Privacy Policy

Last updated: May 18, 2025

1. Introduction
Oceanatik (“we,” “us,” “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, process, and safeguard your personal information when you visit or use Oceanatik (the “Site”). By accessing or using the Site, you consent to the practices described in this policy.

2. Information We Collect

  • Personal Identifiable Information (PII): When you create an account or interact with certain Site features, we may collect PII such as your name, email address, profile photo, certification details, and any other information you choose to provide.
  • Dive-Related Data: Information about your dive certifications, dive logs, reviews, and location data you submit to enhance the dive experience for yourself and the community.
  • Usage Data: Automatically collected data including IP address, device type, browser type, operating system, pages visited, referral source, and Site interaction details.
  • Aggregated & Anonymized Data: We may aggregate and anonymize data to analyze trends, improve Site functionality, and enhance safety recommendations (e.g., popular dive spots, common safety issues).

3. Purpose of Data Collection
We collect and process your data for the following purposes:

  • General Site Operations: To provide, maintain, and improve Site features and performance.
  • Enhancement of Diving Experience & Safety: To analyze aggregated dive data, identify trends, and develop safety recommendations that benefit the community.
  • Communication: To send you account-related notices, updates, and promotional materials (with your consent where required by law).
  • Customer Support: To respond to your inquiries and support requests.

4. Legal Basis for Processing
Where applicable (e.g., for users in the United Kingdom), we process your PII in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, based on one or more of the following legal grounds:

  • Consent: You have given clear consent for us to process your personal data for specific purposes.
  • Contractual Necessity: Processing is necessary to fulfill our contract with you (e.g., account creation, feature access).
  • Legitimate Interests: Processing is necessary for our legitimate interests (e.g., improving safety features), provided your rights do not override those interests.

5. Sharing and Disclosure of Your Information

  • No Third-Party Sharing of PII: We do not share your PII with any third parties or publish it on the Site without your explicit consent.
  • Service Providers: We may engage trusted third-party service providers (e.g., hosting, analytics) to perform services on our behalf. These providers are contractually bound to use your data only to provide the requested services and to maintain confidentiality.
  • Legal Requirements: We may disclose your data if required by law or to protect our rights, property, or safety, or the rights, property, or safety of others.

6. Data Security
We implement appropriate technical and organizational measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest.
  • Regular security assessments and audits.
  • Access controls and staff training.

7. Data Retention
We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Aggregated and anonymized data may be retained indefinitely for analytical purposes.

8. Your Rights
Depending on your jurisdiction, you may have the right to:

  • Access, correct, update, or delete your personal data.
  • Withdraw consent where processing is based on consent.
  • Restrict or object to certain processing activities.
  • Lodge a complaint with a supervisory authority.
To exercise any of these rights, please visit our Contact Page.

9. User Responsibilities
You are solely responsible for ensuring the accuracy and safety of any data you submit to Oceanatik that is intended for public use (e.g., dive site details, safety notes). We do not verify user-submitted information; please confirm details directly with relevant authorities or dive operators before relying on them.

10. Children’s Privacy
Oceanatik is not intended for children under the age of 13. We do not knowingly collect PII from children under 13. If we become aware that we have collected such information, we will promptly delete it.

11. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make changes, we will revise the “Last updated” date at the top of this page and, if the changes are significant, provide a more prominent notice.

12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please visit our Contact Page.

By using Oceanatik, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.