Privacy Policy

🏝️ 1. Who We Are

Sanctum Nusa Penida Dive operates a premier SSI Diamond dive center and PADI Instructor, eco-resort, and certified diving equipment provider headquartered on the island of Nusa Penida, Bali, Indonesia.

• Official Website: https://www.sanctumdiveindonesia.com/
• Physical Location: Nusa Penida, Bali, Indonesia (80771)
• Data Controller: Sanctum Dive Indonesia Management ([email protected])

📋 2. Information We Collect

To provide safe underwater experiences, verify diver qualifications, and fulfill gear purchases, we collect the following types of personal information:

• Booking & Contact Details: Full name, email address, WhatsApp/phone number, nationality, and accommodation preferences (dorms or boutique resort rooms).
• Diver Qualifications & Safety Data: Certification agency (PADI, SSI, ADIP, or equivalent standards), certification number, total logged dives, and signed liability releases.
• Medical Fitness Declarations: Confidential Medical Questionnaires required by international recreational diving standards (RSTC/PADI/SSI) to ensure your safety underwater.
• Equipment Orders: Delivery address, shoe/fin size, wetsuit measurements, and order history for dive gear purchased via our store.
• Technical & Analytics Data: IP address, device type, browser settings, and aggregated browsing metrics collected anonymously via Google Analytics.

🎯 3. How We Use Your Information

We process your personal information strictly for legitimate business and safety operations, including:

• Trip Confirmation: Coordinating daily boat manifests, dive site scheduling, and equipment preparation.
• Diver Certification Issuance: Submitting student training records directly to dive training agencies (PADI / SSI) to register your official diver credential.
• Hotel Reservations: Managing check-in, room assignments, and guest hospitality via our reservation systems.
• Customer Support: Communicating fast boat arrival times, logistics, and answering dive inquiries via WhatsApp or email.
• Website Optimization: Analyzing site traffic to enhance site speed, user navigation, and mobile performance.

💳 4. Payment Security & Financial Data

Sanctum Dive Indonesia strictly adheres to global payment security best practices:

• Zero Card Storage: We never store, log, or process credit card details on our website servers.
• PCI-DSS Compliant Processors: All online payments and deposits are handled through encrypted, tier-1 financial gateways (such as Tab Travel and Cloudbeds secure checkout).
• SSL/TLS Encryption: All transactions and website interactions are guarded by enterprise-grade 256-bit SSL encryption powered by Cloudflare.

🤝 5. Information Sharing & Third Parties

We respect your privacy. We do not sell, rent, or trade your personal data to any third-party marketing companies. Data is shared only with trusted service partners necessary to fulfill our services:

• Certification Agencies (PADI / SSI): Required to officially log student training and issue international certification cards.
• Dive Insurance Providers (DAN / DiveAssure): When guest insurance coverage is purchased through Sanctum Dive.
• Cloud & Security Infrastructure: Cloudflare (DDoS mitigation and caching) and Google Analytics (anonymized visitor statistics).
• Legal & Maritime Authorities: Only when required by Indonesian maritime law or harbor master boat manifests for offshore navigation.

🍪 6. Cookies & Tracking Technologies

Our website uses lightweight cookies to optimize your browsing experience:

• Essential Security Cookies: Deployed by Cloudflare to protect our server against malicious bots and DDoS attacks.
• Performance & Cache Cookies: Speeding up page load times on repeat visits.
• Analytics Cookies: Google Analytics cookies that aggregate anonymous visitor data (e.g., pages viewed, time spent) to help us refine our content.

🌍 7. Your Data Rights (GDPR & Global Rights)

Whether you are visiting from Europe, North America, Australia, or anywhere across the globe, you hold full authority over your personal information:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You can request corrections to any outdated or inaccurate details.
• Right to Erasure: You can request that we delete your contact and reservation history, subject to mandatory Indonesian maritime safety and tax retention laws.

📬 8. Contact Our Privacy Team

If you have any questions regarding this Privacy Policy, your personal data, or wish to submit a data deletion request, please reach out directly: