Legal
Data Deletion Request
Last updated: 17 October 2026. This page explains how to ask for your personal data to be deleted. The full picture is in our privacy policy.
Who handles your request
- If you booked with a dive operator (a liveaboard, dive resort or dive center using DiveHQ), that operator controls your data and DiveHQ processes it on the operator's behalf. You can ask the operator directly, or write to us: we forward your request to the operator without delay and carry out its instructions. We act on guest data without the operator's instruction only where the law requires it or where it is needed to protect someone's vital interests, and we then tell the operator.
- If you are an operator user, an agency user, an applicant or a visitor of divehq.cloud, DiveHQ controls your data and handles your request directly.
How to ask
- Send an e-mail to privacy@divehq.cloud with the subject "Data Deletion Request".
- Include your full name, the e-mail address you used, your phone number if you exchanged WhatsApp messages, and, if you are a guest, the name of the operator and your booking reference if you have it.
- Acknowledgement: we confirm receipt, normally within 2 working days, and may ask you to confirm your identity so that nobody can delete someone else's data.
- Response: your request is handled within 30 days, or sooner where the law requires. By then you receive our answer: for data DiveHQ controls, what was deleted and what had to be kept; for guest data, the operator's decision or what we did on its instructions.
- Completion: for data DiveHQ controls, the deletion is done within that time. For guest data, when and how far it is done depends on the operator's instructions and on what the law requires the operator to keep. Where the law allows the period to be extended, for example for complex or numerous requests, we tell you within the first 30 days, with the reasons.
What can be deleted
- Your profile and contact details (name, e-mail, phone, address).
- The details you gave for a booking: travel documents and their scans, diving certifications, insurance, emergency contact, flights, dietary needs, photos.
- Medical questionnaire answers and other forms.
- WhatsApp and e-mail conversations stored in the operator's account, and your phone number in its contact list.
- For operator and agency users: your user account.
What may have to be kept
Some records cannot be deleted at once, because the law or a legitimate need requires them. They are kept only for that purpose and for the time required:
- Invoices and payment records, for as long as accounting and tax law requires. The period depends on the country of the business that issued them.
- Signed waivers and safety records, where the operator needs them to establish or defend a legal claim or to meet a safety obligation.
- Data needed for an ongoing booking that you have not cancelled, or for a dispute in progress.
- Backups: deleted data is not extracted from existing backups; it disappears from them when each backup expires, after 3 days. Until then backups are used only to restore the service.
WhatsApp data
If you exchanged WhatsApp messages with an operator through DiveHQ, deletion covers your phone number in that operator's contact list, the message history stored in its DiveHQ account, and your WhatsApp preferences there. The operator's messaging provider (Wati, Twilio or Meta) may keep its own copies under its own policy; the operator can ask it to delete them. Messages on your own phone are under your control.
Operator and agency accounts
An operator that ends its subscription can export all its data for 30 days; its database and files are then deleted within 90 days of the end of the contract, as set out in our Terms of Service. These deletions are carried out by DiveHQ staff following a documented procedure, not by an automatic job.
After deletion
- Deletion cannot be undone.
- You will no longer be able to log in, open your personal trip links, or see your booking history.
- A booking still to come may need to be cancelled or handled separately with the operator.
Contact
Privacy and data protection officer: privacy@divehq.cloud
DiveHQ Pte. Ltd., Singapore (incorporation in progress)