Policies

Privacy Policy

Last updated: March 2026

At Dorsal — Diving & Ocean Adventures ("Dorsal", "we", "us"), we are committed to protecting the privacy and security of our customers' personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you visit our website or make a booking with us. By using our website, you consent to the practices described in this policy.

Information We Collect

When you visit our website or make a booking, we may collect the following:

  • Personal identification information — name, email address, phone number, and emergency contact details provided during the booking process.
  • Health & certification information — dive certifications, medical conditions, or fitness disclosures relevant to participation in water activities (collected where legally required or necessary for your safety).
  • Technical information — IP address, browser type, and device information collected automatically via cookies and analytics tools to improve our website.

How We Use Your Information

We use the information we collect to:

  • Process and confirm your bookings and payments.
  • Communicate with you about your upcoming experience, including safety briefings, meeting points, and weather updates.
  • Ensure your safety during activities by briefing our dive instructors and boat crew appropriately.
  • Respond to enquiries and provide customer support.
  • Send occasional promotional communications about new packages or offers — you may opt out at any time.
  • Improve our website and services based on usage patterns and feedback.
  • Detect and prevent fraud or misuse of our platform.

Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

  • Service providers — we share necessary information with trusted partners (e.g., payment processors, boat operators, dive centres) solely to deliver the experience you have booked. These partners are obligated to handle your data securely.
  • Legal requirements — we may disclose information if required by law or in response to valid legal requests.
  • Safety emergencies — in the event of a medical emergency, we may share relevant health information with emergency responders.

Data Security

We implement industry-standard security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. We do not take payments through this website and never ask for card details online. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Cookies

We use cookies and similar technologies to enhance your browsing experience and analyse website traffic. You may disable cookies through your browser settings, though this may limit some functionality of the website.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by applicable law. Booking records may be retained for up to 5 years for accounting and legal compliance purposes.

Your Rights

You have the right to:

  • Request access to the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data, subject to legal retention requirements.
  • Opt out of marketing communications at any time.

To exercise any of these rights, please contact us at info@dorsal.lk.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "last updated" date. We encourage you to review this policy periodically.

Contact Us

For questions or concerns about this Privacy Policy or how we handle your data, please contact us:

Chat with us