Your data

Privacy policy

Important stuff, explained as clearly as we can — what we collect when you book or browse, how privacy-friendly analytics work, and how to reach us about privacy.
  • No card numbers stored
  • Web hosting
  • Cookie-free analytics

Who we are

Our website address is tankha.com.

This website was created by Scuba Squad Mexico S de RL de CV, which operates Tank-Ha Dive Center in Mexico.

For general questions you can email [email protected].

What personal data we collect and why we collect it

If you make a booking with us we will store the information you provide because we may need it to tackle fraud or to ensure quality. Information you give us when booking can include your name, the names of people you will dive with, email address, phone number, and address. We also store information about the web browser you use to make your booking — for example the version of your browser and your IP address.

We do not store your credit/debit card number, expiration date, or CVV.

Cookies

We do not use analytics cookies.

We also store details of names and equipment requirements for you and your dive buddies so that, once you add a dive to your cart, the next dive can be pre-filled for your convenience.

Parts of our website that handle the shopping cart use cookies so we can remember which items you added and help you through checkout.

Other cookies may be set by our third-party payment provider Stripe to facilitate card payments.

Analytics

We use Plausible Analytics to understand how people use this website. Plausible is designed to work without cookies and without cross-site tracking. We use it to see which sections people find useful and which might need improvement.

We don’t sell this information and we don’t use analytics data from other websites to advertise to you.

Who we share your data with

If you pay through our website, your payment data is processed by Stripe. We use Stripe because we cannot safely charge cards ourselves; Stripe is responsible for handling card data appropriately.

Basic website usage data is processed by Plausible Analytics so we can understand how the site is used in aggregate.

How long we retain your data

We don’t have automated processes to delete personal data submitted through this website. We may need booking and communication records for an extended period to locate your order and help with future questions.

What rights you have over your data

If you would like us to remove personal information, email [email protected] and describe what we should search for and remove.

It may not be possible to remove everything — for example, if you have an upcoming booking we may need to keep data on our systems to plan your visit.

Where we send your data

Your personal information is held on servers managed by Amazon Web Services (AWS) in the United States. Backups of our website (including personal data) are encrypted and stored on AWS and Backblaze.

This site runs on a web server in the United States owned by AWS. The owner of Scuba Squad Mexico S de RL de CV has a contract with AWS that includes participation in relevant compliance frameworks for international data transfers. You can read more in AWS’s documentation on EU-US data privacy.

Our contact information

We don’t have a dedicated legal team or data protection officer — we’re trying to do the right thing while running a safe dive operation. For privacy matters: [email protected].

Additional information

An EU representative is not required where processing complies with Article 27(2)(a) of the GDPR.