1. Who we are

TackleFlow is a UK directory and booking platform for anglers and fisheries. TackleFlow is the data controller for the personal data described here. For anything about your data, email tackleflow@gmail.com with the subject "Data Protection Request".

When you book with a fishery, that fishery also receives your booking details and is responsible for how it uses them.

2. What we collect

• Account: your name, email address, password (stored as a one-way hash, never in plain text), and optionally a phone number, home area, profile photo and bio.
• Content you post: catch reports, photos and videos, session reports, logbook entries, reviews, questions and answers, comments, check-ins, marketplace listings and messages. Anything you post publicly can be seen by other visitors. We also record likes, follows and which stories you have viewed.
• Bookings and tickets: what you booked, dates, the number of guests, your name, email and phone number, and any notes you give the fishery.
• Payments: card payments are taken by our payment provider. We never see or store your full card number. If a booking takes a deposit, your card can be saved with the payment provider so the remaining balance can be charged on the date shown at checkout.
• Location: only when you allow it in your browser, to show nearby fisheries and matches, local weather, and to track a fishing session. The last location you used for the calendar weather is kept in your browser.
• Fishery and business accounts: listing details, contact details and the bookings and payouts for your venue.
• Newsletter: your email address if you sign up.
• Usage: we count link clicks (website, phone, directions and similar) and page visits per fishery, lake and accommodation to show owners how their listing performs. These counts are not linked to you and we do not store your IP address with them. Our hosting provider measures page load speed without cookies.

3. Why we use it, and our lawful basis

The law only allows us to use your data for a valid reason, called a lawful basis. This is the reason for each use:

• To run your account and the features you use: needed to provide the service you signed up for (contract).
• To take bookings, tickets and payments and pass booking details to the fishery: needed to provide what you booked (contract).
• To send account, booking and safety emails and notifications: needed to provide the service you signed up for (contract).
• To keep records of payments for tax and accounting: required by law (legal obligation).
• To keep the platform secure, prevent fraud and fix problems: a reasonable business need that does not override your privacy (legitimate interests).
• To show listing owners anonymous visit and click counts: a reasonable business need that does not override your privacy (legitimate interests).
• To use your location: only with your permission (consent), which you can withdraw in your browser settings.
• To send the newsletter: only with your permission (consent). You can unsubscribe at any time by emailing us.

4. Who we share it with

We do not sell your data or use it for advertising. We share it only with the fishery or organiser you book with, and with service providers who process it on our behalf under contract:

• website hosting, database, sign-in and file storage
• card payments and saved cards
• sending emails
• maps, weather forecasts and postcode lookup
• embedded video players

Some of these providers are based outside the UK, including in the United States. Where your data leaves the UK, it is protected by safeguards approved under UK law, such as the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework.

5. Cookies and browser storage

TackleFlow does not use advertising or analytics cookies. We store a small amount of information in your browser that the site needs to work:

• Sign-in session: keeps you signed in (strictly necessary).
• Cookie choice: remembers your answer to the cookie banner.
• Preferences: your theme, calendar filters and last calendar location, whether you have seen the welcome guide, and fishing sessions in progress (stored on your device only).

Other services may set their own cookies: the payment provider on its checkout page, video players once you play a video, and retailers and affiliate networks on their own sites when you click a product link. Some product links are affiliate links, which means TackleFlow may earn a commission if you buy, at no extra cost to you.

6. How long we keep it

• Account and profile: until you delete your account.
• Content you post: until you delete it or your account.
• Bookings, tickets and payment records: 6 years, as required for tax and accounting.
• Messages to support: as long as needed to deal with your request.
• Newsletter: until you unsubscribe.

7. Your rights

You can ask us to:

• give you a copy of your data
• correct data that is wrong
• delete your data
• restrict or object to how we use it
• give you your data in a format you can take elsewhere
• stop using data we hold on the basis of consent

Email tackleflow@gmail.com with the subject "Data Protection Request". We reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

8. Security

Data is encrypted in transit and at rest, and access is limited to the people and services that need it. If a breach puts your data at risk we will tell you, and report it to the ICO within 72 hours where the law requires.

9. Children

You must be 16 or over to create an account. We do not knowingly collect data from children under 16 and will delete it if we find we have. A parent or guardian can contact us to ask for this.

10. Changes to this policy

We will update this page when the way we use data changes, and email account holders about significant changes. The date at the top shows when it last changed.