Last Updated: August 27, 2026
Scuba Network is committed to protecting your privacy and being transparent about how we handle your personal information. This Privacy Policy explains what personal data we collect when you use our platform, why we collect it, how we use it, who we share it with, and your rights regarding your data. We process all personal data in accordance with UK data protection law.
Personal data means information that identifies you as an individual. We collect and process the following categories:
Your first name, last name, username, date of birth, and gender.
Your email address.
Your username and encrypted password for accessing your account.
Optional information you provide such as your bio, location (city/country), height, and profile photograph.
Information about your dives including locations (coordinates), dates, times, depths, water temperatures, visibility conditions, tank specifications, equipment used, and any notes or observations you record. This also includes trip information you create or participate in.
Data collected automatically including your IP address, browser type and version, device type, operating system, login timestamps, and information about how you navigate through our platform.
Details about your interactions with our platform, including which features you use, pages you visit, and how frequently you access the service.
Photographs you upload, dive computer files you import, and any other content you choose to share on the platform.
Your settings for which emails we send you, and a record of when we last sent one.
We use your personal data for the following purposes:
To create and manage your account, verify your identity, and enable you to use our platform.
Data used: Identity Information, Contact Information, Account Credentials
Legal basis: Performance of contract
Retention: We retain this data while your account is active and for 12 months after account closure
To enable you to log dives, create and join trips, upload photos, interact with other users, and use all features of our platform.
Data used: All categories as needed for the specific features you use
Legal basis: Performance of contract
Retention: Active account data is retained indefinitely while you use our service
To send account emails such as password resets and confirmations, trip invitations from other divers, and notification emails about activity on your account.
Data used: Contact Information, Communications Preferences
Legal basis: Performance of contract (account emails), Legitimate interests (notification emails)
Retention: Contact information retained while your account is active
To analyse how our platform is used, identify issues, understand user preferences, and develop new features.
Data used: Technical Information, Usage Information
Legal basis: Legitimate interests
Retention: Analytics data is retained for 24 months
To protect our platform from malicious activity, prevent fraud, identify technical problems, and keep user accounts secure.
Data used: Technical Information, Usage Information, Account Credentials
Legal basis: Legitimate interests and legal obligations
Retention: Security logs retained for 12 months
To meet our legal and regulatory obligations.
Data used: Any category as required by law
Legal basis: Legal obligation
Retention: Retained as long as legally required
We do not sell your personal data. We share your information only in these specific circumstances:
Dive logs you create are visible to all users of our platform. When you create a trip, you choose whether it's public (visible to everyone) or private (visible only to invited members). Your profile information (username, display name, bio, location, and profile photo) is visible to other platform users.
We work with carefully selected companies that provide essential services: Supabase (database hosting, user authentication, file storage, and image processing), Google Maps (mapping services), Resend (email delivery), PostHog (usage analytics), Sentry (error monitoring), and Cloudflare (bot protection on our sign-in, sign-up, password reset, and early access forms). These providers only access your data to perform services for us and are bound by strict data protection obligations. If you choose to share content on social media platforms (such as Instagram, Twitter, TikTok, or YouTube), data may be shared with those platforms as described in their respective privacy policies.
We may disclose your information when required by law, court order, or legal process, or when necessary to protect our rights, your safety, or the safety of others.
If our business is acquired or merged with another company, your data may transfer to the new owners who will continue to honor the commitments in this policy.
Under UK data protection law, you have the following rights:
You can request a copy of the personal data we hold about you. Most of your data is accessible directly through your account dashboard. To request a comprehensive copy, email info@scuba.network.
You can update inaccurate or incomplete personal data through your account settings. For information you cannot update yourself, contact us at info@scuba.network.
You can delete your account yourself, at any time, from your profile on the website. It happens straight away and cannot be undone. Your dives, photos, files and sign-in record are removed. Your email address is then free to sign up with again. Anything other divers depend on stays, without your name on it. That includes a dive site somebody else has dived and a trip somebody else was on. If you cannot sign in, email info@scuba.network and we will delete the account for you.
You can ask us to temporarily suspend processing your data in specific circumstances, such as if you question its accuracy or object to our processing.
You can request your data in a commonly used, machine-readable format to transfer to another service. Contact info@scuba.network to exercise this right.
You can object to processing based on legitimate interests or for direct marketing purposes. To stop our notification emails, use the unsubscribe link at the bottom of any of them, change your preferences in your account settings, or email info@scuba.network.
Where we rely on your consent, you can withdraw it at any time. This won't affect processing already completed.
You can exercise these rights free of charge. We may need to verify your identity before fulfilling your request. We will respond within one month, or inform you if we need additional time for complex requests.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, or destruction. This includes password encryption, secure data transmission (HTTPS), access controls limiting who can view your data, and regular security assessments. Despite our efforts, no online platform can guarantee complete security, and you should protect your password and account credentials.
To stop automated abuse of our sign-in, sign-up, password reset and early access request forms, we use Cloudflare Turnstile. Turnstile runs a check in the background while one of these forms is on screen, on the website and in our mobile app. The check starts when the form is shown rather than when you submit it, so it also runs for visitors who open a form and never send it. Almost always it finishes on its own and you see nothing. Occasionally Cloudflare cannot decide on its own, and then it shows a box for you to tick. It never asks you to identify objects in photographs, and it is not used to track you across other websites. To run the check, Cloudflare receives Technical Information such as your IP address, browser and device characteristics, and signals about how the page was interacted with. It returns only a pass or fail result to us, not a profile of you. Our legal basis is our legitimate interest in keeping accounts and the platform secure. Turnstile data is processed by Cloudflare, Inc. and is not used by us for any other purpose.
Cloudflare's handling of this data is described in: Cloudflare Turnstile Privacy Addendum
We keep your personal data only as long as we need it for the purposes described in this policy. The periods are set out in the section above on why we use your information. You can delete your account yourself at any time, and the deletion is immediate rather than scheduled. We may still keep some data where the law requires it, or to resolve a dispute. Deleted data also stays in our backups until those are replaced on their normal schedule. We may keep aggregated, anonymised data indefinitely for statistics. When an account is deleted we keep a short record of it: the username, the reason given, anything you added yourself, how much you had logged, and the date. We use it to understand why divers leave and to spot misuse.
You give us information directly when you register for an account, fill in forms on our platform, log dives, upload content, or contact us with enquiries.
As you use our platform, we automatically gather Technical and Usage Information through cookies and similar tracking technologies. See our Cookies section below for more details.
We receive Technical Information from analytics providers including PostHog (for usage analytics) and Sentry (for error tracking and performance monitoring).
UK law requires us to have a lawful basis for processing your personal data. We rely on the following:
Processing necessary to provide the services you've signed up for, including creating your account and enabling you to log and share diving activity.
Processing necessary for our business operations, such as improving our services, preventing fraud, securing our systems, and understanding how users interact with our platform. We carefully balance our interests against your rights and only proceed when appropriate.
Some things need your permission before we can do them. Where that applies, we ask you first, and you can take your permission back at any time.
Processing required to comply with laws and regulations that apply to us.
We use cookies (small text files stored on your device) for essential functions like keeping you logged in, remembering your preferences (language, measurement units, colour scheme), and analysing platform usage. Essential cookies are required for the platform to work. You can control non-essential cookies through your browser settings, though this may limit some functionality.
Some of our service providers operate outside the United Kingdom. When we transfer your data internationally, we ensure it receives equivalent protection through approved safeguards such as Standard Contractual Clauses or by transferring only to countries recognised by the UK as providing adequate data protection.
Our platform may link to external websites we don't control. This policy doesn't cover those sites, and we're not responsible for their privacy practices. We encourage you to review the privacy policy of any external site you visit.
Our platform is not directed at children. You must be at least 16 years old to create an account and use Scuba Network. We do not knowingly collect data from anyone under 16. If you believe we've inadvertently collected data from someone under 16, please contact us immediately at info@scuba.network and we will delete it promptly.
We send three kinds of email. Account emails, such as password resets and confirmations. Trip invitations from other divers. Notification emails about activity on your account, such as a new follower or a summary of your week. Notification emails are switched on when you create your account. You can switch them off in your account settings, or with the unsubscribe link at the bottom of every one. The link opens a page that asks you to confirm, and you do not have to sign in. Account emails and trip invitations cannot be switched off, because the platform cannot work without them.
We may revise this policy from time to time. When we make material changes, we'll update the "Last Updated" date and may notify you via email or platform notification. Continued use of our platform after changes indicates your acceptance of the updated policy.
If you're unhappy with how we handle your personal data, please contact us first at info@scuba.network so we can try to resolve your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at www.ico.org.uk or by calling 0303 123 1113.
We strive to make our entire platform, including this Privacy Policy, all legal documents, user interface, content, and features, available in multiple languages to serve our global diving community. All translations have been created using artificial intelligence (AI) technology. While we make reasonable efforts to ensure accuracy, we cannot guarantee that translations are completely error-free, fully capture all legal nuances, or perfectly convey the intended meaning in all contexts. The English version of this Privacy Policy and all other documents is the authoritative version and will prevail in the event of any inconsistency, ambiguity, or dispute regarding interpretation.
DSCNT LTD (Company Number: 16061343) is the data controller responsible for your personal information.
Our registered office: C/O Aligned Accountancy Group Ltd, Bromley Old Town Hall, 30 Tweedy Road, Bromley, Kent, England, BR1 3FE.
For questions about this policy, to exercise your data protection rights, or to raise concerns, please email us at info@scuba.network.