Privacy Notice
Who is responsible for your information?
The dive operator of Dive Cenotes Mexico, is responsible for the personal information described in this notice.
Address: Av Gonzalo Guerrero Lote 15, Manzana 3, Akumal, 77778, Quintana Roo, Mexico
Email: [email protected]
Website: https://divecenotesmexico.com
Information we collect
When you contact us or arrange diving activities, we collect information you provide, including:
Your name, date of birth, nationality, telephone number, and email address.
Your emergency contact’s name, relationship to you, and telephone number.
Your planned diving date, certification level, certifying agency, certification number, number of logged dives, and date of your last dive.
An image of your certification card, if you choose to upload it instead of presenting it in person.
Your responses to our diving medical questionnaire.
Your liability-release acknowledgements, electronic signatures, and signature dates.
Invoice and payment-status information relating to your booking.
You may also provide your hotel or accommodation name and room number. This information is optional and helps us try to contact you if you leave belongings behind. Providing it does not affect your booking or participation.
Please provide emergency-contact information with that person’s knowledge and share this notice with them.
Why we use your information
We use information relevant to each purpose to:
Answer enquiries and communicate about your booking.
Review diving qualifications and experience and plan appropriate activities.
Review participation requirements and determine whether physician evaluation is required.
Document your acknowledgements and signed liability release.
Coordinate with the guide or instructor responsible for your activity.
Contact your nominated emergency contact or coordinate assistance in an emergency.
Send deposit invoices and administer payments.
Help return belongings left behind.
Medical information
Your medical questionnaire responses contain sensitive health information, including information about medical conditions, treatment, medication, and physical or mental health.
We use this information for diving participation screening and, when necessary, emergency assistance. The questionnaire does not replace a physician’s assessment.
Our form requests express consent to collect, store, and use your medical questionnaire responses. Without information necessary for participation screening, we may be unable to arrange your diving activity.
Online forms and storage
We use Jotform to collect information through our online questionnaire and liability release.
Completed forms are stored in Jotform, emailed to our business email account, and downloaded as PDFs to our computer. These copies include medical questionnaire responses and signed liability releases.
Jotform processes information as described in its Privacy Policy.
Website services
Our website uses embedded Jotform forms for enquiries and diving documentation, and an accessibility widget provided by Elementor.
When your browser loads these services, their providers receive technical information needed to deliver them, such as your IP address and browser information. These services may also use cookies or similar technologies under their own policies.
You can manage cookies through your browser settings, although blocking them may affect some functions.
For more information, see the Jotform Privacy Policy and Elementor Privacy Policy.
Access and sharing
Only the business operator routinely accesses completed forms. Relevant information is communicated to the guide or instructor responsible for your activity as needed for preparation, participation screening, and safety, without routinely providing a copy of the completed form.
In an emergency, relevant information may be shared with emergency responders or supporting facilities to coordinate assistance.
Jotform and our email and website hosting providers process information relevant to the services they provide. Their processing and storage may take place outside Mexico.
We may also disclose information where required by applicable law or a lawful request from a competent authority.
Payments through PayPal
We use PayPal to send invoices and collect deposits. We use the invoice and transaction information available to us to administer your booking.
PayPal processes payment information under its own Privacy Statement.
How long we keep information
We normally delete completed medical questionnaires and liability releases from our Jotform account, business email account, and computer within 30 days after your final dive with us.
Records needed to meet applicable legal requirements or address an incident or dispute may be retained longer for that purpose.
Enquiry correspondence and payment or invoice records are retained separately for as long as needed to administer the enquiry or transaction and meet applicable obligations.
Service providers may retain certain records or backup copies under their own retention arrangements. Our deletion of a form does not delete records independently maintained by PayPal.
Your privacy rights and choices
You may request access to your personal information, correction of inaccurate or incomplete information, cancellation of your information, or opposition to its processing where applicable. These are known in Mexico as ARCO rights.
You may also request limits on the use or disclosure of your information or withdraw consent where applicable.
To make a request, email [email protected] with the subject “Privacy request.” Include:
Your name and a way to contact you.
A description of your request and the right you wish to exercise.
Information that helps us locate your records, such as your booking or diving date.
For corrections, the requested change and supporting information.
We will explain how to verify your identity or a representative’s authority before providing access to personal information or acting on a request.
For ARCO requests, we will communicate our decision within 20 business days and, when applicable, implement it within the following 15 business days. Legally permitted extensions may apply.
Withdrawal of consent does not undo processing already carried out. Some requests may be limited by legal obligations or the need to retain particular records. We will explain any applicable limitation and any effect on providing your requested service.
Changes to this notice
We will publish changes to this notice on our website. Where a change requires additional notice or consent, we will provide it or request it as applicable.
For questions about this notice or your personal information, please contact [email protected].