Privacy policy

Who is responsible

Aquatic Divers, Marsa Alam, Red Sea, Egypt. Email info@aquaticdivers.net, WhatsApp +20 121 115 9536.

What we keep and why

Your account: name, email, mobile number, nationality and date of birth - to make and manage your bookings (contract).

Your passport copy: boat trips and diving in Egypt require the authorities' passenger and diver lists (legal obligation). It is stored privately; only our office team can open it.

Your diving certificates and logged dives - to check the requirements of dive sites such as Elphinstone (contract, your safety).

Bookings, payments and invoices - for the contract and because tax law requires us to keep invoices.

Security records (sign-ins, changes made by staff) - to protect your data (legitimate interest).

Who helps us (processors)

Contabo GmbH - our server, in a data centre in Germany (EU). Brevo - sends our emails (sign-in codes, booking confirmations). Zoho - our email inbox (EU data centre). PayPal - only if you pay online. OpenStreetMap - the map on our Location page, only if you allow external services. Egyptian authorities - passenger and diver lists where the law requires them.

Cookies

Necessary (no consent needed): cw_access_token and cw_refresh_token keep you signed in (up to 7 days, deleted when you sign out); code_challenge holds the sign-in code step (10 minutes); lang remembers your language (1 year); consent remembers your privacy choice (6 months). We use no tracking, advertising or statistics cookies.

How long we keep it

Your account and documents until you ask us to delete them; invoices as long as tax law requires. Backups are kept 14 days. Security records are kept for as long as they are needed to investigate problems.

Your rights

You may ask to see, correct or delete your data, limit or object to its use, receive it in a portable form, and withdraw a consent at any time (Privacy settings at the bottom of every page). Write to info@aquaticdivers.net. You may also complain to a data protection authority.

Security

All pages use an encrypted connection (HTTPS). Staff sign in with a second step; each team member only sees what their role needs; documents are never public.