YOUR DATA & PRIVACY
Privacy Policy
Last updated: 23 October 2026
1. Who we are
Dive Attune is a self-led digital scuba confidence programme available at diveattune.com. The data controller is Katie Woodroffe, trading as Dive Attune, a UK sole trader. For privacy questions, requests or concerns, email hello@diveattune.com.
2. What personal information we collect
When you register interest in the pilot, we collect your name, email address, optional description of your diving experience and confirmation that you want us to contact you about the pilot. If selected, we may also collect your registration and feedback questionnaire answers, communications and responses to programme exercises that you choose to share with us. Our hosting and email providers may process technical data such as IP addresses, timestamps and security logs.
Please do not submit health or medical information, or other sensitive personal information, through the pilot interest form. If future questionnaires need sensitive information, we will explain that separately before collecting it and identify an appropriate legal basis and additional protections.
3. How we use your information and our lawful bases
- Pilot enquiries and selection: to consider your expression of interest and respond to you, relying on our legitimate interests in running a relevant pilot and responding to enquiries.
- Pilot participation: to provide the agreed materials, coordinate the three-week pilot and communicate with participants, relying on steps taken at your request before entering an agreement or performance of an agreement, as appropriate.
- Programme feedback: to review questionnaire responses and improve the programme, relying on our legitimate interests in evaluating and developing the product. We may use de-identified summaries in our internal planning.
- Website operation and security: to maintain the site, troubleshoot issues and protect against abuse, relying on our legitimate interests in running a secure service.
- Legal compliance: where we must keep or disclose information to comply with law.
Providing your email address for pilot administration does not automatically subscribe you to general marketing.
4. Marketing
We do not use pilot registrations as permission to send unrelated promotional emails. If we introduce a newsletter or product marketing list, we will provide a separate sign-up and a way to unsubscribe, and follow applicable UK electronic marketing rules.
5. Who we share information with
We use Netlify to host the website and receive pilot form submissions. Our email provider and any email forwarding provider used for pilot correspondence may also process message and contact details. We only share information with service providers where necessary to run the service, or where required by law. We do not sell personal information. If we later introduce payment processing, mailing-list software or analytics, we will update this policy before using those services.
6. Processing outside the UK
Some service providers may store or access personal information outside the UK. Where applicable, we rely on appropriate UK-recognised international transfer mechanisms and safeguards provided by those services.
7. How long we keep information
- Unsuccessful pilot applications: deleted within three months after pilot recruitment closes.
- Pilot participant registration and administration details: deleted within six months after the pilot ends, unless a longer period is legally necessary.
- Pilot questionnaire and feedback responses: retained for up to twelve months after the pilot ends to evaluate and improve the programme, then deleted or irreversibly anonymised.
- Optional marketing subscribers, if introduced: retained until they unsubscribe or we otherwise determine the data is no longer needed.
Operational backups and security logs may have separate limited retention periods controlled by our providers. You can request earlier deletion where your rights apply.
8. Your rights
Depending on the circumstances, UK data protection law gives you rights to access, correct or erase your information, restrict or object to processing, and in some cases receive your information in a portable format. To make a request, contact hello@diveattune.com. You may also complain to the Information Commissioner's Office (ICO).
9. Cookies and analytics
We have not intentionally added advertising cookies or optional analytics tools to this version of the website. Hosting and security providers may use essential technical mechanisms. If we introduce non-essential cookies or tracking, we will update this notice and provide any required consent choices first.
10. Security and changes
We take reasonable steps to limit access to personal information and use established service providers. No online service can guarantee absolute security. We may update this policy when our services or processing change, and will show the latest update date here.