Privacy policy.

Last updated: August 2026

Who we are

Triton Sea School operates tritonseaschool.com. For data protection purposes we are the data controller for the account and training records held on this website. Licensed centres are separate businesses and are data controllers for the information they collect directly from you at the centre.

Contact: admin@tritonseaschool.com

What we collect

• Account details. Name, email address, phone number, date of birth and password.
• Health information. Answers to the medical declaration required before in water training. This is special category data under the UK and EU GDPR and we treat it accordingly.
• Consent and liability records. Signed release forms, and the parent or guardian details where the student is under 18.
• Training records. Courses booked, skills completed, quiz and exam results, certificates issued.
• Technical data. Standard server logs, and cookies needed to keep you logged in.

Why we collect it, and our legal basis

• To deliver your course and issue your certificate. Legal basis: performance of a contract.
• To keep you safe in the water. Medical information is processed on the basis of your explicit consent, and for the purposes of protecting your vital interests. You may withdraw consent, but we will not be able to train you in the water without it.
• To verify certificates. The verification page shows the certificate holder’s name, level, issuing centre and issue date to anyone entering a valid certificate number. Legal basis: legitimate interests in maintaining a trustworthy certification system.
• To meet our legal and insurance obligations. Legal basis: legal obligation and legitimate interests.

Children

Many of our students are under 18. Where a student is a minor, a parent or guardian must create or approve the account, complete the medical declaration and sign the release forms. We do not knowingly collect data directly from a child without that involvement. A parent or guardian may request access to, correction of, or deletion of their child’s data at any time.

Who we share it with

• Your licensed centre and your instructor, so they can teach you safely and record your progress.
• Our hosting and email providers, who process data on our instructions.
• Insurers or authorities, where there has been an incident or where we are required by law.

We do not sell your data and we do not share it for advertising.

How long we keep it

Certificates do not expire, so training records and certificate details are kept indefinitely so that a certificate can always be verified. Medical declarations and release forms are kept for as long as required for insurance and liability purposes, and then deleted. If you close your account, we delete your account data but may retain the minimum record needed to verify a certificate already issued.

Your rights

You have the right to request a copy of your data, to have inaccurate data corrected, to have data deleted, to restrict or object to processing, to data portability, and to withdraw consent where consent is the basis for processing. To exercise any of these, email admin@tritonseaschool.com.

If you are not satisfied with our response, you may complain to your national data protection authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection.

Cookies

We use cookies that are necessary for the site to work, including keeping you logged in to your account. We do not use advertising cookies.

Changes

If we change this policy we will update the date at the top of this page.