Privacy Policy

Last updated: August 16, 2026

This Privacy Policy describes how Secure Cyber USA LLC, a Florida limited liability company ("we," "us," "our") collects, uses, and shares information when you use where-to-dive.com (the "Site").

The short version: we run a dive charter directory. We don't process bookings or payments, we don't sell your personal information, and we collect a modest amount of usage data to operate the Site and understand which listings people click.

1. Information We Collect

Information collected automatically:

• Server and usage logs. Like most websites, our hosting infrastructure logs requests, including IP address, browser type, device information, pages visited, and timestamps.
• Analytics and performance data. We use Vercel Web Analytics and Vercel Speed Insights — privacy-friendly, cookieless measurement — to count page views and referrers, record product events such as searches and outbound booking clicks, and measure real-user page performance. We also use Google Analytics, which sets cookies to measure how visitors use the Site (pages visited, approximate location, device, and traffic source), subject to your consent choices described below.
• Referral click data. When you click a link to an operator or booking platform, we record the click — including which charter was clicked, the destination platform, the time, your IP address, and your browser user-agent string. This helps us understand which listings are useful and supports our referral relationships.
• Cookies and similar technologies. We use local storage for basic site functionality, such as remembering your theme preference and your cookie choices. With your consent where required by law, we use Google Analytics cookies to measure usage and Google advertising signals to build advertising audiences (for example, so we can show ads for where-to-dive.com to people who previously visited the Site). In the EEA, UK, and Switzerland these are off until you accept them; everywhere, you can change your choice at any time via "Cookie preferences" in the footer.

Information you provide:

• Contact and operator inquiries. If you email us or submit a form (e.g. to list or correct a charter), we receive what you send, including your name and email address.
• Account information. If you create an account, we collect your email address and authentication credentials.

We do not collect payment information. Bookings and payments happen entirely on operators' or booking platforms' sites under their own privacy policies.

2. How We Use Information

We use the information we collect to:

• Operate, maintain, and improve the Site
• Understand which listings and destinations are most useful
• Track referrals to operators and booking platforms, including for commission purposes
• Respond to inquiries and listing requests
• Protect the Site against abuse, fraud, and security threats
• Comply with legal obligations

We use analytics and, subject to your consent choices, advertising cookies to build audiences for our own marketing — such as showing ads for where-to-dive.com to previous visitors on other platforms. Using Google's advertising services may constitute "sharing" personal information for cross-context behavioral advertising as defined by California law; you can opt out at any time via "Cookie preferences" in the footer. We do not sell personal information for money.

3. How Information Is Shared

We share information only with:

• Service providers that host and operate the Site on our behalf: Vercel (hosting, edge network, and cookieless analytics/performance measurement), Supabase (database), Google (analytics and advertising services, subject to your consent choices), and MapTiler (map tiles — when the map loads, your browser requests tiles directly from MapTiler, which receives your IP address as part of that request). These providers process data under their own terms as our processors.
• Referral and booking platforms. When you click through to an operator or platform (e.g. FareHarbor, PADI Travel, Rezdy), you leave our Site, and that destination collects data under its own privacy policy. Referral links may include an identifier indicating the visit came from us; they do not transmit your personal information from us.
• Legal and safety. We may disclose information if required by law, or to protect the rights, safety, or property of users, the public, or ourselves.
• Business transfers. If we are acquired or our assets are transferred, information may transfer as part of that transaction, subject to this policy.

We do not sell personal information.

4. Data Retention

We retain referral click records (including truncated IP address and user agent) and usage data for as long as we need them to operate the Site, measure listing usefulness, support our referral relationships, and protect against abuse. You may request deletion of your personal information at any time as described in Section 5.

5. Your Rights

California residents (CCPA/CPRA): You have the right to know what personal information we collect and how it's used, to request deletion, to request correction, to opt out of the "sharing" of personal information for cross-context behavioral advertising, and to not be discriminated against for exercising these rights. To opt out of sharing, use "Cookie preferences" in the footer and select "Necessary only." For other requests, contact hello@where-to-dive.com. We will verify and respond to requests within the time required by law.

Visitors from the EEA/UK (GDPR): Our legal bases for processing are legitimate interests (operating and securing the Site, measuring listing usefulness) and consent where required. You have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. To exercise these rights, contact hello@where-to-dive.com.

Other jurisdictions: We honor applicable privacy rights under the law of your residence; contact us at hello@where-to-dive.com.

6. Children's Privacy

The Site is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us at hello@where-to-dive.com and we will delete it.

7. Security

We use reasonable technical and organizational measures to protect information, including access controls and encrypted connections (HTTPS). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Transfers

We are based in the United States and process information there. If you access the Site from outside the U.S., you understand your information will be transferred to and processed in the U.S.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date reflects the current version, and material changes will be posted on the Site.

10. Contact

Privacy questions or requests: hello@where-to-dive.com Secure Cyber USA LLC, 222 W Yamato Rd, Ste 106-379, Boca Raton, FL 33431