Privacy Policy

Nautilus Dive (the "Company") values the personal information of data subjects and complies with the Personal Information Protection Act of Korea and other applicable laws.

1. Personal Information We Collect

The Company collects the following personal information to process bookings and inquiries.

• Required (entered by the applicant): applicant name, contact (phone number), email address, preferred date, group size, selected course
• Optional: message (special requests)
• Consent record: whether consent was given, time of consent, policy version, collection source
• Automatically collected (attribution): entry path (UTM), visited page path, referring page (domain and path). The Company does not store the full URL or search terms, and minimises these to path/domain level on the server before storing.
• Processing timestamps: submission, receipt and storage times

2. Purpose of Collection and Use

• Receiving and confirming dive bookings
• Booking-related communication (scheduling, changes and cancellations)
• Responding to inquiries
• Providing and operating the service
• Analysing entry paths and improving the service (automatically collected data)

3. Retention and Use Period

• Retained and used for one year (365 days) from the date of collection, then destroyed; the destruction baseline is the server storage time (stored_at).
• Where retention is required by applicable law, information is kept for that period.
• If the data subject requests deletion, the information is destroyed without delay.

4. Provision to Third Parties

In principle, the Company does not provide personal information to third parties, except with the data subject's prior consent or where required by law.

5. Outsourcing of Processing and Overseas Transfer

The Company entrusts the processing of personal information to the following providers to operate the service.

• Cloudflare: Web hosting, request routing, serverless processing, security
• Google (Google Workspace): Google Sheets & Apps Script on Google Workspace (storage and processing of booking/inquiry data)
• 솔라피(SOLAPI): SMS delivery of booking/inquiry notifications

As a result of using these services, personal information may be processed and stored overseas. The details of such outsourcing and transfer are governed by the relevant contracts and each provider's privacy policy.

6. Analytics (Google Analytics)

• The Company uses Google Analytics 4 to improve the service and may collect usage statistics such as visited page path, device/browser information and approximate region.
• Personally identifying information (name, contact, email, inquiry content) and the full reference number are not sent to the analytics tool.
• Page addresses are sent at domain/path level only; search terms, UTM and other query strings are not sent.
• Analytics cookies are optional, and Google Analytics is not loaded before you consent. If you decline, booking, inquiries and all other features work normally.
• If you allow it, Google Analytics may use analytics cookies; you can change or withdraw your consent at any time via "Cookie settings" in the footer.

7. Rights of Data Subjects

Data subjects may request access, correction, deletion, or suspension of processing of their personal information; requests made to the contact below are handled without delay.

8. Destruction of Personal Information

Information is destroyed without delay when the retention period (one year from collection) expires or the purpose of processing is achieved; based on the storage time (stored_at), electronic files are deleted irrecoverably through a periodic destruction process.

9. Security Measures

Measures include restricting access rights, minimising the number of handlers, and minimal collection/normalisation of attribution data.

10. Privacy Officer and Technical Handling

• Data controller: Nautilus Dive Jeju
• Privacy officer: Bae Kyung-jo (Representative of Nautilus Dive)
• Technical operations processor: Chang Won-keun, FunnelHacker (scope: site operation)
• Phone: +82 10-8756-7856
• Privacy inquiries: hello@jejuscubadiving.com

11. Effective Date

This policy takes effect on July 31, 2026.