Your data and privacy

The details you enter on the booking, registration, details update and waiver pages go to the dive center. The dive center is responsible for them and decides what happens with them. DivePilot stores and processes them on the dive center's behalf, as the software they use.

Who is responsible

• The dive center is the controller of your data. They decide what the forms ask, who on their team sees it and how long they keep it.
• DivePilot is the processor. It runs the software, hosts the data on servers in the European Union and delivers the emails. It does not use your data for advertising, profiling or anything beyond running the service.

What is stored

• Everything you type into the booking or registration form, including any health notes, and the time you ticked the consent box.
• Your bookings with the dive center.
• When you pay online: the amount, the date, its status and Stripe's reference. Your card details go to Stripe and to the dive center's own Stripe account; DivePilot never sees them. See Pay your bill online.
• When the dive center checks your certification card: which staff member verified or rejected it, and when.
• When you update your details through a link from the dive center: a record of what you changed, with the old and the new value of each field. For medical notes, dietary requirements and passport number it records only that they were changed or removed, never the values.
• For a waiver signed online: your typed name, the drawn signature, the time, your IP address and browser, and your medical answers if the waiver had a questionnaire. These are kept as evidence of signing, and the medical answers are visible only to the dive center.

On a screen in the shop

Some dive centers show their next departures on a screen in the shop or on the jetty. It can show your name (in full, or your first name and initial, as the dive center chooses), your certification level and whether something is still missing before your dive, such as a waiver, a checked certification or gear. Ask the dive center if you would rather not appear on it.

Checking your own details

The dive center can send you a link to check and update the details they hold, see Update your details with a link from your dive center. The link works only for the time they chose, and only once. The page shows your details as they have them, with one exception: medical notes and a passport number are never shown, only the fact that they are on file, so nobody who gets hold of the link can read them. You can Keep, Replace or Remove them without seeing them. Certifications already on file are listed, but cannot be removed there.

In your browser

The pages set no cookies and contain no advertising or analytics trackers, which is why there is no cookie banner. Your browser keeps two things on your device:

• the language the pages last used;
• an unfinished booking or registration form, without your name, contact details, address, certification numbers or health notes. The page offers to continue it only if you come back within 4 hours; an older one is ignored but not deleted straight away.

Clearing your browser data removes both.

Ask for a copy or erasure

Send your request to the dive center, for example by replying to one of their emails. They can:

• export your record as a spreadsheet and send it to you, including the record of what you changed through an update link;
• correct your details, or send you a link to correct them yourself;
• delete a new registration completely, as long as they have not yet marked it as handled and it has no booking, course enrolment, rental or completed waiver;
• anonymise your record, which permanently erases your name, email address, phone number, date of birth, sex, nationality, address, passport number, medical notes and dietary requirements, your certifications, dive count, gear sizes, weight and equipment notes, the notifications that mention you, your links to update your details and to your bill and the record of what you changed through them, the copies kept when duplicate records of you were merged, and the IP address and browser stored with your waiver signatures.

Note: Anonymising does not remove everything. The dive center keeps your bookings, course enrolments and rentals without your name. It also keeps the waivers you completed, including the typed name, the drawn signature, any medical answers and any uploaded copy of a paper waiver, as evidence in case of a legal claim. Ask the dive center if you want to know why they keep something.

For questions about how DivePilot itself handles data, write to privacy@divepilot.app. Requests about the data a dive center holds on you still go to that dive center, because DivePilot acts on their instructions.

What the pages do not show

• The booking, registration, details update and waiver pages have no privacy notice and no form for data requests. Ask the dive center for their privacy information.
• The consent box on the forms, "I agree that … stores and uses my details to handle my booking and my visit.", is about the dive center keeping your details; its link How my data is handled opens this article. It does not cover the dive center's own booking conditions, such as cancellation rules. Ask the dive center for those.

More about who you are dealing with is in DivePilot and your dive center.