Privacy Policy
VDC-PRIVACY-1.0 · Effective date: 7 September 2026
This English text is the authoritative version.
1. Who controls your personal data
Vibrations Inc., operating as Vibrations Dive Center (“Vibrations”), is the personal information controller for the personal data described in this Notice. Our business address is Tubod, San Juan, Siquijor, Philippines. Privacy questions and requests may be sent to contact@vibrationsdivecenter.com or +63 919 809 2796.
2. Scope of this Notice
This Notice applies when you contact Vibrations, use our website or participant portal, make or join a booking, complete a walk-in or online check-in, sign diving or training documents, make or report a payment, participate in an activity, or communicate with our team.
Booking Terms, medical questionnaires, liability releases and PADI forms serve different purposes. This Notice explains how the personal data connected with those processes is handled.
3. Personal data we collect
Depending on the service, we may collect your name, date of birth, nationality, preferred language, email address, WhatsApp number, address or other contact details; booking, activity and attendance information; certification agency, level and number; diving experience and last-dive information; equipment requirements and sizes; emergency-contact details; medical declarations and supporting clearance; signatures, guardian details and signed forms; payment amount, method, reference and status; communications with Vibrations; and technical records needed to operate secure personal links and the website.
Vibrations’ booking and participant systems do not store complete payment-card details. Card or online-payment details are handled by the payment provider used for the transaction.
4. Why we process personal data
We process personal data to respond to enquiries; create, administer and confirm bookings; collect and allocate payments; prepare staff, equipment and manifests; assess activity prerequisites; support diving safety and emergency response; administer PADI registration and training; create and retain signed records; communicate operational information; comply with accounting, legal, insurance and training obligations; protect our systems; and establish, exercise or defend legal claims.
Processing is based, as applicable, on steps requested before entering a contract, performance of the booking contract, legal obligations, the legitimate interests of safe and efficient dive-center operations, protection of life and health, and consent where consent is required. Medical and other sensitive information is processed only where an appropriate legal basis exists and with additional safeguards.
Accepting Booking & Cancellation Terms does not authorize marketing. Marketing messages will require a separate lawful basis and an available opt-out.
5. When data is required
Some information is necessary to provide the requested activity safely or to meet PADI, payment, accounting or legal requirements. If required information or documentation is not provided, Vibrations may be unable to confirm the booking or allow participation.
6. Who may receive personal data
Access is limited to authorized Vibrations staff and contractors who need the information for their duties. Where necessary, data may also be shared with PADI and relevant training systems; payment providers and financial institutions; Google Workspace, Drive and Apps Script services used to operate our booking and participant tools; website, hosting, communications and IT providers; guides, instructors, boats or transport providers involved in the activity; medical, emergency, rescue, insurance or legal professionals; and public authorities where required by law or necessary for safety.
Emergency contacts receive information only when reasonably necessary for safety or an emergency. We do not sell personal data.
7. International processing
Some providers, including PADI, Google and payment or communications providers, may process data outside the Philippines. Vibrations remains responsible for selecting appropriate providers, limiting the information shared and using contractual or other reasonable safeguards required by Philippine data-protection law.
8. Retention
We retain personal data only for as long as reasonably necessary for the purpose collected, applicable accounting or legal obligations, PADI or training requirements, safety and incident records, insurance requirements, and the establishment, exercise or defense of legal claims. The relevant period depends on the record type and whether the participant is a minor.
9. Security
Vibrations uses reasonable organizational, physical and technical measures to protect personal data. These include access controls, individual access links, account protections, staff authorization, controlled sharing and appropriate backup or recovery procedures. No system can guarantee absolute security, but suspected incidents are assessed and handled under applicable requirements.
10. Minors
For a participant under 18, we collect the information needed to administer the booking and activity and require a parent or legal guardian to complete or authorize relevant acceptances and signatures. Guardian identity, relationship and signature records are retained with the participant’s documents.
11. Website and portal information
Our website and participant portal may process IP address, browser or device information, security logs and page requests needed for operation, fraud prevention and troubleshooting. Essential cookies or similar technologies may be used for security and functionality.
Our website includes an optional Click to Chat button. If you choose to use it, you will be directed to WhatsApp. Any information you provide through WhatsApp is subject to WhatsApp’s own privacy practices. We do not use non-essential analytics or advertising cookies on the website at this time. If this changes, we will update this Notice and provide consent controls where required.
Personal participant links must not be forwarded. Anyone with access to a valid link may be able to view or submit information for that participant. Please notify Vibrations immediately if a link is exposed or used without authorization.
12. Your rights
Subject to Philippine law, you may ask whether we process your data and request access, correction or updating; object to or restrict certain processing; withdraw consent where processing depends on consent; request erasure or blocking where the legal conditions are met; request data portability where applicable; and seek compensation for damage caused by a violation of your rights. Some records may still be retained where required by law or needed for safety, accounting or legal claims.
Requests may be sent to contact@vibrationsdivecenter.com. We may need to verify identity before acting. You may also lodge a complaint with the Philippine National Privacy Commission at privacy.gov.ph.
13. Updates
We may update this Notice when our services, providers or legal obligations change. The current version and effective date will be published on our website and linked from our participant portal and other online booking or check-in forms. Material changes may be communicated directly where appropriate.