Privacy Policy

Effective Date: January 1, 2025 · Last Updated: January 1, 2026

NB DIVERS Co., Ltd. (hereinafter “Company”) establishes and discloses the following Privacy Policy to protect users’ personal information and handle related complaints promptly in accordance with the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection.

Article 1 – Personal Information Collected and Collection Methods

① Items Collected

  • Required: Name, contact information (phone number), email address, payment information (excluding card numbers; unique transaction ID only)
  • Optional: Diving certification number / issuing organization, health status information (standard medical questionnaire for diving participation)
  • Automatically collected: Service usage records, IP address, cookies, device information

② Collection Methods
Website booking/inquiry forms, email, phone, KakaoTalk channel, automatic collection during service use

Article 2 – Purpose of Collection and Use

  • Processing applications, reservations, and payments for scuba diving courses
  • Processing PADI certification applications and issuance
  • Dive tour / travel product reservations and safety management
  • Customer inquiry response and service improvement
  • Compliance with legal obligations (e.g., record retention under e-commerce law)

Article 3 – Retention and Use Period

Personal information is destroyed without delay once the purpose of collection and use has been achieved. However, the following information is retained for the applicable period in accordance with applicable laws:

ItemLegal BasisRetention Period
Contract / withdrawal recordsE-Commerce Act5 years
Payment / supply recordsE-Commerce Act5 years
Consumer complaint / dispute recordsE-Commerce Act3 years
Service access logsProtection of Communications Secrets Act3 months

Article 4 – Third-Party Disclosure

The Company does not provide users’ personal information to third parties in principle. Exceptions include:

  • When the user has given prior consent
  • When minimum information is provided to PADI for certification issuance
  • When required by law or requested by investigative agencies through legally prescribed procedures

Article 5 – Outsourcing of Personal Information Processing

SubcontractorOutsourced Tasks
Toss PaymentsPayment processing and identity verification
Google LLCReservation schedule management (Google Calendar)

Article 6 – Destruction Procedures and Methods

Personal information is transferred to a separate database after the purpose is achieved and destroyed after a set period in accordance with internal policies and applicable laws.

  • Electronic files: Permanently deleted using technically irrecoverable methods
  • Paper documents: Shredded or incinerated

Article 7 – User Rights and Exercise Methods

Users (or legal guardians for those under 14) may exercise the following rights at any time:

  • Request to view personal information
  • Request for correction of errors
  • Request for deletion
  • Request to suspend processing

To exercise these rights, please contact us by email (mail@nbdivers.com) or phone (02-423-6264).

Article 8 – Security Measures

  • SSL/TLS encrypted communication
  • Minimized access permissions and internal management plan
  • Payment information not stored (PG token-based processing)

Article 9 – Cookie Policy

The Company uses cookies to provide personalized services. Users may refuse cookie storage through browser settings, but some services may be restricted as a result.

Article 10 – Privacy Officer

For reports or consultations regarding personal information violations:

  • Personal Information Infringement Report Center: privacy.kisa.or.kr / 118 (no area code)
  • Supreme Prosecutors’ Office Cyber Crime Investigation: www.spo.go.kr / 02-3480-3573
  • National Police Agency Cyber Safety Bureau: cyberbureau.police.go.kr / 182 (no area code)

This policy is effective from January 1, 2025.