Last Updated: October 28, 2025
Scuba Network is committed to protecting your privacy and being transparent about how we handle your personal information. This Privacy Policy explains what personal data we collect when you use our platform, why we collect it, how we use it, who we share it with, and your rights regarding your data. We process all personal data in accordance with UK data protection law.
Personal data means information that identifies you as an individual. We collect and process the following categories:
Your first name, last name, username, date of birth, and gender.
Your email address.
Your username and encrypted password for accessing your account.
Optional information you provide such as your bio, location (city/country), height, and profile photograph.
Information about your dives including locations (coordinates), dates, times, depths, water temperatures, visibility conditions, tank specifications, equipment used, and any notes or observations you record. This also includes trip information you create or participate in.
Data collected automatically including your IP address, browser type and version, device type, operating system, login timestamps, and information about how you navigate through our platform.
Details about your interactions with our platform, including which features you use, pages you visit, and how frequently you access the service.
Photographs you upload, dive computer files you import, and any other content you choose to share on the platform.
Your choices about receiving newsletters and other communications from us.
We use your personal data for the following purposes:
To create and manage your account, verify your identity, and enable you to use our platform.
Data Used: Identity Information, Contact Information, Account Credentials
Legal Basis: Performance of contract
Retention: We retain this data while your account is active and for 12 months after account closure
To enable you to log dives, create and join trips, upload photos, interact with other users, and use all features of our platform.
Data Used: All categories as needed for the specific features you use
Legal Basis: Performance of contract
Retention: Active account data is retained indefinitely while you use our service
To send essential account emails (password resets, account confirmations), trip invitations from other users, and optional newsletters if you've subscribed.
Data Used: Contact Information, Communications Preferences
Legal Basis: Performance of contract (essential emails), Consent (newsletters)
Retention: Contact information retained while your account is active; marketing consent records kept for 3 years
To analyse how our platform is used, identify issues, understand user preferences, and develop new features.
Data Used: Technical Information, Usage Information
Legal Basis: Legitimate interests
Retention: Analytics data is retained for 24 months
To protect our platform from malicious activity, prevent fraud, identify technical problems, and keep user accounts secure.
Data Used: Technical Information, Usage Information, Account Credentials
Legal Basis: Legitimate interests and legal obligations
Retention: Security logs retained for 12 months
To meet our legal and regulatory obligations.
Data Used: Any category as required by law
Legal Basis: Legal obligation
Retention: Retained as long as legally required
We do not sell your personal data. We share your information only in these specific circumstances:
Dive logs you create are visible to all users of our platform. When you create a trip, you choose whether it's public (visible to everyone) or private (visible only to invited members). Your profile information (username, display name, bio, location, and profile photo) is visible to other platform users.
We work with carefully selected companies that provide essential services: Supabase (database hosting, user authentication, file storage, and image processing), Google Maps (mapping services), Resend (email delivery), PostHog (usage analytics), and Sentry (error monitoring). These providers only access your data to perform services for us and are bound by strict data protection obligations. If you choose to share content on social media platforms (such as Instagram, Twitter, TikTok, or YouTube), data may be shared with those platforms as described in their respective privacy policies.
We may disclose your information when required by law, court order, or legal process, or when necessary to protect our rights, your safety, or the safety of others.
If our business is acquired or merged with another company, your data may transfer to the new owners who will continue to honor the commitments in this policy.
Under UK data protection law, you have the following rights:
You can request a copy of the personal data we hold about you. Most of your data is accessible directly through your account dashboard. To request a comprehensive copy, email info@scuba.network.
You can update inaccurate or incomplete personal data through your account settings. For information you cannot update yourself, contact us at info@scuba.network.
You can request deletion of your account and personal data by emailing info@scuba.network. We will process your request within 30 days, though we may retain certain data where legally required.
You can ask us to temporarily suspend processing your data in specific circumstances, such as if you question its accuracy or object to our processing.
You can request your data in a commonly used, machine-readable format to transfer to another service. Contact info@scuba.network to exercise this right.
You can object to processing based on legitimate interests or for direct marketing purposes. To opt out of marketing emails, click the unsubscribe link in any newsletter or email info@scuba.network.
Where we rely on your consent, you can withdraw it at any time. This won't affect processing already completed.
You can exercise these rights free of charge. We may need to verify your identity before fulfilling your request. We will respond within one month, or inform you if we need additional time for complex requests.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, or destruction. This includes password encryption, secure data transmission (HTTPS), access controls limiting who can view your data, and regular security assessments. Despite our efforts, no online platform can guarantee complete security, and you should protect your password and account credentials.
We retain your personal data only as long as necessary for the purposes described in this policy. Specific retention periods are detailed in the "Why We Use Your Information" section above. When you request account deletion by emailing info@scuba.network, we delete your personal data within 30 days, except where we must retain certain data to comply with legal obligations, resolve disputes, or for backup integrity. We may retain aggregated, anonymised data indefinitely for statistical purposes.
You give us information directly when you register for an account, fill in forms on our platform, log dives, upload content, contact us with enquiries, or subscribe to newsletters.
As you use our platform, we automatically gather Technical and Usage Information through cookies and similar tracking technologies. See our Cookies section below for more details.
We receive Technical Information from analytics providers including PostHog (for usage analytics) and Sentry (for error tracking and performance monitoring).
UK law requires us to have a lawful basis for processing your personal data. We rely on the following:
Processing necessary to provide the services you've signed up for, including creating your account and enabling you to log and share diving activity.
Processing necessary for our business operations, such as improving our services, preventing fraud, securing our systems, and understanding how users interact with our platform. We carefully balance our interests against your rights and only proceed when appropriate.
For optional activities like sending marketing newsletters, we rely on your explicit consent which you can withdraw at any time.
Processing required to comply with laws and regulations that apply to us.
We use cookies (small text files stored on your device) for essential functions like keeping you logged in, remembering your preferences (language, measurement units, colour scheme), and analysing platform usage. Essential cookies are required for the platform to work. You can control non-essential cookies through your browser settings, though this may limit some functionality.
Some of our service providers operate outside the United Kingdom. When we transfer your data internationally, we ensure it receives equivalent protection through approved safeguards such as Standard Contractual Clauses or by transferring only to countries recognised by the UK as providing adequate data protection.
Our platform may link to external websites we don't control. This policy doesn't cover those sites, and we're not responsible for their privacy practices. We encourage you to review the privacy policy of any external site you visit.
Our platform is not directed at children. You must be at least 16 years old to create an account and use Scuba Network. We do not knowingly collect data from anyone under 16. If you believe we've inadvertently collected data from someone under 16, please contact us immediately at info@scuba.network and we will delete it promptly.
When you create an account, we will ask if you'd like to receive newsletters and updates about Scuba Network. You can change your mind at any time by clicking unsubscribe in any email or by emailing info@scuba.network. Essential service emails (password resets, account notifications, trip invitations) cannot be disabled as they're necessary for the platform to function.
We may revise this policy from time to time. When we make material changes, we'll update the "Last Updated" date and may notify you via email or platform notification. Continued use of our platform after changes indicates your acceptance of the updated policy.
If you're unhappy with how we handle your personal data, please contact us first at info@scuba.network so we can try to resolve your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at www.ico.org.uk or by calling 0303 123 1113.
We strive to make our entire platform, including this Privacy Policy, all legal documents, user interface, content, and features, available in multiple languages to serve our global diving community. All translations have been created using artificial intelligence (AI) technology. While we make reasonable efforts to ensure accuracy, we cannot guarantee that translations are completely error-free, fully capture all legal nuances, or perfectly convey the intended meaning in all contexts. The English version of this Privacy Policy and all other documents is the authoritative version and will prevail in the event of any inconsistency, ambiguity, or dispute regarding interpretation.
Scuba Network Ltd (Company Number: 16061343) is the data controller responsible for your personal information.
Our registered office: C/O Aligned Accountancy Group Ltd, Bromley Old Town Hall, 30 Tweedy Road, Bromley, Kent, England, BR1 3FE.
For questions about this policy, to exercise your data protection rights, or to raise concerns, please email us at info@scuba.network.