Privacy Policy

Last updated: 26 June 2026

This Privacy Policy explains how Apnea Bali ("we", "us", "our") collects, uses, stores and protects information you provide to us through our website www.apneabali.com and through any direct communication with us (email, WhatsApp, in-person at our school in Tulamben). By using our website or contacting us, you agree to the practices described below.

1. Who we are

Apnea Bali is a freediving school operating from Tulamben, Karangasem Regency, Bali, Indonesia. For any data-protection questions, you can contact us at [email protected].

2. What information we collect

We collect the minimum information needed to respond to enquiries and operate our school:

• Contact form data: when you submit the contact form on our website, we receive the name, email address and message you provide. The form is processed via Formspree, which forwards the submission to our inbox.
• WhatsApp & email messages: when you contact us directly, we retain the conversation for as long as needed to answer your questions and follow up on any booking.
• Course bookings: if you book a course, we collect basic personal details (name, nationality, date of birth, medical-fitness declaration, emergency contact) needed to issue certifications and comply with the safety standards of our certifying agencies (AIDA, Molchanovs).
• Website analytics: we use Google Analytics to understand how visitors use the site (pages viewed, time on page, country, device). This data is aggregated and does not identify you personally.
• Server logs: our hosting provider records standard request logs (IP address, browser user agent, page requested, timestamp) for security and debugging purposes.

3. How we use your information

• To respond to your enquiry or booking request.
• To deliver freediving courses you have booked and to issue certifications to the relevant agency (AIDA, Molchanovs).
• To send transactional emails related to your booking (confirmations, schedule changes, pre-arrival information).
• To improve the website and our service based on aggregated analytics.
• To comply with legal obligations.

We do not sell, rent or trade your personal information to third parties for marketing purposes. We do not send promotional newsletters unless you have explicitly subscribed.

4. Third-party services we use

To operate the website and the school, we rely on a small number of third-party services that may process your data:

• Cloudflare — content delivery, security and basic analytics for the website.
• Formspree — handles contact-form submissions and forwards them to our inbox.
• Google Analytics — anonymous website usage statistics.
• AIDA International and Molchanovs Movement — the certifying agencies. When you complete a course we register your certification with the relevant agency, who maintain their own records.

Each of these providers has its own privacy policy governing how they handle data.

5. Cookies

Our website uses a small number of cookies, all functional or analytical:

• Session cookies — needed for basic website functionality (PHP session).
• Google Analytics cookies — anonymous usage statistics.
• Cloudflare cookies — for security (bot protection).

You can disable cookies in your browser settings; the website will continue to function but anonymous analytics will not be collected from your visit.

6. Your rights (GDPR / equivalent)

If you are a resident of the European Economic Area, the United Kingdom, or a jurisdiction with similar data-protection laws, you have the right to:

• Request a copy of the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete data we no longer need (subject to our obligations to keep certification records).
• Withdraw any consent you have previously given.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

7. Data retention

We keep enquiry messages for up to 24 months from the date of contact. Booking and certification records are kept for as long as required by the certifying agencies (typically 5–10 years) for safety and verification purposes. Anonymous analytics data is retained according to Google Analytics' standard retention period.

8. Security

Our website is served over HTTPS with modern TLS encryption. We restrict access to personal data to the team members who need it to perform their work. No system is 100% secure, but we apply reasonable measures consistent with our scale.

9. Children

Our courses are open to participants from age 12 with parental/guardian consent. We do not knowingly collect personal information from children under 12 through the website. If you believe we have done so, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent change. Material changes will be highlighted on the homepage for a reasonable period.

11. Contact

Questions about this Privacy Policy or about how we handle your data:

Apnea Bali
Jalan Pura Puseh, Tulamben
Kubu, Karangasem Regency, Bali, Indonesia
[email protected]
WhatsApp: +62 822-6660-1039