Privacy Policy

Last updated: August 2, 2026

1. Who we are

Ascent is a SaaS platform for managing scuba diving courses, certifications and student records for professional dive centers. This policy applies to the Ascent website (ascent.ca) and the Ascent application (app.ascent.ca).

2. Data we collect

Website visitors

We do not use any tracking cookies or analytics on ascent.ca. We collect only the information you voluntarily submit through our contact form (name, email, dive center name, message).

Application users

When you use the Ascent application, we collect the information you enter: student profiles (name, email, date of birth, address), certification progress, digital signatures, and uploaded documents. This data belongs to your dive center and is used solely to operate the service.

3. Cookies

The Ascent application uses only strictly necessary cookies. No tracking, advertising, or analytics cookies are used.

•
Session cookie — keeps you logged in for 7 days. Deleted upon sign-out.
•
Anti-CSRF cookie — protects the login process. Expires after 5 minutes.

Because these cookies are strictly necessary for the service to function, they do not require your consent under applicable privacy laws (Quebec's Law 25, GDPR, PIPEDA).

4. Digital signatures

Ascent stores digital signatures as part of certification records. Each signature is linked to an authenticated user account and timestamped. For signatures obtained on an instructor's device on behalf of a student, the supervising instructor's identity is also recorded.

Digital signatures are legally valid under Quebec's LCCJTI (Art. 39), the US ESIGN Act, and the EU eIDAS regulation.

5. Data storage & security

•
All data is stored on servers located in Canada, compliant with Quebec's Law 25.
•
All data in transit is protected with TLS encryption.
•
Data at rest is encrypted on disk.
•
Access is strictly limited to authorized users of your dive center.
•
All access is logged for audit purposes.

6. Data sharing

We do not sell, rent, or share your data with third parties. The only exception is service providers strictly necessary for operation (hosting infrastructure). These providers are contractually bound to confidentiality and data protection obligations.

7. Data retention

Your data is retained for as long as your account is active. Upon account closure, data is deleted within 30 days, except where retention is required by law. You may request deletion of your data at any time by contacting us.

8. Your rights

Under applicable privacy laws, you have the right to:

•
Access the personal data we hold about you
•
Request correction of inaccurate data
•
Request deletion of your data
•
Withdraw consent at any time

To exercise these rights, contact your dive center administrator, or contact us directly at the address below.

9. Contact

For any questions about this policy or your personal data:

Ascent
Email: privacy@ascent.ca