Privacy Policy

Last updated: 23/08/2026

This Privacy Policy explains how Pitstop Divers collects, uses, stores and protects the personal data of users who visit the website, create an account, make purchases, request support, subscribe to the newsletter or use other services available through the website.

Pitstop Divers processes personal data in accordance with Regulation (EU) 2016/679 (“GDPR”), applicable Maltese data protection legislation and other applicable legal requirements.

1. Data Controller

The Data Controller responsible for the processing of personal data is:

Pitstop Divers di Francesco Cordone

50, Triq Gafa
Gafa Court, Flat 1
MST 2309
Malta

VAT Number: MT2368-2113

Email: privacy@pitstopdivers.com

For enquiries concerning personal data protection or the exercise of data protection rights, users may contact Pitstop Divers at the email address above.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data collected through the Pitstop Divers website and related services, including:

account registration and management;
purchases and order management;
payments;
shipping and delivery;
customer support;
the Customer Support Hub;
B2B Activation requests;
contact forms;
newsletters and marketing communications;
website usage analytics;
administrative, tax and accounting activities;
fraud, abuse and security prevention.

3. Categories of Personal Data We Collect

Depending on how the website is used and which services are requested, Pitstop Divers may collect different categories of personal data.

Identification and Contact Data

This may include:

first and last name;
address;
email address;
telephone number;
country of residence or business;
information required for delivery.

Account Data

Because customers are required to create an account in order to make purchases through the website, Pitstop Divers processes the information necessary to register, authenticate and manage customer accounts.

This information may include email address, username, profile information, billing and shipping addresses, order history and other information associated with the account.

Passwords are managed through the technical systems used by the website and are not made available to Pitstop Divers in plain text.

Order Data

When a purchase is made, Pitstop Divers may process information relating to:

products purchased;
quantities;
order value;
payment method;
billing address;
shipping address;
order status;
shipping;
returns;
refunds;
warranties;
after-sales support;
communications relating to the transaction.

4. Business (B2B) Customer Data

When a customer operates within a commercial or professional activity, Pitstop Divers may collect additional information necessary to manage the B2B relationship.

This information may include:

business or company name;
trading name;
business or professional address;
VAT Number;
tax information;
professional role or position;
information relating to the commercial or professional activity;
information required for invoicing;
commercial conditions applicable to the account.

5. B2B Activation and Business Verification

Registering a Business account does not automatically provide access to B2B commercial conditions.

When a customer requests activation through the B2B Activation category of the Customer Support Hub, Pitstop Divers may request additional information or documentation reasonably necessary to verify the applicant’s commercial or professional activity.

Depending on the circumstances, this may include a VAT Number, information about the business or professional activity, company or professional documentation and other information relevant to the verification process.

Information and documents provided may be used to:

assess the B2B Activation request;
verify the existence of the applicant’s commercial or professional activity;
manage the Business account;
prevent improper or fraudulent use of B2B conditions;
comply, where necessary, with tax, accounting or legal obligations.

Such information is retained only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required under applicable law.

Pitstop Divers limits access to such documentation to persons who have a genuine need to access it in connection with their duties.

6. Payments

Electronic payments made through the website may be processed through Stripe.

Depending on the customer’s device, browser, country and available payment method, Stripe may enable payments using:

credit cards;
debit cards;
Apple Pay;
Google Pay;
other payment methods that may be made available.

Complete payment card details are not stored directly by Pitstop Divers when the payment is processed by the payment service provider.

Pitstop Divers may receive and retain information relating to the transaction, such as payment status, amount, currency, transaction identifier, payment method used and other information necessary to manage orders, refunds, disputes and accounting obligations.

Where payment is made by bank transfer, Pitstop Divers may process information contained in the banking transaction where necessary to identify, reconcile and document the payment.

Processing carried out directly by payment service providers is also subject to their respective privacy policies.

7. Purposes and Legal Bases for Processing

Pitstop Divers processes personal data only where an appropriate legal basis exists.

Performance of a Contract

Personal data may be processed where necessary to:

create and manage an account;
receive and process an order;
manage payment;
arrange shipping;
provide assistance relating to a purchase;
manage returns and refunds;
manage warranties and repairs;
provide services requested by the customer;
manage commercial relationships with B2B customers.

Compliance with Legal Obligations

Pitstop Divers may process and retain personal data where necessary to comply with:

tax obligations;
accounting obligations;
administrative requirements;
regulatory requirements;
judicial requirements;
consumer protection obligations;
other applicable legal requirements.

Legitimate Interests

Where permitted by law, certain processing activities may be based on the legitimate interests of Pitstop Divers, including:

protecting the website and customer accounts;
preventing fraud and abuse;
managing and documenting support requests;
establishing, exercising or defending legal rights;
improving the organisation and security of services;
managing existing commercial relationships.

Before relying on legitimate interests as a legal basis, Pitstop Divers considers the rights and fundamental freedoms of the individuals concerned.

Consent

Where required by applicable law, Pitstop Divers relies on the user’s consent as a legal basis, particularly for certain marketing activities, newsletters and non-essential tracking technologies.

Consent may be withdrawn at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

8. Newsletter and Marketing Communications

Users may choose to subscribe to the Pitstop Divers newsletter or receive promotional communications.

Where required by law, such communications are sent on the basis of the user’s consent.

Subscription to the newsletter is not required to create an account or purchase products.

Newsletter subscription information is stored within the website database and used to manage the requested communications.

Users may withdraw their consent and stop receiving promotional communications at any time by using the unsubscribe mechanism provided in the communications received or by contacting Pitstop Divers.

Communications strictly necessary for managing accounts, orders, payments, security, customer support or other services requested by the customer are not considered promotional communications and may continue to be sent where necessary.

9. Customer Support Hub

When a user submits a ticket through the Customer Support Hub, Pitstop Divers processes the information provided in order to manage and respond to the request.

Depending on the selected category, this information may relate to, among other matters:

orders;
shipping and delivery;
returns;
return authorisations;
refunds;
Consumer support;
Business support;
B2B Activation;
warranties;
repairs;
products;
technical matters;
administrative requests;
general enquiries.

Pitstop Divers may also retain the communication history necessary to properly document and manage the request.

10. Contact Forms

When a user submits a contact form available on the website, Pitstop Divers may collect the user’s name, email address, subject, message content and any other information voluntarily provided.

Such information is used to receive, manage and respond to the request.

Users are encouraged not to include personal information that is unnecessary for the handling of their request.

11. Shipping and Carriers

In order to deliver orders, Pitstop Divers may provide the necessary personal data to shipping carriers, postal operators and logistics providers selected to fulfil and deliver the order.

The information provided may include:

first and last name;
delivery address;
telephone number;
email address;
information necessary to manage shipment and delivery.

Pitstop Divers provides only the information reasonably necessary to manage the shipment.

The relevant carrier or logistics provider may carry out additional processing in accordance with applicable law and its own privacy policy.

12. Accounting, Invoicing and Professional Advisers

Information relating to orders, payments, invoices and transactions may be processed for administrative, tax and accounting purposes.

Where necessary, such information may be provided to Pitstop Divers’ accountant, tax advisers, legal advisers or other professional advisers.

Data may also be managed using administrative, accounting, customer management or Customer Relationship Management systems used by Pitstop Divers.

Pitstop Divers selects such service providers taking into account, among other factors, applicable data protection requirements.

13. Website Hosting and Infrastructure

The website and its databases use hosting services provided by Hostinger.

As part of the provision of hosting and technical infrastructure services, information relating to users and the website may be stored or processed through systems operated by Hostinger and its authorised service providers or subprocessors.

The location of the infrastructure used may vary depending on the services and technical configurations adopted.

Pitstop Divers therefore does not guarantee that every individual technical processing operation is carried out exclusively within a particular data centre.

14. Technical and Browsing Data

Certain technical information may be collected automatically when the website is used.

This information may include:

IP address;
browser type;
device type;
operating system;
date and time of connection;
pages visited;
referring URL;
technical information relating to the session;
security logs;
information relating to errors or technical issues.

Such information may be used to ensure the operation and security of the website, identify technical problems, prevent abuse and improve the services provided.

15. Google Analytics

Pitstop Divers uses Google Analytics to obtain statistical information about website usage and to understand website performance and how users interact with it.

Depending on the configuration used, Google Analytics may process information relating to the user’s device, browser, interactions with the website and other identifiers or technical data.

Where the use of Google Analytics or associated technologies requires consent under applicable law, those technologies are activated in accordance with the preferences expressed by the user through the website’s consent management system.

Further information about the use of cookies and similar technologies is available in the Cookie Policy.

16. Cookies and Similar Technologies

The website uses cookies and similar technologies for different purposes.

Certain cookies are strictly necessary for the operation of the website, security, account management, shopping cart, checkout and other functionality requested by the user.

Other cookies or technologies may be used for statistical, analytical or other non-essential purposes.

Where required by law, such technologies are used only after the user has expressed their preferences through the website’s consent management system.

Users should consult the Cookie Policy for detailed information about the categories of cookies used and the available consent preferences.

17. Recipients of Personal Data

Pitstop Divers does not sell the personal data of its customers or website users.

Personal data may be disclosed, to the extent necessary for their respective functions, to parties including:

hosting and infrastructure providers;
payment service providers;
banks and financial institutions;
shipping carriers and logistics providers;
accountants and tax advisers;
professional advisers;
IT service providers;
administrative or customer management software providers;
analytics service providers;
public, judicial, tax, regulatory or supervisory authorities where required by law.

Where required under the GDPR, parties processing personal data on behalf of Pitstop Divers are subject to appropriate contractual arrangements or other applicable safeguards.

18. International Transfers of Personal Data

Certain service providers used by Pitstop Divers may operate through infrastructure, affiliated companies or subprocessors located outside Malta or the European Economic Area (EEA).

Where personal data is transferred to a third country and such transfer is subject to the GDPR, Pitstop Divers implements or requires the use of appropriate transfer mechanisms where necessary.

These may include European Commission adequacy decisions, Standard Contractual Clauses or other legally recognised safeguards.

19. Data Retention

Pitstop Divers retains personal data only for as long as necessary for the purposes for which it was collected and to comply with applicable obligations.

Retention periods may vary depending on the category of data and purpose of processing.

In particular:

account data may be retained for the duration of the account and subsequently where necessary to comply with legal obligations or protect legal rights;
order, invoice and payment information is retained for the periods required under applicable tax, accounting and commercial legislation;
customer support information may be retained for the period necessary to manage the request and protect the rights of the parties;
B2B Activation information and any verification documents are retained for the period reasonably necessary for verification, management of the Business relationship and any applicable legal obligations;
data used for marketing purposes is retained until consent is withdrawn or until it is no longer necessary for the intended purpose, subject to retaining limited information where necessary to document an opt-out or objection;
technical and security information may be retained for the period reasonably necessary for security, fraud prevention and incident management.

When personal data is no longer required, it is deleted, anonymised or otherwise rendered non-identifiable, unless further retention is required or permitted by law.

20. Data Security

Pitstop Divers implements reasonable and proportionate technical and organisational measures designed to protect personal data against:

unauthorised access;
loss;
alteration;
destruction;
unauthorised disclosure;
unlawful or improper use.

However, no information system or transmission over the Internet can be considered completely risk-free.

Pitstop Divers reviews its security measures according to operational requirements, the technologies used and reasonably identifiable risks.

21. Data Subject Rights

Where provided by the GDPR, individuals may exercise their rights in relation to personal data processed by Pitstop Divers.

These rights may include:

the right of access to personal data;
the right to rectify inaccurate or incomplete data;
the right to erasure;
the right to restriction of processing;
the right to data portability, where applicable;
the right to object to processing, where applicable;
the right to withdraw consent at any time where processing is based on consent;
the right, where provided by law, not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects the individual.

The exercise of these rights is subject to the conditions and limitations established by applicable law.

22. How to Exercise Your Rights

To exercise a data protection right, individuals may contact:

privacy@pitstopdivers.com

The request should contain sufficient information to enable Pitstop Divers to identify the relevant data and understand the nature of the request.

Where reasonably necessary to protect personal data against unauthorised access, Pitstop Divers may request additional information to verify the identity of the person making the request.

Requests will be handled within the time limits established by applicable law.

23. Right to Object to Direct Marketing

Users may object at any time to the use of their personal data for direct marketing purposes.

Where marketing communications are based on consent, users may also withdraw that consent at any time.

Withdrawal of consent or objection to promotional communications does not affect communications necessary for managing an account, orders, payments, security or customer support requests.

24. Data Protection Complaints

Individuals have the right to lodge a complaint with the competent supervisory authority if they believe that the processing of their personal data infringes applicable data protection law.

As Pitstop Divers is established in Malta, the Maltese supervisory authority responsible for data protection is the Information and Data Protection Commissioner (IDPC).

Individuals may contact Pitstop Divers before lodging a complaint to allow the matter to be reviewed and, where possible, resolved directly.

This does not restrict the individual’s right to lodge a complaint with the competent supervisory authority.

25. Children’s Data

The Pitstop Divers website and its online sales services are not specifically designed for the collection of personal data from children.

Pitstop Divers does not knowingly collect personal data from children for marketing purposes.

If Pitstop Divers becomes aware that personal data relating to a child has been collected inappropriately, it will take reasonable measures in accordance with applicable law.

26. Third-Party Links and Services

The website may contain links to websites, services or platforms operated by third parties.

When a user leaves the Pitstop Divers website and accesses an external service, the processing of personal data may be subject to the privacy policy of the party operating that service.

Pitstop Divers does not control how independent third-party websites process personal data.

27. Changes to This Privacy Policy

Pitstop Divers may update this Privacy Policy to reflect changes in legislation, technology, operations or the services used.

The updated version will be published on the website and will indicate the date of the latest revision.

Where a change results in a material alteration to the processing of personal data, Pitstop Divers will take appropriate steps to inform affected individuals or obtain new consent where required by law.

28. Relationship with Other Website Policies

This Privacy Policy should be read together with other applicable terms and policies available on the website, including, where relevant:

Terms & Conditions
Cookie Policy
Payment Methods
Shipping & Delivery
Returns & Refunds
Warranty & Repairs

These documents govern specific aspects of the services provided by Pitstop Divers and may contain additional information relevant to the processing of personal data associated with those activities.

29. Contact Information

For questions regarding this Privacy Policy or the processing of personal data: