Legal
Privacy Policy
Last updated: 10 August 2026
This policy explains how Scuba Life Malta collects, uses and protects your personal data when you visit our website, send an enquiry, submit a lead form through an advertisement, or dive with us. We are the data controller for this information under the EU General Data Protection Regulation (GDPR) and Maltese data protection law.
Who we are
Scuba Life Malta, 20 Triq Monsinjur Moses Debono (Formerly 11 Triq Sant Elena), Mellieħa, Malta.
Company Reg No: C79960 · VAT No: MT24121917 · MTA License No: DIVE/0087/1
Email: dive@scubalifemalta.com · Phone/WhatsApp: +356 7933 9030
What data we collect
- Enquiry and lead form data — your name, email address, phone number, preferred dates and the content of your message. This is collected through the contact form on this website and through lead forms you submit on advertising platforms such as Google Ads.
- Booking and diving data — certification level and agency, number of logged dives, equipment sizes, and the medical declaration information required before diving. Medical information is special category data and is handled with additional care.
- Technical and usage data — IP address, browser and device type, pages viewed and referring source, collected through analytics and advertising tags.
Why we use it and our legal basis
- To answer enquiries and prepare a quote — based on your request and our legitimate interest in responding to potential customers.
- To organise, deliver and administer your dives or course, including PADI certification processing — necessary to perform our contract with you.
- To meet safety, insurance, medical-screening and licensing obligations — necessary for compliance with our legal obligations as a licensed dive centre.
- To measure website performance and advertising effectiveness — based on your consent where required, or our legitimate interest in improving our service.
- To send you offers or news, where you have asked to receive them — based on your consent, which you can withdraw at any time.
Lead forms from advertising
If you submit a lead form shown alongside one of our advertisements, the advertising platform (for example Google) collects your details and passes them to us so that we can follow up about diving with Scuba Life Malta. We use those details only to respond to your enquiry and to arrange the diving or training you asked about. The platform also processes your data under its own privacy policy.
Cookies, analytics and advertising
This website uses Google tags to understand how visitors find and use the site and to measure the results of our advertising. These tools may set cookies or similar identifiers on your device. You can block or delete cookies in your browser settings, and you can review Google's own advertising controls in your Google account.
Who we share it with
We do not sell your personal data. We share it only with service providers who help us operate: our website and email hosting providers, our booking and customer records systems, and PADI where a certification must be issued. Where a provider is located outside the European Economic Area, the transfer is covered by an adequacy decision or standard contractual clauses. We may also disclose data where we are legally required to do so, for example to authorities investigating a diving incident.
How long we keep it
Enquiries that do not lead to a booking are kept for up to 24 months. Booking, training and medical declaration records are kept for up to 10 years, reflecting insurance, liability and dive-industry record-keeping requirements. Accounting records are kept for the period required by Maltese tax law.
Your rights
You have the right to access the personal data we hold about you, to have inaccurate data corrected, to ask us to erase it, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time where our use is based on consent. To exercise any of these rights, email dive@scubalifemalta.com. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information and Data Protection Commissioner (IDPC) in Malta at idpc.org.mt.
Security
We use encrypted connections for our website and forms, restrict access to personal data to staff who need it, and keep paper medical declarations in secure storage at the dive centre.
Children
Junior divers can train with us from age 8 or 10 depending on the programme. Where a participant is under 18, we collect their data from a parent or legal guardian, who must sign the medical declaration and consent forms on their behalf.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised.
