Privacy policy

Last updated: 31 August 2026

1. Who we are

London School of Diving Limited (company number 04388345) is the controller of the personal information described in this notice.

Business and correspondence address: Unit 5, Chertsey Industrial Park, Ford Road, Chertsey, KT16 8FH, United Kingdom

Email: info@londonschoolofdiving.co.uk
Telephone: 020 8995 0002

This notice covers our website and online store, enquiries, course and experience bookings, customer accounts, retail orders, training and certification administration, communications, marketing and customer support.

2. Personal information we collect

Depending on how you interact with us, we may collect:

identity and contact details, including name, postal address, email address and telephone number;
booking, course, attendance, progress and certification information;
medical declarations, fitness-to-dive information and related correspondence where necessary for diving safety and course participation;
purchase, payment-status, delivery, returns and refund information (payment-card details are handled by payment providers and are not intended to be stored by us in full);
customer-account information and preferences;
correspondence sent through email, contact forms, telephone, WhatsApp or social media;
marketing preferences and consent records;
technical information such as IP address, browser/device details, cookie identifiers, security logs and website usage;
photographs, video or testimonials where you have agreed to their use;
information needed to investigate incidents, complaints, fraud or security concerns.

3. Where information comes from

We collect information:

directly from you;
from a parent, guardian or person making a booking for another participant;
through Shopify, Checkfront and other systems used to operate orders and bookings;
from PADI and other training/certification organisations where needed to administer training;
from payment, delivery, communications and customer-support providers;
from publicly available or referral sources where lawful and relevant.

4. Why we use information and our lawful bases

We use personal information to:

respond to enquiries and take steps requested before entering a contract;
provide courses, experiences, memberships, products, delivery and customer support under a contract;
process payments, refunds and accounting records;
administer course progress, certification and quality-management requirements;
assess safety and fitness-to-dive requirements;
comply with tax, accounting, consumer, safeguarding, safety and other legal obligations;
prevent fraud, protect our systems, manage incidents and establish or defend legal claims;
improve our services and website where this is in our legitimate interests and does not override your rights;
send direct marketing where we have consent or another lawful basis, with an opt-out available at any time.

Health information is special-category data. Where we need to use it, we rely on an applicable lawful basis and special-category condition, which may include your explicit consent or protection of vital interests in an emergency, as appropriate to the circumstances.

5. Who we share information with

Where necessary, information may be shared with:

Shopify, for website, store, checkout, account and order services;
Checkfront, for course availability, bookings and booking administration;
Revolut and other enabled payment providers, for payment processing and fraud prevention;
PADI and other relevant training/certification bodies;
Microsoft 365 and communications providers used for email and business operations;
delivery and fulfilment providers used for retail orders;
Meta/WhatsApp and social-media providers when you contact us through those services;
hosting, security, analytics, cookie-consent and IT service providers;
professional advisers, insurers, auditors and authorities where reasonably necessary or legally required;
a buyer or successor in connection with a genuine business reorganisation, subject to appropriate safeguards.

We do not sell personal information.

6. International transfers

Some service providers may process information outside the United Kingdom. Where this happens, we require an appropriate legal transfer mechanism or rely on another lawful safeguard. Where required, we use safeguards recognised by UK data-protection law.

7. How long we keep information

We keep information only for as long as needed for the relevant purpose, including contractual, training/certification, safety, tax/accounting, fraud-prevention and legal-claims requirements.

When information is no longer required, we delete or anonymise it securely.

8. Cookies and similar technology

We use necessary cookies and may use analytics, preference, security and marketing technologies according to the choices available through our cookie controls. The final cookie categories, providers and retention periods must match the live Shopify customer-privacy configuration.

9. Marketing

You can withdraw marketing consent or opt out at any time by using the unsubscribe facility in a message or contacting us. Opting out of marketing does not stop operational messages about a booking, course, account or order.

10. Your rights

Depending on the circumstances, you may have rights to:

access your personal information;
correct inaccurate information;
request deletion;
restrict or object to processing;
receive certain information in a portable format;
withdraw consent where processing relies on consent;
complain to the Information Commissioner’s Office.

Rights are not absolute and lawful retention obligations may still apply. We may need to verify your identity before acting on a request.

To make a request, email info@londonschoolofdiving.co.uk. See our Data Deletion page for deletion instructions.

You may complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/.

11. Children and bookings made for others

Where a booking involves a child or another participant, the person providing information must be authorised to do so. We will use participant information only for legitimate booking, safety, training, certification and legal purposes. Privacy information intended for children must be written and presented appropriately.

12. Security

We use proportionate technical and organisational measures to protect personal information. No system is completely secure, and you should not send sensitive information through an insecure channel. Do not send identity documents unless we request them through an appropriate process.

13. Third-party sites

Our website links to third-party services, including PADI and Checkfront. Those organisations operate under their own privacy notices when they act as independent controllers.

14. Changes to this notice

We will review this notice when our services or processing change and publish the updated date. Where required, we will bring material new uses of personal information to your attention before they begin.

15. Contact

Email: info@londonschoolofdiving.co.uk
Telephone: 020 8995 0002
Postal address: Unit 5, Chertsey Industrial Park, Ford Road, Chertsey, KT16 8FH, United Kingdom