Privacy Policy ✦

SIGNATURE SCUBA SINGAPORE PTE. LTD. (the "Company") and SIGNATURE SCUBA GROUP LOMBOK (the "Group") are committed to protecting and safeguarding your personal data. This Privacy Policy outlines how we collect, use, process, and protect your information across our four (4) authorized digital web domains and our physical operations, consisting of:

• Signature Scuba Gili Trawangam – Gili Trawangan - www.signaturescubagilitrawangan.com
• Signature Scuba Kuta Lombok – Kuta Lombok - www.signaturescubakutalombok.com
• Signature Scuba Gili Gede – Gili Gede - www.signaturescubagiligede.com
• Thamarind Resort Gili Gede (Official Premium Affiliate Center & Resort Partner) - www.thamarindresortgiligede.com
• Signature Scuba Group Lombok- Gili Gede HQ & Admin Office - www.signaturescubagroup.com

By utilizing our websites or executing a booking with us, you explicitly consent to the data collection and processing practices described in this policy, which is governed in accordance with the Singapore Personal Data Protection Act (PDPA).

We collect various types of information to provide safe diving services, clear administrative logs, and process global merchant payments:

• Personal Identity Information: When you book a course, trip, or package, we collect your full legal name, email address, phone number, physical billing address, and passport or identity card details. Passport details are strictly required for verifying maritime manifests and registering formal dive certifications.
• Medical & Safety Declarations: Scuba diving carries inherent physical risks. We collect confidential health and medical history data to ensure safety compliance.
• Secure Financial Data: We collect credit/debit card information and transaction records. All payment data is encrypted and captured directly by our authorized merchant processors; we do not store raw credit card numbers on our internal web servers.
• Technical Non-Personal Information: We automatically collect standard traffic data when you visit our sites, including your IP address, browser type, device profiles, referring websites, and pages viewed.
• Cookies and Tracking: We utilize cookies to remember your display preferences, maintain active checkout shopping carts, and track generalized site usage. You can manage or disable cookie configurations through your personal browser settings.

Your collected data is processed strictly for operational safety, cross-border commerce, and compliance requirements:

• Diving & Hospitality Service Execution: To process digital bookings, schedule your dive boat manifests, manage room allocations at Thamarind Resort Gili Gede or partner properties, and register student data with international agencies (PADI/SSI).
• Medical Safety & Emergency Response: To review medical fitness parameters prior to boat departures. Health data is handled with absolute confidentiality and is only disclosed to medical professionals during emergency hyperbaric or evacuation events.
• Payment Gateway Settlement: To clear transactions securely through Stripe Singapore and Wise Business multi-currency banking tracks.
• Marketing Communications: To transmit booking confirmations, weather alerts, dive schedule updates, or optional promotional newsletters. You may opt out of promotional emails at any time via the unsubscribe link.

We do not sell, rent, lease, or trade your personal data to third-party advertising brokers. Your information is shared only with trusted entities necessary to complete your travel operations:

• Integrated Service Providers: We share necessary transaction data with Stripe Singapore (our Merchant of Record) and Wise Business to verify credit cards and settle accounts.
• Dive Certification Bodies: Student data, training logs, and identity markers are shared directly with diving bureaus (e.g., PADI or SSI) to finalize your permanent diving certifications.
• Legal and Regulatory Compliance: We disclose required identity data to government bodies, port authority harbor masters, and law enforcement agencies when mandated by the laws of Singapore or the Republic of Indonesia (such as Lombok/NTB provincial maritime registers).
• Emergency Medical Entities: In the event of a diving accident, tsunami, earthquake, or other physical injury, your medical declarations and identity data will be immediately turned over to emergency rescue teams, hyperbaric chamber operators, and travel insurance coordinators.

We implement industry-standard corporate security protocols to safeguard your personal files. All credit card processing occurs within a fully encrypted, PCI-DSS compliant environment managed directly by Stripe. Physical dive waivers, medical forms, and passport manifests are maintained in secure databases accessible only to authorized instructors and executive administrators.

Please note that while we maintain strict protocols, no digital transmission over the internet can be guaranteed as 100% secure.

Under the Singapore Personal Data Protection Act (PDPA), you retain explicit rights over your personal data files, which you may exercise at any time by contacting our data compliance officer:

• Right to Access: You may request a transparent digital transcript detailing all personal records we hold regarding your identity.
• Right to Correction: You may request immediate adjustments or spelling corrections to inaccurate personal profiles, email addresses, or dive certification data.
• Right to Deletion: You may request the permanent deletion of your personal records from our digital marketing files. Please note that certain historical transaction data, student certification files, and signed liability waivers must be permanently retained to satisfy global maritime legal frameworks and corporate tax accounting rules.
• Right to Opt-Out: You can halt any automated promotional communications by selecting the "Unsubscribe" button located within our digital message footers.

Our websites contain operational links to external reservation tools, social media networks, and global diving agency portals. This Privacy Policy applies solely to digital platforms managed directly by Signature Scuba Singapore PTE. LTD. We do not accept liability for the data privacy compliance protocols of external third-party domains.

Our core deep-sea scuba diving courses are not intended for children under ten (10) years of age, in accordance with global training agency guidelines. For any minors participating in discovery dives or junior courses, explicit written parental or legal guardian consent must be provided during the registration process. We do not knowingly gather data from children under 13 without verifiable parental authorization.

We reserve the right to modify or adjust this Privacy Policy at any time to reflect changing international tax frameworks, updated data handling software, or revised maritime zoning rules. All updates become legally binding across all four (4) active web domains immediately upon public posting.

This Privacy Policy, along with all data handling workflows, is governed exclusively by the substantive laws of the Republic of Singapore. For any official questions regarding data tracking, cookie opt-outs, or to submit a formal data correction request, please transmit an email directly to our centralized administrative team at your registered corporate address.