Privacy Policy

Your privacy matters to us. Learn how we protect and handle your data.

Last updated: June 24, 2025

Tackleflow ("we", "our", "us") respects every user's privacy and is committed to being transparent about how we handle your personal data. This Privacy Policy explains how we collect, use, and store data through the Tackleflow platform and its associated services.

By using Tackleflow, you consent to the terms outlined in this Privacy Policy.

1. Overview

Tackleflow is a digital directory and engagement platform for anglers. We do not own or operate any fisheries or venues. We collect data strictly to provide features and save your preferences across your fishing journey. This policy complies with the UK Data Protection Act and the General Data Protection Regulation (GDPR).

2. Acceptance and Use

Using Tackleflow means you accept this Privacy Policy and agree to how your data is processed. If you do not accept, do not use our services. This policy applies to all users of our website, mobile applications, and related services.

3. Who We Are

Tackleflow is a UK-based directory and companion tool for anglers to find, save, and interact with fishery data, session logs, accommodation listings, catch shots, and more.

Data Controller: Tackleflow acts as the data controller for personal information collected through our platform. Contact us at tackleflow@gmail.com for data protection matters.

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

Consent: Where you have given specific consent for processing
Contract: Processing necessary to provide our services to you
Legitimate Interests: For improving our services and fraud prevention
Legal Obligation: Where required by law

5. Data We Collect

We collect only what's necessary to run the platform:

Personal Profile Information

Name and email address (required for account creation)
Phone number and location (optional)
Date of birth (for age verification)
Profile photos and preferences

Content and Activity Data

Saved fisheries, session logs, catch photos and fishing reports
Comments, reviews, and interaction data
Booking history and preferences

Technical and Usage Data

IP address, browser type, and device information
Usage patterns and page views
Cookies and similar tracking technologies

What We Don't Collect: Bank details, payment card information, or sensitive personal data beyond what's necessary.

6. How We Use Your Data

Your data is used to:

Power core features like saving maps, session logs, and images
Personalize your experience and recommendations
Send essential service updates and respond to support requests
Process bookings and facilitate venue communications
Improve and debug the platform
Prevent fraud and ensure platform security
Comply with legal obligations

Important: We do not sell your data to third parties or use it for intrusive advertising.

7. Data Sharing

We share data only with trusted partners that support our platform:

Supabase (hosting and data storage) — enterprise encryption
Analytics tools — anonymized data only
Email service providers — essential communications only
Payment processors — PCI DSS compliant

We never sell, rent, or share your data for profit or advertising purposes.

8. Your Privacy Rights

Under GDPR and UK data protection law, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct or update inaccurate data
Erasure: Delete your data (right to be forgotten)
Restrict Processing: Limit how we use your data
Data Portability: Receive your data in a machine-readable format
Object: Object to processing for direct marketing
Withdraw Consent: Withdraw consent at any time
Lodge Complaints: Complain to the ICO at ico.org.uk

To exercise your rights, email tackleflow@gmail.com with the subject "Data Protection Request". We'll respond within one month.

9. Data Security

We use encryption in transit and at rest, role-based access controls, and 24/7 monitoring. No system is 100% secure, but we will notify you and relevant authorities of any data breaches within 72 hours as required by law.

10. Data Retention

Account Data: Until account deletion or 3 years of inactivity
Session Logs & Content: Until deleted by user or account closure
Support Communications: 2 years for quality assurance
Legal & Security Logs: As required by law (typically 6–7 years)

11. Children's Privacy

Our services require users to be 16 or older. We do not knowingly collect data from children under 16. If we discover we have, we will delete it immediately. Parents can contact us to request deletion of their child's data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or platform announcement. Continued use of the platform indicates acceptance of the updated policy.

13. Contact Us

For privacy questions or to exercise your rights:

Email: tackleflow@gmail.com

Subject: "Data Protection Request" for faster processing

You can also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Questions About Your Privacy?

We're committed to transparency. Don't hesitate to reach out if you need clarification on anything.