Policies

CHA CHA CHA DIVE SHOP
BOOKING, PAYMENT, CANCELLATION, INSURANCE AND FESTIVE SEASON POLICY

Booking and Payment Terms

A 30% deposit is required to confirm reservations outside the peak holiday season. The remaining balance must be paid no later than three days before the scheduled activity.

Reservations taking place from December 20 through January 10 require full payment at the time of booking. Due to limited availability during this period, all payments are non-refundable, except when the activity is cancelled by Cha Cha Cha Dive Shop because of unsafe weather, adverse maritime conditions, an official port closure, or another operational circumstance attributable to the dive shop.

A reservation is not considered confirmed until the corresponding payment has been received.

Festive Season Surcharges

The following additional charges apply to activities scheduled on December 31 and January 1:

Diving activities: An additional $99 USD per person, per session.

Private snorkeling charters: An additional $150 USD per four-hour charter.

Festive season surcharges must be paid in full at the time of booking and are non-refundable, except when Cha Cha Cha Dive Shop cancels the activity. Regular activity rates and all other applicable charges remain in effect in addition to these surcharges.

General Cancellation Policy

For activities scheduled outside the peak holiday period, cancellations made at least 10 calendar days before the scheduled activity are eligible for a full refund.

Cancellations made less than 10 calendar days before the scheduled activity are non-refundable.

No-shows and participants who arrive too late to join the scheduled departure will forfeit the full amount paid.

Rescheduling Policy

Requests to reschedule must be submitted at least 48 hours before the scheduled activity. Approved changes are subject to availability and may be made without an additional rescheduling fee.

Requests received less than 48 hours in advance will be treated as late cancellations and will not be eligible for a refund or complimentary rescheduling.

Any difference in price resulting from a change of date, activity, number of participants, equipment requirements, or applicable seasonal rates must be paid before the new reservation is confirmed.

Personal, Medical and Travel-Related Circumstances

No refund will be issued when a participant is unable to attend, begin, complete, or continue an activity because of personal circumstances, illness, injury, ear or equalization problems, seasickness, anxiety, decompression-related conditions, failure to meet medical or certification requirements, transportation delays, missed ferries or cruise schedules, or any other circumstance not attributable to Cha Cha Cha Dive Shop.

This provision also applies when a participant voluntarily decides not to participate or to discontinue the activity after it has begun.

Dive Accident Insurance and Medical Responsibility

Although not mandatory, specialized dive accident insurance is considered essential and is strongly recommended for every participant. Coverage should include diving-related injuries, decompression illness, emergency transportation or evacuation, hyperbaric chamber treatment, hospitalization, medical care, and repatriation when applicable.

Participants who choose to dive without appropriate insurance acknowledge and accept full personal and financial responsibility for any medical emergency, evaluation, transportation, evacuation, treatment, hospitalization, hyperbaric chamber services, medication, follow-up care, or other related expense arising before, during, or after the activity.

To the fullest extent permitted by applicable law, Cha Cha Cha Dive Shop shall not be responsible for medical expenses or costs resulting from a participant’s illness, pre-existing condition, injury, diving-related condition, decompression illness, ear or equalization problem, or any other personal medical circumstance.

Dive accident insurance may be obtained directly through Divers Alert Network (DAN) at:

https://apps.dan.org/join-dan/?do=dw&rcsrc=qr&rc=w420058

Each participant is solely responsible for reviewing and understanding the coverage, exclusions, eligibility requirements, geographic limitations, waiting periods, and terms of any insurance policy purchased. Cha Cha Cha Dive Shop is not the insurer and does not determine or guarantee coverage, claim approval, reimbursement, or payment of medical expenses.

Weather, Port Closures and Operational Cancellations

Safety is our highest priority. If Cha Cha Cha Dive Shop cancels an activity because of unsafe weather, adverse maritime conditions, an official port closure, a mechanical issue, or another operational circumstance attributable to the dive shop, the client may choose between:

Rescheduling the cancelled activity, subject to availability; or
Receiving a full refund for the activity cancelled by Cha Cha Cha Dive Shop.

Weather and maritime conditions are evaluated according to official port authority guidance and the professional judgment of Cha Cha Cha Dive Shop. Changes to dive sites, departure times, routes, or itineraries made for safety or operational reasons do not constitute a cancellation when the scheduled activity can still be safely provided.

Emergencies and Exceptional Circumstances

We understand that unexpected situations may occur. Clients should contact us as soon as possible if an emergency affects their reservation. Cha Cha Cha Dive Shop may evaluate exceptional cases individually; however, contacting us does not guarantee a refund, credit, rescheduling, or exemption from this policy.

How to Cancel or Reschedule

All cancellation or rescheduling requests must be submitted in writing to:

info@chachachadivecozumel.mx

The request will be considered received only after written confirmation from Cha Cha Cha Dive Shop. Refund eligibility will be determined according to the date and time the request was received.

By making a payment, the client acknowledges having read, understood, and accepted this booking, payment, cancellation, rescheduling, insurance, medical responsibility, and festive season policy on behalf of all participants included in the reservation.

CHA CHA CHA DIVE SHOP COMPREHENSIVE PRIVACY NOTICE Last updated: August 10, 2026 1. Identity of the Data Controller CHA CHA CHA GARCIN DIVING CENTER, S.A. DE C.V., operating commercially as “Cha Cha Cha Dive Shop,” is responsible for collecting, using, storing, protecting, and otherwise processing your personal data. Registered address: Carr. Costera Sur Km 6.5 Zona Hotelera Sur 77675 Cozumel, Quintana Roo, Mexico Email: [info@chachachadivecozumel.mx](mailto:info@chachachadivecozumel.mx) Telephone: +52 987 111 7359 This Privacy Notice applies to visitors to our website, customers, prospective customers, participants, companions, and any person who communicates or interacts with Cha Cha Cha Dive Shop through our website, booking systems, forms, email, telephone, WhatsApp, social media, payment platforms, waivers, or in person. 2. Personal Data We Collect Depending on your interaction with us and the services requested, we may collect the following categories of personal data: Contact and identification information: * Full name; * Date of birth and age; * Nationality; * Address; * Email address; * Telephone number; * Identification documents when required; * Parent or legal guardian information for minors; and * Emergency contact information. Reservation and diving information: * Activity dates and reservation details; * Hotel, cruise ship, accommodation, or pickup location; * Diving certification agency, certification level, and certification number; * Diving experience, number of dives, and date of the most recent dive; * Training records and course information; * Equipment sizes and rental requirements; * Preferred language; * Travel schedule or transportation information when relevant to the service; and * Special requests or information voluntarily provided in connection with the reservation. Payment and billing information: * Billing name and address; * Tax or invoicing information; * Payment amount, currency, status, and transaction reference; * Partial payment-card information made available by the payment processor; and * Refund, dispute, or chargeback information. Full payment-card details are processed by the applicable payment provider and are generally not directly stored or controlled by Cha Cha Cha Dive Shop. Communications and content: * Emails, WhatsApp messages, form submissions, reviews, requests, complaints, and customer-service communications; * Responses to surveys or promotional campaigns; * Photographs, videos, testimonials, or other content voluntarily submitted or separately authorized for use; and * Communications made through Facebook, Instagram, WhatsApp, or other Meta platforms. Technical and website information: * Internet Protocol address; * Browser and device type; * Operating system; * Language and approximate location; * Cookie identifiers and advertising identifiers; * Pages visited, buttons selected, time spent on the website, referring pages, and booking activity; and * Information regarding interactions with emails, advertisements, and social media content. 3. Sensitive Personal Data Because diving and water activities involve physical exertion and specific medical considerations, we may collect sensitive personal data relating to: * Current or previous medical conditions; * Illnesses, injuries, surgeries, or hospitalizations; * Medications; * Pregnancy; * Ear, sinus, respiratory, cardiovascular, neurological, or equalization conditions; * Allergies; * Physical fitness and ability to participate; * Medical clearance or physician information; * Diving accidents or decompression-related conditions; * Dive accident insurance; and * Information required for emergency response. Sensitive personal data will be processed only when necessary to evaluate eligibility, support participant safety, comply with training-agency requirements, respond to an emergency, document an incident, or comply with legal obligations. When required by applicable law, Cha Cha Cha Dive Shop will request the participant’s express consent for the processing of sensitive personal data. 4. How We Collect Personal Data We may collect personal data: * Directly from you through forms, reservations, waivers, emails, WhatsApp, telephone calls, social media, payments, or in-person interactions; * From the person making a reservation on behalf of a group; * From a parent or legal guardian; * Through Wix Forms, Wix Bookings, Wix Payments, WaiverForever, and similar service platforms; * Through Stripe, PayPal, or other payment processors; * Through Google Analytics, Meta Pixel, cookies, and comparable technologies; * Through Facebook, Instagram, WhatsApp, and other Meta services; and * From certification or training agencies when verification is requested or authorized. A person who submits information on behalf of another participant confirms that they are authorized to provide that information and to make this Privacy Notice available to the participant. 5. Primary Purposes of Processing Your personal data may be processed for purposes necessary to provide the requested services, including: * Responding to inquiries and preparing quotations; * Creating, confirming, modifying, and managing reservations; * Processing payments, deposits, refunds, invoices, disputes, and chargebacks; * Providing diving, snorkeling, training, certification, equipment rental, transportation, and related services; * Verifying identity, age, certification, experience, and eligibility; * Evaluating medical or safety requirements; * Completing waivers, releases, medical questionnaires, and training documentation; * Coordinating boats, captains, instructors, divemasters, guides, equipment, pickup locations, and schedules; * Communicating operational information, payment reminders, waivers, schedule changes, weather alerts, and safety instructions; * Responding to emergencies, accidents, incidents, or insurance matters; * Providing customer service and resolving complaints; * Maintaining accounting, tax, operational, safety, and legal records; * Preventing fraud, misuse, unauthorized transactions, and security incidents; * Establishing, exercising, or defending legal claims; and * Complying with applicable laws, regulations, maritime requirements, and lawful requests from authorities. If you do not provide information that is necessary for these purposes, Cha Cha Cha Dive Shop may be unable to confirm a reservation or safely provide the requested service. 6. Marketing and Secondary Purposes With your consent or where otherwise permitted by applicable law, we may use your contact and interaction information to: * Send promotions, special offers, newsletters, updates, and information about future activities; * Communicate through email, WhatsApp, Facebook, Instagram, and other Meta platforms; * Measure the effectiveness of advertisements and promotional campaigns; * Create website and advertising audiences based on interactions with our website or content; * Personalize advertising and website content; * Conduct customer satisfaction surveys; * Analyze customer preferences and improve our services; and * Publish photographs, videos, reviews, or testimonials when separately authorized. These purposes are secondary and are not required to provide the contracted services. You may withdraw from promotional communications at any time by: * Selecting the unsubscribe option included in a promotional email; * Replying “STOP” to an applicable WhatsApp promotional message; or * Emailing [info@chachachadivecozumel.mx](mailto:info@chachachadivecozumel.mx) with the subject “Marketing Opt-Out.” Opting out of marketing will not prevent us from sending transactional, reservation, payment, safety, or service-related communications. 7. Cookies and Tracking Technologies Our website may use first-party and third-party cookies, pixels, tags, software development kits, and similar technologies. These technologies may include: Essential technologies: Required for website security, navigation, reservations, payments, language preferences, and basic functionality. Analytics technologies: Used to understand website traffic, performance, visitor behavior, and service usage, including Google Analytics. Advertising technologies: Used to measure campaigns, personalize advertising, create or measure audiences, and show relevant advertisements, including Meta Pixel and other Meta advertising tools. You may manage available preferences through the website’s cookie settings and through your browser or device settings. Blocking certain technologies may affect website functionality, reservation tools, or payment services. Google, Meta, Wix, and other providers may process information according to their own privacy notices and may associate website activity with information they already possess when you are logged into their services. 8. Payment Processing Online payments may be processed through Wix Payments, Stripe, PayPal, or another authorized payment provider. Payment providers may collect and process payment-card details, billing information, device information, fraud-prevention data, and transaction information under their own privacy notices and security procedures. Cha Cha Cha Dive Shop may receive payment confirmation, transaction identifiers, payment status, card type, and limited card details but does not control how independent payment providers process information within their own systems. 9. Social Media and Messaging Platforms When you contact or interact with us through Facebook, Instagram, WhatsApp, or another social or messaging platform, both Cha Cha Cha Dive Shop and the applicable platform may process information relating to that interaction. Meta and other platform providers may independently collect device data, identifiers, profile information, usage activity, and advertising information according to their own privacy terms and account settings. Messages sent through social media or WhatsApp should not contain unnecessary sensitive medical or financial information. When sensitive information is required, we may direct you to an appropriate form or secure process. 10. Sharing and International Processing Personal data may be disclosed or made available, only when reasonably necessary, to: * Wix and website, hosting, reservation, and communication providers; * Stripe, PayPal, Wix Payments, banks, and payment processors; * WaiverForever and providers of electronic waivers or participant documentation; * Google, Meta, and analytics, advertising, or communication providers; * Captains, instructors, divemasters, guides, vessel operators, and authorized personnel involved in providing the service; * Training and certification agencies; * Medical professionals, emergency responders, hospitals, hyperbaric facilities, insurers, or evacuation providers in an emergency; * Accountants, legal advisers, information-technology providers, and other professional service providers; * Government, maritime, judicial, tax, consumer-protection, or law-enforcement authorities when legally required; and * A successor entity in connection with a merger, acquisition, restructuring, or transfer of business operations, subject to applicable data-protection requirements. Some providers may process or store personal data outside Mexico. In such cases, information may be subject to the laws and lawful authority requests of the country where it is processed. Cha Cha Cha Dive Shop requires service providers acting on its behalf to process personal data only for authorized purposes and with appropriate confidentiality and security protections, when applicable. We do not sell customer lists or personal data in exchange for monetary compensation. 11. Data Retention Personal data will be retained only for the period reasonably necessary to: * Provide the requested services; * Maintain reservation, payment, waiver, training, and safety records; * Satisfy accounting, tax, consumer, and legal obligations; * Respond to disputes, complaints, accidents, insurance claims, or chargebacks; * Enforce agreements and defend legal claims; and * Fulfill the purposes described in this Privacy Notice. Retention periods may vary according to the type of information and applicable legal requirements. When information is no longer required, it will be deleted, securely destroyed, blocked, or anonymized, as appropriate. Marketing information may be retained until consent is withdrawn or the individual requests to stop receiving promotional communications, subject to any information required to document and respect that request. 12. Security Measures Cha Cha Cha Dive Shop applies reasonable administrative, technical, and physical safeguards intended to protect personal data against loss, unauthorized access, misuse, alteration, disclosure, or destruction. Access is limited to personnel and providers who require the information for authorized business, operational, safety, or legal purposes. No internet transmission or electronic storage system can be guaranteed to be completely secure. If we identify a security incident that may materially affect your rights, we will take the measures and provide the notifications required by applicable law. 13. Minors Reservations and activities involving a person under 18 years of age require the involvement and authorization of a parent or legal guardian. The parent or legal guardian is responsible for providing accurate information, reviewing applicable forms and policies, and authorizing the processing of the minor’s personal data when required. If we learn that personal data belonging to a minor was submitted without the required authorization, we may request verification, restrict processing, or delete the information, except when retention is required for safety, contractual, or legal reasons. 14. ARCO Rights Under Mexican data-protection law, you may exercise the following rights: Access: Request confirmation of whether we process your personal data and obtain information about that processing. Rectification: Request correction of inaccurate, incomplete, or outdated personal data. Cancellation: Request deletion or blocking of personal data when legally appropriate. Opposition: Object to the processing of personal data for specific purposes when legally appropriate. To exercise an ARCO right, email: [info@chachachadivecozumel.mx](mailto:info@chachachadivecozumel.mx) Subject: “ARCO Rights Request” The request should include: * Your full name and contact information; * A copy of an identification document or other information sufficient to verify your identity; * If submitted by a representative, documentation establishing their authority; * A clear description of the personal data involved; * The specific ARCO right you wish to exercise; * The requested correction and supporting documentation, when applicable; and * Any information that may help us locate the relevant records. We will respond within the periods established by applicable law. The determination will generally be communicated within 20 days after receiving a complete request and, if granted, implemented within the following 15 days. These periods may be extended once when legally justified. A request may be denied or limited when permitted by law, including when identity cannot be verified, the data is not held by us, retention is legally required, or the request may affect the rights of another person. 15. Withdrawal of Consent You may request the withdrawal of consent for processing that relies on your consent by emailing [info@chachachadivecozumel.mx](mailto:info@chachachadivecozumel.mx). The request must contain sufficient information to verify your identity and identify the processing for which consent is being withdrawn. Withdrawal will not have retroactive effect and may not apply when processing is necessary to fulfill an agreement, comply with a legal obligation, maintain required records, address a safety matter, or establish or defend a legal claim. Withdrawing consent for information necessary to provide a service may prevent us from confirming or continuing the requested activity. 16. Limiting Use or Disclosure You may request that we limit the use or disclosure of your personal data by contacting [info@chachachadivecozumel.mx](mailto:info@chachachadivecozumel.mx) and describing the limitation requested. You may also manage: * Email marketing through the unsubscribe link; * WhatsApp promotions by replying “STOP”; * Cookies through the website’s cookie settings; * Browser cookies through your browser settings; and * Personalized advertising through your Google, Meta, browser, or device privacy settings. 17. Third-Party Websites Our website, messages, or social media may contain links to websites or services operated by third parties, including payment processors, training agencies, insurers, social networks, booking platforms, and travel providers. Cha Cha Cha Dive Shop does not control the privacy or security practices of independent third parties. You should review their privacy notices before submitting personal information. 18. Changes to This Privacy Notice We may update this Privacy Notice to reflect changes in our services, technologies, providers, legal obligations, or privacy practices. The current version will be published on our website with its latest revision date. Material changes may also be communicated through the website, email, or another appropriate channel. Continued use of the website or services after an update does not replace any consent that must be obtained separately under applicable law. 19. Applicable Law and Complaints This Privacy Notice is governed by the applicable laws of Mexico, including the Federal Law on the Protection of Personal Data Held by Private Parties. If you believe that your personal-data rights have not been properly addressed, you may contact us first at [info@chachachadivecozumel.mx](mailto:info@chachachadivecozumel.mx) or seek assistance from the competent Mexican data-protection authority. 20. Contact For privacy questions, consent withdrawal, marketing preferences, or ARCO requests, contact: CHA CHA CHA GARCIN DIVING CENTER, S.A. DE C.V. Carr. Costera Sur Km 6.5 Zona Hotelera Sur 77675 Cozumel, Quintana Roo, Mexico Email: info@chachachadivecozumel.mx Telephone: +52 987 111 7359