This Privacy Policy explains how Wanderlust Dive Center B.V., located at Kaya Perenales 3, Kralendijk, Bonaire, collects, uses, stores and protects your personal data. We respect your privacy and handle your data with care.
Bonaire is part of the Caribbean Netherlands (BES islands). Our data processing is governed by the Wet bescherming persoonsgegevens BES (Personal Data Protection Act BES). Where we process data of individuals in the European Union, the General Data Protection Regulation (GDPR) applies.
For questions about this policy, contact us at info@wanderlustdivecenter.com.
1. What Data We Collect
We collect personal data when you interact with us. This includes:
1.1 Data you provide directly
- Name, date of birth, nationality and country of residence
- Email address, phone number and WhatsApp number
- Emergency contact details
- Certification level, dive experience and medical fitness declarations
- Booking details, travel dates and accommodation information
- Waiver signatures (digital or on paper)
- Messages sent via contact forms, email or WhatsApp
1.2 Data collected automatically
- IP address and browser type
- Pages visited, time spent on the site and referring URLs
- Device and operating system information
- Cookie data (see our Cookie Policy for details)
1.3 Data from third parties
- SSI (Scuba Schools International) certification records, when you enroll in a course
- Payment processor data (transaction confirmations only, not full card details)
2. Why We Collect Your Data
We use your data for the following purposes:
- Processing bookings, dive plans and course registrations
- Communicating with you about your booking or inquiry
- Sending your signed waiver confirmation
- Issuing SSI certifications through the SSI system
- Verifying medical fitness and certification levels for safety
- Sending newsletters and dive updates (only with your consent)
- Improving our website and services through analytics
- Meeting legal and regulatory obligations
- Handling complaints and resolving disputes
3. Legal Basis for Processing
We process your data based on:
- Contract performance: processing bookings, delivering courses, managing rentals
- Legal obligation: safety documentation, waiver records, financial administration
- Legitimate interest: improving our services, website analytics, fraud prevention
- Consent: marketing emails, non-essential cookies, photo and video use for promotional purposes
You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
4. How Long We Keep Your Data
| Data type |
Retention period |
| Booking and transaction records |
7 years (tax obligation) |
| Signed waivers |
5 years after last activity |
| SSI certification records |
Indefinite (maintained by SSI) |
| Medical declarations |
Deleted after the booked activity, unless required for a course record |
| Newsletter subscribers |
Until you unsubscribe |
| Contact form messages |
2 years |
| Website analytics |
26 months (anonymized) |
After the retention period, data is deleted or anonymized.
5. Who We Share Your Data With
We share your data only when necessary:
- SSI (Scuba Schools International): certification data for course registrations and card issuance. SSI processes this data under their own privacy policy.
- Payment processors: transaction data for processing payments (Revolut, credit card providers). We do not store full payment card details.
- Mailchimp: email address and name, if you subscribe to our newsletter. Mailchimp processes data under their own privacy policy.
- Google: anonymized analytics data, if you consent to analytical cookies.
- Hosting provider: your data is stored on servers managed by our hosting provider.
- Authorities: when required by law or court order.
We do not sell your data. We do not share your data with advertisers.
6. Data Transfers Outside Bonaire
Some of our service providers (SSI, Mailchimp, Google) process data outside the Caribbean Netherlands, including in the United States and the European Union. Where data is transferred outside Bonaire, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections.
7. Your Rights
You have the right to:
- Access your personal data and receive a copy
- Correct inaccurate or incomplete data
- Delete your data, unless we are legally required to keep it
- Restrict processing in certain circumstances
- Object to processing based on legitimate interest
- Data portability: receive your data in a structured, machine-readable format
- Withdraw consent at any time for processing based on consent
To exercise any of these rights, email us at info@wanderlustdivecenter.com. We will respond within 30 days.
8. Security
We take appropriate technical and organizational measures to protect your data, including:
- Encrypted connections (HTTPS) on our website
- Access controls limiting who can view personal data
- Secure storage of digital waivers and booking records
- Regular review of our data processing practices
No system is completely secure. If you suspect unauthorized access to your data, contact us immediately.
9. Children
We do not knowingly collect data from children under 16 without parental consent. For minors participating in diving activities, a parent or legal guardian must sign the liability waiver and provide consent for data processing.
10. Cookies
We use cookies on our website. For full details on which cookies we use and how to manage them, see our Cookie Policy.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version is always available on this page. Significant changes will be communicated via email or a notice on our website.
If you have questions about this Privacy Policy or want to exercise your rights:
If you believe your data has been handled incorrectly and we cannot resolve your concern, you may file a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) or the relevant supervisory authority.
