1. Introduction
ScubaDiveResorts ("we", "our" or "the site") is an independent editorial publication focused on scuba diving destinations. This Privacy Policy describes how we handle information relating to visitors of scubadiveresorts.com. We respect it the way we respect the marine environments we write about: we collect the bare minimum and do not sell or share personal data.
2. Information we collect
ScubaDiveResorts is a read-only site: we do not offer user accounts, profiles, sign-ups, comments, or forms that collect personal data. We do not ask for your name, email, address, or any identifier when you browse the site.
Our web server keeps standard, short-lived logs (truncated IP address, user agent, requested URL, date/time) for technical operations, security, and abuse prevention. We do not use these logs to build profiles of individual visitors.
If we add analytics in the future, we will only use privacy-respecting, first-party, anonymised solutions that do not use cross-site identifiers or tracking cookies.
3. Cookies
The site uses only essential session cookies (XSRF-TOKEN and scubadiveresorts-session) set by the application framework to provide cross-site request forgery (CSRF) protection and basic page functionality. These cookies do not track you across sites and expire when you close your browser.
We do not use third-party advertising or tracking cookies on ScubaDiveResorts pages. If you click an outbound affiliate link, the destination site may set its own cookies, governed by its own privacy policy. See our Cookie Policy for details.
4. Affiliate partnerships
Some outbound links on the site are affiliate links. When you click them and complete a booking or purchase on a partner site (for example Booking.com, Viator, GetYourGuide, TravelPayouts), we may receive a commission from the partner. This does not change the price you pay.
Affiliate relationships do not affect our editorial independence. We select what we cover based on editorial criteria, not commissions. We disclose this relationship openly.
5. Third-party services
When you follow an affiliate link, you leave ScubaDiveResorts and arrive at the third party's website, which operates under its own privacy policy and terms. We do not control their data practices and are not responsible for them. We recommend reviewing the privacy policies of any third-party service you use.
The site may also load resources from third parties (for example flag images from a public CDN). These providers may log standard HTTP requests on their own servers according to their own policies.
6. Your rights under GDPR
If you are located in the European Economic Area or the United Kingdom, you have specific rights over personal data under the GDPR, including: the right of access, the right of rectification, the right of erasure ("right to be forgotten"), the right to restrict processing, the right to object to processing, and the right to data portability.
Because ScubaDiveResorts does not collect visitor personal data beyond transient server logs and session cookies, we rarely hold identifiable personal data in practice. If you believe we hold data about you and wish to exercise any of these rights, please write to us at the address below.
7. Data retention
Web server logs are retained for a short period (typically days to weeks) for operational purposes. Anonymised affiliate click logs are retained for up to 12 months for fraud prevention, reconciliation with affiliate partners, and internal analysis of editorial performance. These logs are not linked to personal identities.
8. Contact
For any privacy-related enquiries, including requests to exercise GDPR rights, please write to [email protected]. We aim to respond to all reasonable requests within 30 days.