A legal disclaimer
Privacy & Data Protection Policy
​
​
Aqua Scuba School Liverpool: Data Protection & Privacy Policy
​
How we collect your data: We collect personal information directly from you when you book a course, fill out PADI forms, or hire equipment. This includes your name, contact details, date of birth, and, crucially, medical information.
Why we need your data:
-
Certification: Your information is shared with PADI (via their online system) to register your certifications.
-
Safety: Medical information is kept on file to ensure our instructors are aware of any health risks relevant to diving safety.
-
Communication: We use your contact details to provide course updates, safety briefings, and (only with your consent) marketing regarding future trips or equipment sales.
​
Data Retention:
-
Training Records: PADI requires us to maintain student training records (liability forms and medical statements) for a minimum of seven years. After this period, these documents are securely shredded or deleted.
-
Financial Records: Transaction records are kept for accounting purposes as required by HMRC (typically six years).
​
Your Rights: You have the right to:
​
-
Access the personal data we hold about you.
-
Request the correction of inaccurate data.
-
Request that we delete your data (where we are not legally required to hold it for PADI or tax purposes).
Data Security: We take your privacy seriously. Digital records are stored on password-protected devices, and we do not store full payment card details on our local systems.