GDPR Policy

This GDPR Policy explains:

• What personal data we collect from you
• How we collect and use your data
• The legal basis for processing your data
• How we protect your information
• Your rights under the GDPR

2.1 Information You Provide

We may collect personal information when you:

• Book scuba diving sessions or tour packages
• Submit an inquiry through our contact forms
• Request pricing or travel information
• Register for PADI scuba diving courses
• Contact us via email, phone, or WhatsApp

This information may include:

• Full Name & Email Address
• Phone Number & Country of Residence
• Travel Dates & Number of Participants
• Emergency Contact Details (required for diving activities)
• Booking Preferences & Documents voluntarily submitted

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP Address, Browser Type & Device Information
• Operating System & Pages Visited
• Time Spent on Website, Referral Source & Usage Statistics

2.3 Information from Third-Party Services

We may receive data from trusted third-party services such as:

• Google Analytics & Google Ads
• Social Media Platforms
• Online Booking or Payment Providers

We process your personal information to:

• Confirm and manage scuba diving bookings
• Arrange Lakshadweep tour packages
• Respond to inquiries and provide customer support
• Process payments securely
• Improve website performance and enhance user experience
• Send booking confirmations
• Send promotional offers (only with your consent)
• Comply with legal obligations

Under GDPR, we process your personal data based on one or more of the following legal grounds:

• Your Consent – You have given clear consent for us to process your personal data for a specific purpose (e.g., marketing emails).
• Performance of a Contract – Processing is necessary to fulfil a booking or service agreement you have entered into with us.
• Legitimate Business Interests – Processing is necessary for our legitimate interests, provided these are not overridden by your rights.
• Compliance with Legal Obligations – Processing is required to comply with a legal obligation (e.g., government regulations in Lakshadweep).

Our website uses cookies and similar technologies to:

• Improve website functionality and remember user preferences
• Measure website traffic and analyze visitor behavior
• Support advertising and marketing campaigns

We use appropriate technical and organizational measures to protect your personal information, including:

• SSL-encrypted website connections
• Secure servers and hosting
• Restricted access to customer data
• Regular software and security updates
• Secure data storage practices

We do not sell your personal data. Your information may only be shared with trusted third parties when necessary, including:

• Payment service providers
• Website hosting providers
• Email communication services
• Analytics providers (e.g., Google Analytics)
• Government authorities where legally required (e.g., Lakshadweep Administration for entry permits)

All third parties are expected to maintain appropriate privacy and security standards.

As Lak Sea Adventures operates from India, your personal information may be processed outside the European Economic Area (EEA). Whenever international transfers occur, we take appropriate safeguards to ensure your information remains protected in accordance with GDPR requirements, which may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Other appropriate transfer mechanisms recognized under GDPR

We retain personal information only for as long as necessary to:

• Deliver requested services and complete bookings
• Meet legal, tax, and regulatory obligations
• Resolve disputes and enforce agreements
• Improve our business operations

When personal data is no longer required, it will be securely deleted or anonymized.

If you are located in the EU or EEA, you have the following rights under GDPR:

Our scuba diving services and website are not intended for children under the age of 16 without parental or legal guardian consent. We do not knowingly collect personal information from children without appropriate authorization. If you believe we have inadvertently collected data from a minor, please contact us immediately so we can delete it.

We may update this GDPR Policy from time to time to reflect changes in legal requirements, business practices, or website functionality. The latest version will always be published on this page with the effective date updated accordingly. We encourage you to review this policy periodically.

If you have any questions about this GDPR Policy, wish to exercise your GDPR rights, or have a privacy concern, please contact us:

We are committed to responding promptly to all privacy and data protection requests.