Shop terms

1. Parties

These terms apply between the entity operating a dive shop or dive service company ("Shop") and MyDiveTag ("we", "us"). A Shop's authorised representative agrees to these terms when activating a Shop account.

2. Subscription

Subscription pricing is set out in the order form. Payment is monthly in advance. Failure to pay may result in suspension after notice. Pricing changes require 60 days written notice. We do not charge a per-booking platform fee; standard Stripe processing fees apply directly to your Stripe Connect Express account.

3. Your customers

You collect personal information from divers who book with, are served by, or consent to marketing from your Shop. You are responsible for handling that information lawfully under the Privacy Act 1988 and the Australian Privacy Principles. MyDiveTag provides the technical means (Row-Level Security, audit log, consent capture) for compliance; ongoing compliance practice is your obligation.

A diver's MyDiveTag profile is owned by the diver. You can see only the data relevant to your relationship with that diver (their verified certs, current medical flag, waivers signed at your Shop, bookings made with your Shop). You must not attempt to access data outside that scope.

4. Marketing (Spam Act 2003)

You may send marketing email through the platform only to divers who have given explicit consent specifically to your Shop. The consent record (timestamp, IP, user agent, exact consent text) must be retained. Every marketing email must include functional one-click unsubscribe. Repeated non-compliance is grounds for suspension.

5. Waivers, medical, cert verification

You upload your own waiver templates, version them, and are responsible for their legal content. MyDiveTag stores signatures with metadata for the evidence period. Cert verification is performed by you through the agency's portal; the platform records the verification stamp but does not validate the underlying agency status.

6. Cylinder testing

You are responsible for performing visual inspections under AS 2030.1 and hydrostatic testing under AS 2337 in accordance with the standards. MyDiveTag provides recordkeeping; it does not certify compliance.

7. API keys

API keys (mdt_live_*, mdt_test_*) are bound to your Shop and scoped to specific permissions. You are responsible for keeping keys confidential. Suspected compromise must be reported to security@mydivetag.com and the key revoked immediately from your dashboard.

8. Acceptable use

Do not attempt to access another Shop's data, bypass rate limits, scrape the platform, send marketing without consent, or use the platform to harass divers. Breach is grounds for suspension or termination.

9. Service levels

We target 99.9% monthly availability excluding scheduled maintenance windows and third-party-provider outages. Service credits are detailed in the order form for Multi-shop tier; lower tiers do not include an SLA-backed credit but receive priority support during sustained outages.

10. Suspension and termination

Either party may terminate on 30 days written notice. We may suspend immediately for non-payment, breach of acceptable use, or where required by law. On termination, you may export your Shop's data for 90 days. After 90 days, identifying information is deleted; transactional records (waivers, payment confirmations) are retained for the legal evidence period.

11. Liability

Each party's aggregate liability is limited to the fees paid by the Shop in the 12 months preceding the claim. Neither party is liable for indirect, consequential, or special damages. Nothing in these terms limits liability that cannot be lawfully excluded (including under Australian Consumer Law).

12. Indemnity

You indemnify us for claims arising from your unlawful collection or use of diver data, marketing sent without consent, or content you upload to the platform.

13. Governing law

Queensland, Australia. Non-exclusive jurisdiction of the Queensland courts.

14. Changes

We will notify Shop account owners by email at least 30 days before material changes take effect.

15. Contact

Commercial: hello@mydivetag.com
Security: security@mydivetag.com
Privacy: privacy@mydivetag.com