Privacy Policy

Last updated: March 2026

CEBA Dive Tribe Scuba School EIRL ("CEBA Scuba," "we," "us," or "our"), operating through cebascuba.com, is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your information in accordance with the Dominican Republic Law No. 172-13 on the Protection of Personal Data and applicable international best practices.

1. Data Controller

CEBA Dive Tribe Scuba School EIRL
Puerto Plata, Dominican Republic
Email: info@cebascuba.com
WhatsApp: +1 809.886.0809

2. What Data We Collect

We collect only the personal data necessary to provide our services:

• Identity data: Full name, nationality, passport or ID number, date of birth, government-issued photo ID (uploaded for waiver verification)
• Contact data: Email address, phone/WhatsApp number, emergency contact information
• Dive-specific data: Certification level and agency, certification number, last dive date, total logged dives, gear sizes, medical questionnaire responses
• Health data: Medical conditions, medications, allergies, and physician clearance documents disclosed for safety compliance
• Booking data: Course selections, preferred dates, party size, special requirements
• Technical data: IP address (anonymized), browser type, pages visited, analytics events
• Communications data: Messages sent via our forms, WhatsApp, or email

We do not collect or store credit card numbers, bank account details, or payment credentials. All payments are processed through third-party providers.

3. How We Use Your Data

• To process course bookings, dive reservations, and waiver submissions
• To verify dive certifications and assess medical fitness for participation
• To send booking confirmations, pre-dive reminders, and certification follow-ups
• To coordinate with certification agencies (PADI, NAUI, SDI, TDI, HSA) for student registration and card issuance
• To comply with legal obligations under Dominican tourism and safety regulations
• To share emergency medical information with first responders in the event of a dive emergency
• To improve our website and services through anonymized analytics

4. Legal Basis for Processing (Law 172-13)

We process your personal data based on: (a) your consent, given when you submit our forms or sign our waiver; (b) performance of a contract, when processing is necessary to fulfill a booking or certification course; (c) vital interests, when sharing medical data with emergency responders; and (d) legitimate interest, for safety-related communications and fraud prevention.

5. Data Sharing

We do not sell your personal data. We may share data with:

• Certification agencies (PADI, NAUI, SDI, TDI, HSA) for student registration, course completion records, and certification card issuance
• DAN (Divers Alert Network) for insurance enrollment and emergency coordination
• Emergency medical services in the event of a dive or activity emergency
• Payment processors who operate under their own privacy frameworks
• Analytics tools operating in anonymized or aggregated form only
• Authorities if legally required under Dominican law

6. Photo ID & Document Handling

Government-issued photo IDs uploaded during the waiver process are stored in encrypted, access-controlled cloud storage. ID images are used solely for identity verification and waiver compliance. They are not shared with third parties except as required by law or in a medical emergency. ID data is retained for the duration specified in Section 7 and then permanently deleted.

7. Data Retention

We retain your data for as long as necessary to fulfill the purposes described above, and in any case no longer than 5 years after your last interaction with us, unless a longer period is required by law or certification agency record-keeping requirements. Dive training records may be retained longer per certification agency policies. You may request deletion at any time (see Section 9).

8. Data Security

We implement technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted data transmission (TLS/SSL), access-controlled cloud storage, and role-based administrative access controls.

9. Your Rights Under Law 172-13

You have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Delete your personal data ("right to be forgotten")
• Oppose processing based on legitimate interest
• Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at info@cebascuba.com. We will respond within 15 business days.

10. Cookies & Analytics

Our website uses cookies for analytics purposes only via Google Analytics (with IP anonymization enabled). No advertising or tracking cookies are deployed. You may disable cookies in your browser settings without affecting site functionality.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with the updated date. Continued use of our services after changes constitutes acceptance.

12. Contact & Complaints

For privacy-related questions, contact us at info@cebascuba.com. If you believe your rights under Law 172-13 have been violated, you may file a complaint with the relevant Dominican data protection authority.