Last updated: August 28, 2026
dive-tec (“we”, “us”, or “our”) operates the dive-tec.ca website. This policy describes how we collect, use, and protect your personal information.
We may collect the following types of information:
We do not sell or rent your personal information. We may share information with:
We use reasonable technical and organizational measures to protect your personal information, including encrypted connections (HTTPS), secure password hashing, and limited access controls.
We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data by contacting us.
Depending on your jurisdiction, you may have the right to:
You can act on the last of these yourself at any time from your account preferences — see the Email Communications section below. To exercise any of the others, please contact us using the information below.
We use essential cookies for authentication and session management. These are required for the site to function and cannot be disabled.
For website analytics we use Umami, a privacy-focused, self-hosted analytics platform. Umami does not use cookies, does not collect personal information, and does not track users across websites.
We also record specific actions you take on our site (for example, completing a booking, applying a discount code, or submitting the contact form) along with non-identifying details such as the resource ID, amount, currency, and item count. When you are signed in, we attach coarse segment information to your session — role, certification level, account-age band, customer lifecycle stage (new / returning / VIP / lapsed), and language preference — so we can analyse how different groups of customers use the site. We never send your email, name, or IP address. Search queries you submit on our site are recorded so we can understand which products customers are looking for; queries are stored in lowercase and limited to 100 characters.
Session replays. A sample of visitor sessions is recorded as anonymized replays. These capture page navigation, mouse movement, scrolling, and click targets so we can understand how the site is being used. Form inputs are masked by default, and payment fields, password fields, and other sensitive inputs are excluded from recording. Replays are retained for 30 days and are not associated with your account, email, or IP address.
We send transactional emails related to your account activity, including:
These emails are sent through Amazon Web Services Simple Email Service (AWS SES), which processes your email address and message content for the purpose of delivery. AWS SES may temporarily store email metadata (sender, recipient, timestamps) for delivery tracking and abuse prevention. AWS processes this data in accordance with the AWS Privacy Notice.
We do not send marketing or promotional emails. All emails are transactional and directly related to your use of our services.
Choosing what you receive. You can turn individual notification types on or off at any time from your account preferences. Emails you have turned off are not sent. Account verification and password reset emails cannot be turned off, because they are how you prove control of your account. Turning off a notification changes only what we send you; it does not cancel a booking, order, or invoice, and you remain responsible for those.
The weekly staff summary also carries a one-click unsubscribe link, which some email providers display as an unsubscribe button beside the sender name. Using it turns off that one notification type and nothing else. The link contains a signed code identifying the recipient and the notification type so that it works without signing in; it stays valid for 90 days, after which you can still change the setting from your account preferences.
Link tracking. Action links in some transactional emails (booking confirmations, order receipts, course reminders, paperwork requests) pass through a short-lived signed redirect on our domain so we can count which emails get acted on. We record only the template name and (in some cases) the related resource ID; the recipient's email address and identity are not part of the record. Authentication links such as email-verification and password-reset are not wrapped.
Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites.
We may update this policy from time to time. Changes will be posted on this page with an updated date.
If you have questions about this privacy policy or your personal data, please contact us.