Privacy Policy

This policy explains how Divologist (“we”, “us”), including our Dive2Heal programs, collects, uses and protects your personal data. We handle personal data in line with Malaysia’s Personal Data Protection Act 2010 (PDPA).

Information we collect

• Account details: your name, email address and password (passwords are stored securely by our authentication provider — we never see them).
• Booking and participant details: names, contact numbers, and — where a trip requires it — emergency contact, diving certification level and relevant health/fitness information you choose to provide.
• Enquiry and newsletter details: the name, email, phone and message you submit through our forms.
• Payment information: card and payment details are collected and processed directly by Stripe. We do not store your full card number.
• Usage and campaign data: technical logs and, only with your consent, analytics and advertising events such as page views, enquiries and completed purchases.

How we use it

• To create and manage your account and process your bookings and memberships.
• To take payment, issue receipts and manage refunds.
• To send transactional emails (confirmations, reminders, receipts) and — only if you subscribe — occasional newsletters.
• To run trips safely, including sharing necessary participant details with the specific dive partner operating your trip.
• To respond to your enquiries and provide support.

Who we share it with

We share data only with service providers that help us run the platform, and only as needed: Supabase (secure hosting and database), Stripe (payments), Resend (email delivery), Vercel (hosting and analytics), and — only when you accept optional cookies — configured advertising platforms such as Google, Meta, TikTok or Snapchat. Where you book a trip, we share the participant details required to run it with the dive partner operating that trip. We do not sell your personal data.

Data retention

We keep your data for as long as your account is active or as needed to provide services, meet legal and accounting obligations, and resolve disputes. You may ask us to delete your account and associated personal data, subject to records we are required to keep.

Your rights

Under the PDPA you may access and correct your personal data, withdraw consent, or ask us to stop using it for marketing. Every newsletter includes an unsubscribe link. To exercise any right, contact us at hello@divologist.com.

Cookies

We use essential cookies to keep you signed in and secure. Optional analytics and advertising cookies load only after you choose “Accept optional cookies”. You may choose “Essential only” without losing access to the website. You can clear this preference through your browser storage settings and choose again.

Contact

Questions about this policy or your data? Email hello@divologist.com.