Draft status
This is a public-facing draft until a lawyer reviews it against the real operating entity, jurisdiction, and tools. It exists so visitors are not left with a blank legal footer. It is not a substitute for a reviewed policy if journer begins collecting data through a hosted form or payment system.
What we may receive
Inquiries sent by phone or WeChat to the published contact may include names, school names, group sizes, travel-season preferences, swimming comfort, and health constraints you choose to share. Do not send passport numbers, bank-card numbers, or children’s full identities in a first message. During a project, an online service group may hold phone numbers and daily logistics.
How information may be used
To answer fit questions, coordinate lodging type, brief diving instructors if that pathway is chosen, contact family in an emergency, and keep attendance for certificates. We do not sell inquiry lists. We do not use classroom photographs of children for advertising unless a host-approved, consent-based process exists—and the default on this site is to avoid such images.
Retention and your requests
Until a reviewed policy sets periods, treat inquiry chats as operational records for the current cohort cycle. Ask Linda’s channel if you need information corrected or deleted after a project. Third-party tools—WeChat, airlines, dive agencies, hotels—have their own policies that journer does not control.
Children
Host-school children are not journer’s marketing subjects. Student travelers who are minors should have a parent or school in the inquiry. Safeguarding incidents are documented on a need-to-know basis, not in group chats.
Photographs and group chats
Project WeChat groups are operational, not marketing channels. Do not scrape them for a public recap. Do not add random uncles. Do not post ID photos in the group. If a delayed flight requires sharing a boarding pass with a lead, crop the number. After the project, leave the group if asked, and do not keep children’s images “for memories.”
This draft will need cookies, processors, and retention periods once a real website form exists. Until then, the practical privacy rule is: minimum data, human channel, no children in the public internet. If that is too analog for you, you may be asking this operator to be a platform it is not.
Requests
To correct a name spelling or delete an inquiry, message the same Linda channel and say you are making a privacy request. We cannot control WeChat’s own servers. We can control whether we keep forwarding your file into new chats.
Mentors’ laptops
A portfolio on a personal laptop that syncs to a personal photo stream is a privacy incident waiting. Use school accounts. Turn off auto-backup of WhatsApp images to a public cloud. Privacy policy drafts fail in these boring settings. If you cannot control a mentor’s phone, ban images of people. Policy follows the weakest device.
Screenshots
A screenshot of a group chat that includes a child’s name, a house address, or a medical note is a privacy event if it leaves the group. Students screenshot constantly. Tell them in the workshop that operational chats stay in the chat. If they need a quote for a portfolio, they quote themselves, not a host, and not a child.
Mentors should not screenshot student medical details into their camera roll. Camera rolls sync. Sync is a processor you did not name in this draft policy. Until a lawyer names processors, assume every screenshot is a leak.
When a project ends, delete the operational photos you do not need for a redacted hour log. Nostalgia is not a lawful basis we have written, and it is not an ethical one either. Privacy is mostly deletion plus restraint. The rest is headings.