and Transport Providers: When arranging dive trips
• Equipment Suppliers: For rental and maintenance purposes

5.2 Legal and Safety Requirements

• Emergency Services: In case of diving incidents or medical emergencies
• Regulatory Bodies: When required by diving industry regulations
• Law Enforcement: When legally required or to protect safety
• Medical Professionals: For emergency medical treatment

5.3 Business Partners

• Partner Dive Centres: For collaborative training programs
• Tour Operators: When organising dive expeditions
• Professional Networks: Diving industry associations and training organisations

We require all third parties to implement appropriate security measures and use your data only for specified purposes.

6. International Data Transfers

We may transfer your personal data outside the UK/EEA when:

• Using international certification agencies
• Organising diving trips to international destinations
• Working with overseas dive operators

All international transfers are protected by appropriate safeguards, including adequacy decisions, standard contractual clauses, or other approved mechanisms.

7. Data Retention

We retain your personal data for the following periods:

• Training Records: 7 years (or longer as required by certification agencies)
• Medical Information: 7 years after last service provision
• Booking and Payment Data: 7 years for tax and accounting purposes
• Marketing Consent: Until withdrawn or 3 years of inactivity
• Website Analytics: 26 months
• CCTV Footage: 30 days (if applicable)

Data is securely deleted or anonymised when no longer needed.

8. Data Security

We implement comprehensive security measures including:

• Technical Safeguards: Encryption, secure servers, firewall protection
• Physical Security: Secure storage of paper records, restricted access to facilities
• Administrative Controls: Staff training, access controls, regular security reviews
• Third-Party Security: Due diligence on all service providers
• Incident Response: Procedures for handling data breaches

9. Your Rights

Under UK GDPR, you have the following rights:

9.1 Access and Portability

• Request copies of your personal data
• Receive data in a portable format

9.2 Correction and Completion

• Correct inaccurate information
• Complete incomplete data

9.3 Erasure and Restriction

• Request deletion of your data (subject to legal requirements)
• Restrict processing in certain circumstances

9.4 Objection and Withdrawal

• Object to processing based on legitimate interests
• Withdraw consent for marketing communications
• Opt-out of direct marketing

9.5 Complaint Rights

• Lodge complaints with the Information Commissioner’s Office (ICO). To exercise your rights, contact us using the details provided above. We will respond within one month of receiving your request.

10. Cookies and Website Analytics

Our website uses cookies and similar technologies. Please refer to our separate Cookie Policy for detailed information about:

• Types of cookies we use
• How to manage cookie preferences
• Third-party analytics and tracking

11. Children’s Privacy

Our services are primarily designed for adults. For participants under 18:

• Parental/guardian consent is required
• Additional safety measures apply
• Special protection of children’s data
• Limited data collection and processing

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. We will:

• Post updated versions on our website
• Notify you of significant changes
• Maintain previous versions for reference

13. Contact Us

For questions about this Privacy Policy or to exercise your rights:

Data Protection Contact:

• Email: enquiries@scubaedventures.co.uk
• Phone: 07491826684
• Address: 57 Hobart Road, Loddon, Norfolk, NR14 6LD

Information Commissioner’s Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113

14. Specific Notices

14.1 Medical Information

Medical questionnaires and fitness declarations are processed for safety purposes and may be shared with medical professionals in emergencies.

14.2 Certification Records

Training records are maintained according to certification agency requirements and may be accessed by relevant diving organisations.

14.3 Emergency Situations

In diving emergencies, personal information may be shared immediately with emergency services, medical facilities, and relevant authorities.

14.4 Insurance Claims

Personal data may be processed for insurance claims, including sharing with insurance providers, medical professionals, and legal representatives.

This Privacy Policy is effective as of the date listed above and applies to all personal data processing by Scuba EdVentures.