Privacy Policy

This Privacy Policy describes how Magma Diver ("Magma Diver," "we," "us") collects, uses, and shares personal information when you use our website and booking platform. It doesn't cover how any individual dive shop, boat, or instructor ("Operator") handles information you give them directly — their waiver, their own website, or anything outside of Magma Diver itself.

We collect:

• Account information — name, email address, and phone number.
• Certification information — your certifying agency, certification level, diver number, and a photo of your certification card, which an Operator may review as part of booking a trip that requires it.
• Emergency contact information — a name, phone number, and relationship you provide for safety purposes on a dive trip.
• Booking information — the trips you book, gear you select, and your booking and cancellation history.
• Payment information — handled entirely by Stripe, our payment processor. We never see or store your full card number.

We don't use any third-party analytics, advertising, or tracking services on this site today. The only cookies we set are the ones needed to keep you signed in.

We use your information to:

• Create and confirm your bookings, and process payment for them.
• Share what an Operator needs to run your trip safely — your name, certification, and emergency contact — with the specific Operator you book with.
• Send you booking confirmations, cancellation notices, and account emails.
• Provide customer support and respond to your requests.
• Meet our legal and tax obligations.

We share personal information with:

• The Operator you book a trip with — this is necessary for them to run the trip and confirm you're eligible to dive.
• Stripe, to process payment.
• Resend, to deliver account and booking emails.
• Supabase, our database and authentication provider, which stores this information on our behalf.

We do not sell your personal information.

We keep your information for as long as your account is active, plus as long as we need it afterward for legitimate business or legal reasons — for example, tax and payment records. [Placeholder — a specific retention schedule should be set with counsel.]

You can ask us to tell you what personal information we have about you, or to delete it, by emailing info@magmadiver.com. We'll verify your identity before acting on the request. Some information may need to be kept even after a deletion request — for example, records tied to a completed payment.

If you're a California resident, the California Consumer Privacy Act (CCPA) gives you the right to know the categories of personal information we've collected about you and why, to request deletion of that information, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell or share your personal information for cross-context behavioral advertising. You can exercise these rights using the contact information in Section 6 above.

Magma Diver isn't directed at children, and we don't knowingly collect personal information from anyone under 16.

We use reasonable technical and organizational measures to protect your information, but no method of storage or transmission is completely secure, and we can't guarantee absolute security.

We may update this Privacy Policy from time to time. If we make a material change, we'll notify you before it takes effect.

Questions about this Privacy Policy? Reach us at info@magmadiver.com or by mail at PO Box 2247, Crestline, CA 92325.