Legal

Privacy Policy

How the Fishing Around platform handles your data

Fishing Around Platform

Version: 1.0
Effective Date: 1 May 2026
Document Owner: Fishing Around the UK CIC
Status: Active

Fishing Around the UK CIC
The Melting Pot
15 Calton Road
Edinburgh
EH8 8DL
United Kingdom

Fishing Around the UK CIC ("Fishing Around", "we", "us") is committed to protecting personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

Fishing Around the UK CIC is the Data Controller for personal data collected through the platform.

Fishing Around the UK CIC is responsible for determining the purposes and means of processing personal data through the Fishing Around platform.

Platform Operation

The platform is operated on behalf of Fishing Around the UK CIC by Fishing Around Ltd, which provides technical, operational, payment processing, and support services.

Fishing Around Ltd acts as a Data Processor and processes personal data strictly on behalf of Fishing Around the UK CIC under appropriate contractual arrangements.

Fishing Around the UK CIC may also appoint technology partners, developers, contractors, and service providers to support the development, maintenance, security, and operation of the platform.

Such parties act as Data Processors where they process personal data on behalf of Fishing Around the UK CIC and do so under appropriate contractual arrangements.

Fishing Around the UK CIC remains responsible for determining the purposes and means of processing personal data.

Information We Collect

Personal Information

We may collect:

  • name

  • email address

  • telephone number

  • home address

  • profile photograph

  • account login information

Booking and Payment Information

We may collect:

  • permit purchase details

  • fishery location and booking dates

  • booking history

  • payment status

  • refund records

  • account credit records

  • rescheduling records

  • chargeback or payment dispute records

Technical Information

We may collect:

  • IP address

  • device and browser information

  • platform usage data

Conservation and Fishery Data

We may collect:

  • catch returns

  • fishery usage data

  • conservation monitoring data

How We Use Your Information

We use personal data to:

  • provide access to the platform and user dashboards

  • create and manage user accounts

  • process permit bookings

  • issue permit confirmations

  • manage payments, refunds, account credit, rescheduling, and payment disputes

  • enable fisheries to manage access to their waters

  • verify permit holders, including use of profile photographs where enabled

  • support fisheries management and conservation

  • support compliance, enforcement, and protection of fisheries

  • communicate with users about bookings, account updates, service updates, and support

  • improve platform performance, security, and user experience

  • maintain appropriate platform records

Profile Requirement

Users may be required to complete their profile before purchasing permits in order to:

  • enable permit validation

  • allow fisheries and authorised personnel to verify users

  • provide access to dashboards and booking history

  • support responsible fisheries management and compliance

Communications

We send necessary service communications, including:

  • booking confirmations

  • permit confirmations

  • account updates

  • service updates

  • support messages

  • important platform notices

These are necessary communications relating to use of the platform.

Marketing communications are optional and require opt-in consent.

Users may unsubscribe from marketing communications at any time.

Legal Basis

We rely on the following legal bases for processing personal data:

Contract

We process personal data where necessary to:

  • provide platform access

  • create and manage user accounts

  • process permit bookings

  • issue booking confirmations

  • support account dashboards

  • administer refunds, account credit, and rescheduling where applicable

Legitimate Interests

We process personal data where necessary for legitimate interests, including:

  • platform operation and improvement

  • fisheries management and administration

  • permit verification

  • compliance and enforcement

  • prevention of unauthorised fishing

  • fraud prevention and dispute management

  • platform security

  • conservation and fisheries monitoring

These interests are balanced against the rights and freedoms of users.

Legal Obligations

We may process personal data where required to comply with legal or regulatory obligations.

Consent

We rely on consent for optional marketing communications.

Payments

Payments are processed via secure third-party payment providers through Fishing Around Ltd.

Payment providers may process information required for:

  • payment authorisation

  • settlement

  • fraud prevention

  • payout processing

  • refunds, account credit, and payment dispute handling

We do not store payment card details.

Sharing Information

We may share personal data where necessary with:

  • participating fisheries

  • fishery managers and authorised representatives

  • authorised bailiffs and enforcement personnel

  • fishery boards and regulatory bodies

  • service providers supporting platform operation, development, maintenance, payment processing, security, and support

  • Fishing Around Ltd acting as Data Processor

  • appointed technology partners, contractors, or developers acting as Data Processors

  • payment processors

Where third-party service providers process personal data on our behalf, they do so under appropriate contractual arrangements and only on our instructions.

We do not sell personal data.

Data Sharing with Fisheries

Participating fisheries may receive or access limited personal data where necessary for:

  • booking fulfilment

  • permit verification

  • fishery management

  • customer service

  • compliance and enforcement

  • catch return administration where applicable

This may include:

  • name

  • contact details

  • permit details

  • booking dates

  • permit status

  • profile image where enabled

  • catch return information where relevant

Participating fisheries act as independent Data Controllers in respect of personal data they receive or separately control.

Data Sharing for Fisheries Management and Enforcement

We may share relevant personal data with:

  • fisheries and fishery managers

  • fishery boards and regulatory bodies

  • authorised bailiffs and enforcement officers

For purposes including:

  • permit verification

  • identification of permit holders, including profile photographs where applicable

  • prevention and investigation of unauthorised fishing

  • enforcement of fishery rules and regulations

  • protection of fisheries and conservation interests

  • supporting compliance with applicable laws

This sharing:

  • is limited to what is necessary

  • is restricted to authorised personnel

  • may be logged and monitored where appropriate

Where data is shared with fisheries, fishery boards, or enforcement bodies, those organisations act as independent Data Controllers for their own use of the data.

Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected.

Retention periods may include:

  • permit and transaction records: up to 6 years

  • booking, refund, account credit, rescheduling, and payment dispute records: up to 6 years

  • account data: while the account remains active and as otherwise required

  • conservation and catch return data: as required for fisheries management and conservation purposes

  • technical and platform usage data: as required for security, analytics, platform operation, and troubleshooting

Where data is no longer required, it may be deleted, anonymised, or retained only where necessary for legal, accounting, audit, dispute management, or legitimate operational purposes.

Data Security

Appropriate technical and organisational measures are in place to protect personal data from:

  • unauthorised access

  • accidental loss

  • misuse

  • alteration

  • unlawful disclosure

Security measures may include:

  • access controls

  • secure infrastructure

  • role-based permissions

  • monitoring and logging where appropriate

  • contractual controls with processors and service providers

Your Rights

Under UK data protection law, individuals may have rights including:

  • the right to access personal data

  • the right to request correction of inaccurate data

  • the right to request deletion of personal data

  • the right to restrict processing

  • the right to object to certain types of processing

  • the right to withdraw consent where processing is based on consent

  • the right to data portability where applicable

Requests relating to personal data may be submitted via the platform or by contacting us.

Complaints

If you are unhappy with how your personal data is handled, you may contact us in the first instance.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.

Cookies and Platform Analytics

The platform may use cookies or similar technologies to:

  • improve platform functionality

  • analyse usage patterns

  • enhance user experience

  • support platform security

  • remember user preferences where applicable

Users may manage cookie settings through their browser preferences.

Where required, cookie consent or additional cookie information may be provided separately.

Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes to platform operations, legal requirements, data processing activities, or platform functionality.

Updated versions may be published on the platform.

Contact

Questions relating to this Privacy Policy or personal data may be submitted via the Fishing Around platform or to:

admin@fisharound.uk