Privacy Policy

Last updated: 14 September 2026

Thailand Divers respects your privacy. This policy explains what personal information we collect through thailand-divers.com and related booking communications, why we use it, who may receive it, how we protect it and the choices available to you.

For local Phuket scuba trips and courses invoiced by Compass Rose Co., Ltd., trading as Thailand Divers, Compass Rose processes the information needed to accept payment and fulfil the local booking. Other Thailand Divers products may involve different service providers, which will be explained where relevant to the booking.

Information we collect

Depending on your enquiry or booking, we may collect:

• your name, email address, telephone or WhatsApp number and preferred language;
• the trip or course requested, travel dates, party size and booking reference;
• hotel, pickup, flight or other travel information needed to arrange the service;
• diving certification, recent experience, equipment sizes and training progress;
• safety information, medical-form status and diving-insurance details where required;
• nationality, date of birth, passport or identification details and document images where required for training, insurance, park entry or booking administration;
• invoices, amounts paid, payment status, refunds and chargeback information;
• messages sent through forms, email, WhatsApp, WeChat or live chat; and
• technical information such as IP address, browser or device information, cookie choices, approximate country and website activity.

Please provide personal information about another traveller only when you have their authority to do so.

How we use your information

We use personal information to answer enquiries and check availability; assess diving suitability and safety requirements; prepare quotations, invoices and booking confirmations; take deposits and balance payments and process refunds; provide PADI eLearning and course administration; arrange the services needed for a booking; contact you about operational or safety changes; keep accounting, tax, fraud-prevention and dispute records; operate and secure our systems; and comply with legal, regulatory, safety and emergency obligations.

We use information only where there is an appropriate reason, such as taking steps at your request, performing a booking contract, meeting a legal obligation, protecting safety, pursuing a legitimate business interest or relying on your consent where required.

Payments

Online payments are processed by Stripe. Stripe receives payment and transaction information under its own privacy policy and security standards. Thailand Divers and Compass Rose Co., Ltd. receive the information needed to identify and administer the payment, but do not receive or store your complete card number.

Who we share information with

We share only the information reasonably needed for the stated purpose. Recipients may include Compass Rose Co., Ltd. for covered local Phuket bookings and payments; payment processors, banks and fraud-prevention providers; diving organisations and training-platform providers; selected service providers needed to fulfil a booking; insurers, medical or emergency services where necessary; website hosting, forms, cloud storage, email, live-chat, analytics and IT-support providers; and professional advisers or public authorities where legally required.

We do not sell customers' personal information or permit service providers to use booking information for unrelated marketing.

International processing

Some technology, payment, training and booking providers process information outside your home country. Where required, we use service providers and contractual or legal safeguards intended to protect information during international processing.

How long we keep information

We retain information only for as long as reasonably needed for the booking, safety, training, accounting, legal or dispute purpose for which it was collected. Basic booking, invoice and accounting records may be retained for the period required by applicable law.

Temporary passport, identification, certification and insurance documents are reviewed for deletion after they are no longer needed for the trip, course or related operational requirement.

How we protect information

We use reasonable technical and organisational safeguards appropriate to the information we handle. These include HTTPS-encrypted website connections, access-controlled business systems, limiting access to people and providers who need it, account authentication, maintained website software and secure payment processing through Stripe.

No internet or storage system can be guaranteed completely secure. If we become aware of a personal-data incident, we will assess it and make any notifications required by applicable law.

Cookies, analytics and embedded services

We use necessary cookies to operate the website and remember essential choices. Optional analytics or similar technologies are used in accordance with the choices shown by our cookie controls. Embedded maps, videos, social platforms, live chat and other services may receive technical information when they load or when you interact with them. See our Cookies Policy for more detail.

The website may contact IPWhois to identify an approximate country for currency display. IPWhois receives the visitor's IP address and returns country information. Thailand Divers uses the returned country code for this feature and does not use the lookup to take or change payment. Exchange-rate information is supplied by Frankfurter.

Your choices and rights

Subject to applicable law, you may ask us to provide access to, correct or delete your personal information, restrict or object to certain uses, or withdraw consent where processing is based on consent. Some records may need to be retained for legal, accounting, safety or dispute purposes.

To make a privacy request, use the Thailand Divers Contact Us page or email info@thailand-divers.com. We may need to verify your identity before completing a request. You may also have the right to complain to the relevant data-protection authority.

Changes to this policy

We may update this policy when our services, providers or legal obligations change. The latest version and update date will be published on this page.