Privacy notice

Last updated: October 2026

This notice explains how Talay handles the personal data you share through talay.io: when you request a demo, and when you book and pay a deposit through a dive centre’s booking link. It does not cover the conversations Talay handles on behalf of dive centres; those are described in the agreement with each dive centre.

Who is responsible

Talay is a trade name of Jonas Slachmuylder, sole proprietorship, enterprise number 0738.781.890, Keienberglaan 6B, 1850 Grimbergen, Belgium. Contact: info@talay.io.

What we collect

• The details you enter in the demo form: your name, dive centre, location, role, email address, WhatsApp number and any message you add.
• If you pick a time for the demo: the appointment details you enter on the booking page.
• If you sign up your dive centre at talay.io/start: the contact details and centre information you fill in (prices, products, opening hours and similar).
• Technical data needed to deliver the site and block spam, such as your IP address and browser information.

Why we use it, and on what basis

• To plan and hold the demo you asked for, to set up Talay for your dive centre when you sign up, and to answer your questions. Basis: taking steps at your request before a possible agreement (article 6(1)(b) GDPR).
• To follow up with you about Talay after the demo. Basis: our legitimate interest in offering our service to dive centres (article 6(1)(f) GDPR). You can object at any time, and we will stop.
• To keep the site secure and free of spam. Basis: our legitimate interest in protecting the site (article 6(1)(f) GDPR).

We do not sell your data and do not use it for advertising.

When you book a dive or course

• We collect your name, email address, phone number, the activity, the date and the number of divers, and the result of your payment. Card details are entered on Stripe’s payment page; we never see or store your full card number.
• We use this to confirm and manage your booking, to pass it to the dive centre that provides the activity, and to handle changes and refunds. Basis: performing the booking you asked for (article 6(1)(b) GDPR) and our legal duties for accounting (article 6(1)(c) GDPR).
• We keep booking and payment records as long as accounting law requires (in Belgium, 10 years).

Who processes it for us

• Cloudflare: hosting of talay.io, spam protection (Turnstile) and visitor statistics (Web Analytics).
• Airtable: storage of demo requests and bookings.
• Google Workspace: email, calendar and video calls for the demo.
• Cal.com: scheduling of demo appointments.
• Stripe: payment of deposits and refunds.
• respond.io and Make: messages on WhatsApp, Instagram and Messenger, and booking confirmations.
• Anthropic: the AI model that reads each message in the chats Talay handles for dive centres and picks which of the centre’s approved texts to send. If a dive centre turns on Free answers, it can also write a short reply using only facts that centre approved; prices, policies, bookings and medical questions always use fixed texts. Messages are processed only to choose or write the reply and are not used to train AI models.

Some of these providers are based in the United States. Where data leaves the European Economic Area, they rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

Visitor statistics and cookies

To see how many people visit talay.io and which pages they read, we use Cloudflare Web Analytics. It sets no cookies, stores nothing on your device, does not use fingerprinting and does not follow you across other websites. It only counts page visits with general details such as the page, the referring site, the country and the type of browser and device. We see these figures only as totals, never per person. Basis: our legitimate interest in understanding how the site is used and improving it (article 6(1)(f) GDPR).

talay.io itself does not use advertising or tracking cookies. Your language choice is saved only in your own browser.

How long we keep it

We keep demo requests for up to 12 months after our last contact. If we start working together, the data becomes part of our business relationship and is kept as long as needed for that, and for as long as the law requires.

Your rights

You can ask us to access, correct or delete your data, to restrict or object to its use, or to receive it in a portable format. Email info@talay.io. You can also lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).