Privacy Policy

Last updated: October 9, 2026

This Privacy Policy explains how RegMount (“RegMount,” “we,” “us,” or “our”) collects, uses, shares, protects and retains personal information when you visit regmount.com (the “Site”), buy our regulator-mounted camera adapters and accessories, write a product review, apply to become a dealer, or otherwise get in touch with us. We are a small, diver-run business, and we try to collect only what we actually need to ship your gear, answer your questions and keep the Site secure.

Please read this policy together with our Terms & Conditions and our Cookie Policy. If you have any questions, you can reach us at any time using the details in the Contact us section below.

1. Who we are

RegMount is a small company based in Florida, USA, that designs and sells the RegMount regulator-mounted action camera adapter and related accessories. For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, RegMount is the “controller” of the personal data described in this policy. For the purposes of the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, “CCPA”) and other US state privacy laws, RegMount is the “business” or “controller” that determines how your personal information is processed.

• Business name: RegMount
• Email: [email protected]
• Phone: (850) 356-6770
• Location: Florida, USA (mailing address available on request)

We have not appointed a formal Data Protection Officer because our size and processing activities do not require one, but privacy questions sent to the email address above are handled directly by the people who run the business.

2. Scope of this policy

This policy applies to personal information we collect:

• through the Site, including our online store, contact page, dealer application form, product reviews and blog;
• when you email us, call us, or communicate with us on social media; and
• when you buy from us through an authorized dealer and the dealer shares order or warranty details with us.

It does not apply to websites, apps or services operated by third parties, even if we link to them (for example, a payment processor’s checkout page, a shipping carrier’s tracking site, or YouTube). Those services have their own privacy policies, and we encourage you to read them.

3. Personal information we collect

The table below summarizes the categories of personal information we collect, where it comes from and why. Each category is explained in more detail in the subsections that follow.

We do not intentionally collect “sensitive personal information” as defined by the CCPA or “special categories” of personal data under the GDPR (such as health information, precise geolocation, racial or ethnic origin, or government ID numbers). Please do not include this kind of information in contact form messages or reviews.

3.1 Orders placed through our online store (WooCommerce)

Our online store runs on WordPress and WooCommerce. When you place an order, we collect the information needed to complete it:

• your first and last name;
• billing address and shipping address (including company name, if you provide one);
• email address, used for order confirmations, shipping notifications and support;
• phone number, used by us or the carrier if there is a delivery problem;
• the products you order, quantities, prices, taxes, shipping method and any discount codes applied;
• any order notes you add at checkout (for example, “Please ship before my trip on the 14th”).

WooCommerce stores order records in our Site database so we can fulfill your order, answer questions about it, process returns and warranty claims, and meet our tax and accounting obligations.

3.2 Payment information

Payments are processed by third-party payment processors (payment gateways) such as card processors and digital wallet providers offered at checkout. When you pay, your card number and security code are entered into fields controlled by the payment processor or sent directly to it.

Payment processors handle your payment data under their own privacy policies and are required to comply with the Payment Card Industry Data Security Standard (PCI DSS). They may also use your information for their own fraud-prevention and legal compliance purposes.

3.3 Customer accounts

You can check out as a guest or create an account. If you create an account, we store your username, email address, a securely hashed version of your password (we cannot see your actual password), saved billing and shipping addresses, and your order history. You can update most account details yourself by logging in, or ask us to close your account.

3.4 Contact form and dealer application form (Contact Form 7)

Our contact page and dealer program page use the Contact Form 7 plugin. When you submit one of these forms, we collect the information you enter, which typically includes:

• Contact form: name, email address, optional phone number, subject and message (for example, a question about whether RegMount fits your regulator).
• Dealer form: your name, business or shop name, business email and phone, city, state or country, website, the type of business (dive shop, instructor, charter, spearfishing retailer and so on) and any message you include.

Form submissions are delivered to our business email inbox. Depending on configuration, a copy may also be stored in the Site database. We use the information only to reply to you, evaluate dealer applications and manage dealer relationships. Our forms may use anti-spam measures that process your IP address and browser information to detect automated submissions.

3.5 Product reviews and blog comments

If you post a product review or a comment on our blog, we collect the name you enter, your email address, your rating, the review or comment text, your IP address and your browser user agent string (which helps detect spam). Your display name, rating and review or comment text become publicly visible on the Site. Your email address is never published. If you are a verified buyer, WooCommerce may display a “verified owner” label next to your review.

If you add an image or a link to a comment, remember that anyone can see it. Do not post personal information you do not want to be public. You can ask us to remove a review or comment at any time.

3.6 Technical data, server logs and security logs

Like virtually every website, our Site and hosting infrastructure automatically record certain technical information when you visit, including your IP address, browser and device type, operating system, the pages you request, the date and time of each request, the referring page and response codes. Our security service also records information about login attempts, blocked requests and suspicious traffic patterns. We use this information to keep the Site running, diagnose problems, prevent fraud and defend against attacks.

3.7 Cookies and similar technologies

We use cookies and similar technologies to run the shopping cart, keep you logged in, protect the Site, remember your cookie choices and, only if you consent, understand how visitors use the Site. Details, including a list of the cookies we use, are in our Cookie Policy. A summary appears in section 14 below.

3.8 Information from third parties

We may receive information about you from:

• Payment processors (payment status, limited card details, fraud signals);
• Shipping carriers (tracking and delivery status, address corrections);
• Authorized dealers (if you bought through a dealer and need warranty support);
• Social media platforms (if you message us there, we see your public profile name and your message).

4. How we use your information

We use personal information for the following purposes:

We do not use your personal information to make decisions that produce legal or similarly significant effects about you based solely on automated processing. Automated fraud screening may flag an order for manual review, but a person makes the final decision.

5. Legal bases for processing (EU and UK visitors)

If you are in the European Economic Area (EEA) or the United Kingdom, we must have a legal basis to process your personal data. We rely on the following:

Where we rely on legitimate interests, we have balanced our interests against your rights and freedoms. You can ask us for more information about this balancing test, and you have the right to object (see section 10). Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Providing your name, address and email is necessary to place an order. If you do not provide them, we cannot fulfill the order. Other information, such as a phone number or order notes, is optional unless a carrier requires it for delivery.

6. How we share your information

We share personal information only with service providers that help us run the business, and only to the extent needed for them to do their jobs. We require our service providers to protect your information and to use it only for the services they provide to us, except where they act as independent controllers (for example, payment processors and carriers for their own legal and fraud-prevention purposes).

6.1 Wordfence security

We use Wordfence, a WordPress security plugin and service, to protect the Site with a web application firewall, malware scanning and login security. To do this, Wordfence processes the IP address of every visitor and may check it against threat-intelligence data maintained by its provider. Requests that look malicious may be logged and blocked. This processing is necessary for our legitimate interest in keeping the Site, our customers’ data and our store secure.

6.2 Embedded YouTube videos

Our videos page and some blog posts show footage filmed with RegMount. To protect your privacy, we embed these videos using YouTube’s privacy-enhanced mode (youtube-nocookie.com) and use a click-to-load approach: no connection is made to YouTube until you click the play button or thumbnail. Once you click, YouTube (a Google service) receives your IP address and device information and may set cookies or use local storage according to its own privacy policy, which is outside our control.

6.3 Business transfers

If RegMount is ever involved in a merger, acquisition, financing, reorganization or sale of all or part of its assets, personal information may be transferred as part of that transaction. We will require the recipient to honor this Privacy Policy, and we will notify you if your information becomes subject to a materially different policy.

6.4 Legal requirements and protection of rights

We may disclose personal information if we believe in good faith that it is necessary to comply with a law, regulation, subpoena or court order; to respond to lawful requests from public authorities; to detect or prevent fraud or security problems; or to protect the rights, property or safety of RegMount, our customers or others.

6.5 With your direction

We may share information with others when you ask us to, for example, when you ask us to connect you with a dealer near you.

7. How long we keep your information

We keep personal information only as long as we need it for the purposes described in this policy, including to meet legal, tax, accounting and warranty obligations. Typical retention periods are:

When information is no longer needed, we delete it or anonymize it so it can no longer be linked to you. In some cases, backups may retain data for a limited additional period until they are overwritten in the normal backup cycle.

8. How we protect your information

We use reasonable administrative, technical and physical safeguards designed to protect personal information against loss, theft, misuse and unauthorized access, disclosure, alteration or destruction. These include:

• Encryption in transit: the entire Site is served over HTTPS (TLS), so data you submit at checkout and in forms is encrypted between your browser and our server.
• No full card storage: card data is handled by PCI DSS compliant payment processors, not stored on our servers.
• Web application firewall and malware scanning through Wordfence, including brute-force protection and rate limiting.
• Access controls: administrative access is limited to the people who need it, protected by strong passwords and two-factor authentication where available.
• Password hashing: customer account passwords are stored as one-way hashes.
• Software maintenance: we keep WordPress, WooCommerce, plugins and our theme updated and remove components we no longer use.
• Backups stored securely so the Site can be restored after an incident.
• Data minimization: we avoid collecting information we do not need.

No method of transmission over the internet or method of electronic storage is 100% secure, so we cannot guarantee absolute security. If we become aware of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law, including Florida’s Information Protection Act and, where applicable, the GDPR and UK GDPR.

9. International data transfers

RegMount is based in the United States, and our Site, hosting provider and most service providers process data in the United States. If you visit the Site or order from outside the US, your personal information will be transferred to, stored in and processed in the United States, where data protection laws may differ from those in your country.

For transfers of personal data from the EEA, the UK or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum), the EU-U.S. Data Privacy Framework and its UK and Swiss extensions where a recipient is certified, or, where appropriate, the necessity of the transfer to perform a contract with you (for example, shipping an order you placed). You can contact us for more information about the safeguards that apply.

10. Your privacy rights

Depending on where you live, you may have some or all of the rights described below. We will honor applicable rights requests, and we will not discriminate against you for exercising them. That means we will not deny you goods, charge you a different price or provide a different level of service because you made a privacy request.

10.1 Rights under the GDPR and UK GDPR (EEA and UK residents)

• Access: obtain confirmation of whether we process your personal data and a copy of it.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure (“right to be forgotten”): have your data deleted where there is no overriding reason to keep it.
• Restriction: ask us to limit processing in certain circumstances.
• Data portability: receive data you provided to us in a structured, commonly used, machine-readable format, or have it sent to another controller.
• Objection: object to processing based on legitimate interests, and object at any time to direct marketing.
• Withdraw consent: withdraw consent at any time, for example by changing your cookie settings or unsubscribing from emails.
• Complain: lodge a complaint with your local data protection supervisory authority or, in the UK, the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to address your concerns first.

10.2 Rights under the CCPA/CPRA (California residents)

If you are a California resident, you have the following rights regarding your personal information:

• Right to know: request the categories of personal information we collected about you, the categories of sources, the business or commercial purposes for collecting it, the categories of third parties to whom we disclose it, and the specific pieces of personal information we hold about you.
• Right to delete: request deletion of personal information we collected from you, subject to legal exceptions (for example, records we must keep for tax purposes or to complete a transaction).
• Right to correct: request correction of inaccurate personal information.
• Right to opt out of sale or sharing: direct us not to sell your personal information or share it for cross-context behavioral advertising. We do not sell or share personal information in this way, but we honor opt-out preference signals such as Global Privacy Control as described in section 11.
• Right to limit use of sensitive personal information: we do not collect or use sensitive personal information for purposes that would trigger this right.
• Right to non-discrimination: we will not discriminate against you for exercising any of these rights.

CCPA disclosures for the past 12 months. In the preceding 12 months we collected the categories of personal information listed in section 3 (identifiers, customer records information, commercial information, internet or other electronic network activity information, and limited inferences) from the sources described there, for the business purposes described in section 4. We disclosed these categories for business purposes to the categories of service providers and recipients listed in section 6. We did not sell personal information or share it for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age.

California “Shine the Light.” California Civil Code Section 1798.83 permits California residents to request information about disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

10.3 Rights under other US state privacy laws

Several other states have enacted comprehensive privacy laws, including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA) and Oregon (OCPA), and additional states have similar laws in effect or taking effect. Some of these laws apply only to businesses that meet certain size or volume thresholds. Regardless of whether a particular law technically applies to us, we aim to honor the following rights for residents of these states:

• the right to confirm whether we process your personal data and to access it;
• the right to correct inaccuracies (where provided by your state’s law);
• the right to delete personal data you provided or that we obtained about you;
• the right to obtain a portable copy of your personal data;
• the right to opt out of targeted advertising, the sale of personal data and profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in these activities);
• the right to appeal our decision on your request.

Appeals. If we decline to take action on your request, you may appeal by replying to our decision or emailing [email protected] with the subject line “Privacy Request Appeal.” We will respond to your appeal within the time required by your state’s law (generally 45 to 60 days). If you are not satisfied with the outcome, you may contact your state Attorney General.

10.4 How to exercise your rights

Authorized agents. Where permitted by law, you may use an authorized agent to submit a request on your behalf. We may require written, signed permission from you and may ask you to verify your identity directly with us, unless the agent holds a valid power of attorney.

Requests are generally free of charge. We may charge a reasonable fee or decline a request if it is manifestly unfounded, excessive or repetitive, as permitted by law, and we will explain why.

11. Do Not Track and Global Privacy Control

Do Not Track (DNT). Some browsers offer a “Do Not Track” setting. Because there is no common industry standard for how to respond to DNT signals, our Site does not change its behavior in response to them. However, we do not track you across third-party websites for advertising purposes.

Global Privacy Control (GPC). GPC is a browser setting or extension that tells websites you do not want your personal information sold or shared. When our Site detects a GPC signal, we treat it as a valid request to opt out of sale and sharing for that browser and, where our consent tool supports it, we automatically keep non-essential cookies (such as analytics) switched off. Because GPC is browser-specific, you will need to enable it on each browser and device you use. You can learn more at globalprivacycontrol.org.

12. Children’s privacy

The Site and our products are intended for adults. Our Terms & Conditions require purchasers to be at least 18 years old, and scuba diving with any camera accessory should only be undertaken by properly trained and certified divers.

• United States (COPPA): the Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
• EEA and UK: we do not knowingly process personal data of children under 16 (or the lower age set by your country’s law) on the basis of consent.
• Under 16 (US state laws): we do not sell or share the personal information of consumers we know to be under 16.

Parents or guardians who buy RegMount products for a teenage diver should place the order themselves and supervise use in line with the young diver’s training and certification limits.

13. Marketing emails and how to opt out

We send two kinds of email:

• Transactional emails such as order confirmations, shipping notifications, return or warranty updates and replies to your questions. These are part of providing our service and are not marketing, so you cannot opt out of them while you have an active order or request.
• Marketing emails such as new product announcements, dive filming tips, and occasional offers. We send these only if you have opted in or, where the law permits, if you are an existing customer who has not opted out.

Every marketing email includes an unsubscribe link. You can also opt out at any time by emailing [email protected]. We will process your request promptly and within the time required by the CAN-SPAM Act and other applicable laws. We do not sell or rent our email list.

14. Cookies summary

We use a consent banner powered by CookieYes so you can choose which non-essential cookies we use. In summary:

• Strictly necessary cookies (always on) run the cart, checkout, login and security features. Examples include WooCommerce cart and session cookies, WordPress login cookies and Wordfence security cookies for logged-in users.
• Consent cookie (cookieyes-consent) remembers your choices so we do not ask on every page.
• Analytics cookies are used only if analytics is enabled on the Site and only after you consent.
• Embedded video from YouTube’s privacy-enhanced domain loads only after you click to play.

You can change your choices at any time using the cookie settings link or button on the Site. For the full list of cookies, their purposes and durations, see our Cookie Policy.

15. Third-party links

The Site may link to websites we do not control, such as dive training organizations, safety resources, carrier tracking pages, social media profiles or video platforms. This Privacy Policy does not apply to those websites. We are not responsible for their content or privacy practices, and we recommend reading their privacy policies before providing them with personal information.

16. Social media

If you interact with RegMount on social media, for example by commenting on a post or sending a direct message, the platform’s privacy policy governs the information it collects. We may see and keep your public profile name, profile picture and the content of your messages in order to respond. If you tag us in diving footage, we will ask your permission before featuring it on our Site or channels.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our service providers or the law. When we do, we will change the “Last updated” date at the top of this page. If the changes are material, we will provide additional notice, such as a notice on the Site or an email to customers with active accounts, before the changes take effect where required by law. We encourage you to review this page periodically.

18. Contact us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have a concern about how we handle your information, please contact us:

• Email: [email protected] (subject line “Privacy”)
• Phone: (850) 356-6770
• Mail: RegMount, Florida, USA (mailing address available on request)
• Online: our contact page

We are a small team of divers, and a real person will read and respond to your message.