Privacy policy

Who uses BlueCurrent

Dive centres use BlueCurrent to run their business: bookings, trips, crew, customer records, forms, payments and accounting. Each dive centre’s data is kept separate from every other dive centre’s. If you are a customer of a dive centre, that dive centre decides what it records about you and why; please contact them about your booking.

Information we handle

• Customer details a dive centre records or you provide: name, email, phone, address, date of birth, emergency contact, certification level and diving history, and booking and trip details.
• Forms and waivers you complete, which can include health and medical answers that a dive centre is required to collect before diving, and your signature.
• Payments. Card details are entered directly into our payment processor’s secure checkout. BlueCurrent never receives or stores full card numbers or security codes; it keeps only the card brand, the last four digits and the payment result.
• Messages sent to or received from a dive centre through BlueCurrent’s email features.
• Staff accounts: name, email, role and sign-in details for dive-centre staff. Passwords are stored only as one-way hashes.
• Technical information needed to run the service securely, such as sign-in session cookies and server logs.

How we use it

Only to provide and secure the service for the dive centre you deal with: taking and managing bookings, preparing trips safely, collecting required forms, taking payments, sending booking emails and receipts, keeping accounting records, and preventing misuse. We do not sell personal information, and we do not use it for advertising.

QuickBooks data

A dive centre can connect its own Intuit QuickBooks Online company to BlueCurrent. With the dive centre’s authorisation, BlueCurrent reads that company’s name, chart of accounts and item list so the dive centre can match its BlueCurrent products and payment methods to its books. Where the dive centre enables it for a test (sandbox) company, BlueCurrent can record customers, invoices and payments there. The access tokens Intuit issues are stored encrypted and used only for that dive centre. QuickBooks data is never shared with other dive centres or third parties, and a dive centre can disconnect at any time from its Accounting settings or from within QuickBooks.

Service providers

We share information only with the providers needed to run BlueCurrent, each for its stated purpose:

• Render hosts the application and its database in the United States.
• Postmark sends and receives email on a dive centre’s behalf.
• CyberSource (a Visa company) processes card payments.
• Intuit QuickBooks, only when a dive centre connects it, as described above.

We may also disclose information where the law requires it.

How long we keep it

Records are kept while the dive centre uses BlueCurrent, because waivers, bookings and payment records must remain available to the dive centre for its safety, legal and accounting obligations. A dive centre can ask us to delete or export its data, and you can ask the dive centre, or us, to review, correct or delete information about you, subject to any record the law requires to be kept.

Security

Access is limited by staff role within each dive centre, and one dive centre cannot see another’s data. Connections use HTTPS, passwords are hashed, and stored integration credentials are encrypted. No system is perfectly secure; if we become aware of a breach affecting your information we will tell the affected dive centre, and you where appropriate.

Cookies

BlueCurrent uses only the cookies it needs to keep you signed in and to protect forms. It uses no advertising or cross-site tracking cookies.

Changes and contact

We will update this page when our practices change and show the new effective date above. For any privacy question or request, email info@dnsdiving.com.