Privacy policy

Last updated November, 12, 2024

 

Who We Are

Halcyon Dive Systems (‘we’ or ‘us’ or ‘our’) gather and process your personal information in accordance with this privacy policy and in compliance with the relevant data protection Regulation and laws. This policy provides you with the necessary information regarding your rights and our obligations, and explains how, why and when we process your personal data.

Our registered office is at 24587 NW 178th Place High Springs, FL 32643. We can be contacted at info@halcyon.net.

 

Information That We Collect

We process your personal information to meet our legal, statutory and contractual obligations and to provide you with our services. We do not collect any unnecessary personal data from you and do not process your information in any way, other than as specified in this notice.

 

The personal data that we collect is:

• Name;
• Date of Birth;
• Email Address;
• Mobile Number;
• Gender;
• IP Address;
• Pictures containing personal data uploaded;

 

We collect information in the below ways:

Online form upon registration – provided by yourself;

Documents uploaded to the Service – provided by yourself;

Pictures uploaded to the Service – provided by yourself;

Medical Questionnaires uploaded to the Service – provided by yourself;

Server logs;

Information provided by our processors and their sub-processors, if any.

 

How We Use Your Personal Data

We take your privacy very seriously and we do not disclose, share or sell your data without your consent; unless required to do so by law. We only retain your data for as long as is necessary and for the purpose(s) specified in this notice. Where you have consented to us providing you with promotional offers and marketing, you are free to withdraw this consent at any time. 

 

The purposes and reasons for processing your personal data are detailed below:

• Provision of our services: We collect your personal data which is necessary to provide the services which include logging into our platform, or to facilitate connection between yourself and other users, or with other third parties such as by social media applications should you choose so;
• To manage our business needs: We carry out analysis to improve our service and the relative performance and functionality;
• Marketing: We will occasionally send you marketing information where we have assessed that it is beneficial to you as a customer and in our interests. Such information will be non-intrusive and is processed on the grounds of legitimate interests;
• Communication with the User: We use the information to be able to respond to you when you contact us and to communicate more information on our Service and related products;
• Compliance: To comply with our obligations and to enforce the terms of our websites and services – this includes safety and security needs such as verification of accounts or prevention against misconduct, whether we share with law enforcement, government agencies, or otherwise;
• Regulatory Obligations: We collect and store your personal data as part of our legal obligation for business accounting;
• Transfer of Information: We transfer some personal data to our processors, when required, in order to provide our services;
• Affiliates and Acquirers of our business or assets: We may share your information with affiliates under common control with us, who are required to comply with terms of confidentiality of information even with regards to your information. If we become involved in a takeover, securities offering, bankruptcy, reorganization, dissolution or similar transaction, we may share or transfer your information in connection with such transaction.

 

Your Rights

You have the right to access any personal information that we process about you and to request information about:

• What personal data we hold about you;
• The purposes of the processing;
• The categories of personal data concerned;
• The recipients to whom the personal data has/will be disclosed;
• How long we intend to store your personal data for;
• If we did not collect the data directly from you, information about the source.
• Right to erasure (‘right to be forgotten’)

 

If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.

 

You also have the right to request erasure of your personal data or to restrict processing (where applicable) in accordance with the data protection laws; as well as to object to any direct marketing from us; to exercise your data portability rights, and to be informed about any automated decision-making we may use.

If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.

 

Sharing and Disclosing Your Personal Information

We do not share or disclose any of your personal information without your consent, other than for the purposes specified in this Privacy Policy, where there is a legal requirement or where such is required to perform the services requested by you. Should we rely on processors, all processors acting on our behalf are contractually bound to only process your data in accordance with instructions from us and comply fully with data protection laws and any other appropriate confidentiality and security measures.

 

Safeguarding Measures

We take your privacy seriously and take every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorized access, alteration, disclosure or destruction and have several layers of security measures in place, including but not limited to: using SSL, TLS, encryptions, restricting accesses, authentication and authorization, using serverless infrastructure provided by mainstream companies such as Google.

 

Transfers Outside the EU

Personal data in the European Union is protected by the General Data Protection Regulation (GDPR) but some other countries may not necessarily have the same high standard of protection for your personal data. Sometimes we may have to share your data with third party processors which are based outside of the EU, however when we do so we will ensure that this is done under an adequacy decision or under standard contractual clauses approved by the EU Commission.

 

Consequences of Not Providing Your Data

You are not obligated to provide your personal information to us, however, as this information is required for us to provide you with our services we will not be able to offer some/all our services without it.

 

How Long We Keep Your Data

We only ever retain personal information for as long as is necessary and we have strict review and retention policies in place to meet these obligations. We keep your personal data for a minimum of 5 years after which time it will be destroyed. Nonetheless, other shorter or longer period may apply, on the basis of documented policies and procedures drafted on the basis of retaining personal information strictly as long as is necessary.

 

Right to be forgotten

If you wish to enforce your rights as per GDPR Art 17

"To strengthen the right to be forgotten in the online environment, the right to erasure should also be extended in such a way that a controller who has made the personal data public should be obliged to inform the controllers which are processing such personal data to erase any links to, or copies or replications of those personal data. 2 In doing so, that controller should take reasonable steps, taking into account available technology and the means available to the controller, including technical measures, to inform the controllers which are processing the personal data of the data subject’s request.”

Any user can request that their data be deleted from our servers. This is done by emailing us at info@halcyon.net with the subject: DATA DELETION. Halcyon will delete all data belonging to you in maximum 30 days (normally well before that).