Who we are
Our website address is tankha.com.
This website was created by Scuba Squad Mexico S de RL de CV, which operates Tank-Ha Dive Center in Mexico.
For general questions you can email [email protected].
What personal data we collect and why we collect it
If you make a booking with us we will store the information you provide because we may need it to tackle fraud or to ensure quality. Information you give us when booking can include your name, the names of people you will dive with, email address, phone number, and address. We also store information about the web browser you use to make your booking — for example the version of your browser and your IP address.
We do not store your credit/debit card number, expiration date, or CVV.
Cookies
We do not use analytics cookies.
We also store details of names and equipment requirements for you and your dive buddies so that, once you add a dive to your cart, the next dive can be pre-filled for your convenience.
Parts of our website that handle the shopping cart use cookies so we can remember which items you added and help you through checkout.
The cart, deposit, and payment forms offer a “Remember me” checkbox beside Continue, checked by default. When this is checked and you continue to payment, we save your name, email address, phone number, and whether that number uses WhatsApp in this browser’s local storage. Uncheck it on a public or shared computer: this immediately removes any previously saved contact details from this browser and prevents saving the details for that checkout. Your current form entries remain available to complete your payment. This changes browser storage only, not the contact information on your order. These forms share saved details and automatically prefill the contact fields on your next visit. You can edit or clear the fields before continuing; submitting updated details with “Remember me” checked replaces the saved contact. The details expire one year after they are last saved and are removed when one of these forms next opens. Clearing this site’s browser data also removes them. We never remember your credit card details through this feature. This storage does not contain card details, booking notes, or acceptance of payment terms, and it does not follow you to other browsers or devices.
Other cookies may be set by our third-party payment provider Stripe to facilitate card payments.
Analytics
We use Plausible Analytics to understand how people use this website. Plausible is designed to work without cookies and without cross-site tracking. We use it to see which sections people find useful and which might need improvement.
We don’t sell this information and we don’t use analytics data from other websites to advertise to you.
Who we share your data with
If you pay through our website, your payment data is processed by Stripe. We use Stripe because we cannot safely charge cards ourselves; Stripe is responsible for handling card data appropriately.
Basic website usage data is processed by Plausible Analytics so we can understand how the site is used in aggregate.
How long we retain your data
The browser-saved contact details described above expire after one year. We don’t have automated processes to delete booking and communication records submitted to our servers through this website. We may need those records for an extended period to locate your order and help with future questions.
What rights you have over your data
If you would like us to remove personal information, email [email protected] and describe what we should search for and remove.
It may not be possible to remove everything — for example, if you have an upcoming booking we may need to keep data on our systems to plan your visit.
Where we send your data
Your personal information is held on servers managed by Amazon Web Services (AWS) in the United States. Backups of our website (including personal data) are encrypted and stored on AWS and Backblaze.
This site runs on a web server in the United States owned by AWS. The owner of Scuba Squad Mexico S de RL de CV has a contract with AWS that includes participation in relevant compliance frameworks for international data transfers. You can read more in AWS’s documentation on EU-US data privacy.
Our contact information
We don’t have a dedicated legal team or data protection officer — we’re trying to do the right thing while running a safe dive operation. For privacy matters: [email protected].
Additional information
An EU representative is not required where processing complies with Article 27(2)(a) of the GDPR.