Privacy policy

What we collect, and why

There are only three ways this website gathers anything about you.

• The contact form. Your name, your e-mail address and whatever you write in the message. It is sent to us as an e-mail so that we can answer you and organise your diving. We keep the correspondence while we are dealing with your enquiry and, once you have dived with us, with our business records.
• Our hosting provider’s access log. Like every web server, ours records the IP address, browser, page and time of each request. That is what makes it possible to find a fault or spot an attack, and it is kept for a short period for that purpose only. We do not use it to build a picture of you.
• Your privacy choice. Kept in one small cookie in your own browser. It never reaches us.

What we deliberately do not do

This is worth saying plainly, because most websites cannot say it:

• No analytics or measurement of any kind — no Google Analytics, no pixel, no heatmap.
• No advertising, no remarketing, no profiling and no automated decisions about you.
• No social media plugins. The Facebook, Instagram, WhatsApp and Tripadvisor items on this site are ordinary links: nothing loads from them until you click.
• No fonts, scripts or images fetched from another company. The typefaces are served from this site, so Google is never told that you visited.
• We never sell, rent or trade personal data.

The legal basis

Where the GDPR applies, we rely on Article 6(1)(b) — taking steps at your request before a contract, and then performing it — for the enquiry you send and the booking that follows; on Article 6(1)(f), our legitimate interest in a working and secure website, for the server log; on Article 6(1)(c) where Egyptian law requires us to keep a record; and on Article 6(1)(a), your consent, for anything optional, which today is nothing.

Who else sees it

• Our hosting company, which stores the site and its e-mail on our instructions and nothing more.
• Our e-mail provider, which carries and stores the message you send.
• If you choose to write to us on WhatsApp, that conversation happens on Meta’s service under Meta’s terms, not ours. Use e-mail or the telephone if you would rather it did not.
• Nobody else. We do not pass enquiries to hotels, agents or anyone else without asking you first.

Your data leaving Europe

We are in Egypt. If you are in the European Economic Area or the United Kingdom, contacting us means your data goes to a country the European Commission has not certified as offering equivalent protection, and it may be harder to enforce your rights there than at home. There is no way around that when you book a dive in Egypt: we rely on Article 49(1)(b) GDPR, the transfer being necessary for the contract you are asking us about, and we keep what we hold to the minimum needed to answer you and take you diving.

How long we keep it

• An enquiry that does not lead to a booking: deleted once it is clearly finished, and within two years at the latest.
• A booking: kept while we serve you and afterwards for as long as our accounting and liability obligations require.
• Server logs: a short period, set by our hosting provider, for security and fault-finding.
• Your privacy choice: six months in your browser, or until you clear it.

Your rights

If the GDPR or a comparable law applies to you, you can ask us for a copy of what we hold, ask us to correct it, ask us to delete it, ask us to restrict or stop using it, object to our using it, and ask for it in a portable form. Where we act on your consent you can withdraw that consent at any time, which does not affect what was lawful before. Write to the address above and we will answer as quickly as we can. If you are in the EEA or the UK and you think we have got it wrong, you may also complain to your national data protection authority.

Children

This site is meant for adults planning a dive holiday. We do not knowingly collect anything from a child. If you are under 16, ask a parent or guardian before you send us anything or agree to anything optional. Families diving with us are, of course, very welcome — the booking is made by the adult.

Security

The site is served over an encrypted connection, access to the administration area is restricted and protected, and the software is kept up to date. No website can promise perfect security, but we treat what you send us as something we are looking after rather than something we own.

Changes

If what we do changes, this page changes with it, and the date at the top changes too. If we ever add anything that watches what you do here, it will be off until you switch it on.