Your data and privacy

The details you enter on the booking, registration and waiver pages go to the dive center. The dive center is responsible for them and decides what happens with them. DivePilot stores and processes them on the dive center's behalf, as the software they use.

Who is responsible

• The dive center is the controller of your data. They decide what the forms ask, who on their team sees it and how long they keep it.
• DivePilot is the processor. It runs the software, hosts the data on servers in the European Union and delivers the emails. It does not use your data for advertising, profiling or anything beyond running the service.

What is stored

• Everything you type into the booking or registration form, including any health notes, and the time you accepted the terms.
• Your bookings with the dive center.
• For a waiver signed online: your typed name, the drawn signature, the time, your IP address and browser, and your medical answers if the waiver had a questionnaire. These are kept as evidence of signing, and the medical answers are visible only to the dive center.

In your browser

The pages set no cookies and contain no advertising or analytics trackers, which is why there is no cookie banner. Your browser keeps two things on your device:

• the language the pages last used;
• an unfinished booking or registration form, without your name, contact details, address, certification numbers or health notes. The page offers to continue it only if you come back within 4 hours; an older one is ignored but not deleted straight away.

Clearing your browser data removes both.

Ask for a copy or erasure

Send your request to the dive center, for example by replying to one of their emails. They can:

• export your record as a spreadsheet and send it to you;
• correct your details;
• delete a new registration completely, as long as they have not yet marked it as handled and it has no booking or course enrolment;
• anonymise your record, which permanently erases your name, email address, phone number, date of birth, sex, nationality, address, passport number, medical notes and dietary requirements, and the IP address and browser stored with your waiver signatures.

Note: Anonymising does not remove everything. The dive center keeps your bookings, course enrolments and rentals, and your waiver records, including the typed name, the drawn signature, any medical answers and any uploaded copy of a paper waiver, as well as certifications, dive count, gear sizes, weight and equipment notes. Ask the dive center if you want to know why they keep something.

For questions about how DivePilot itself handles data, write to privacy@divepilot.app. Requests about the data a dive center holds on you still go to that dive center, because DivePilot acts on their instructions.

What the pages do not show

• The booking, registration and waiver pages have no privacy notice and no form for data requests. Ask the dive center for their privacy information.
• The terms and conditions link on the forms opens DivePilot's terms of service, which are written for dive centers using the software. They are not the dive center's own booking conditions, such as cancellation rules. Ask the dive center for those.

More about who you are dealing with is in DivePilot and your dive center.