Privacy Policy
Last updated: April 2026
Permit to Fish ("we", "us") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and who (if anyone) we share it with.
What we collect and why
| Data | Why we collect it |
|---|---|
| Email address & display name | To create and manage your account, and to contact you about your account or orders. |
| Fishery submissions | Name, location, contact details and images you provide when adding a fishery, used to list the fishery on the site. |
| Orders & shipping address | To process and fulfil shop orders and to keep a record for accounting purposes. |
| Contact messages | To respond to your enquiry. Messages are stored so we can follow up if needed. |
| Newsletter email | To send you occasional updates about new fisheries and site news. You can unsubscribe at any time. |
Who we share data with
We do not sell or share your personal data with third parties for marketing purposes. We do pass data to the following service providers, only to the extent needed to run the site:
- Supabase — our database and authentication provider. Your account and application data is stored on Supabase servers (EU region).
- Stripe — processes card payments. We pass your payment details directly to Stripe; we never see or store your full card number.
- PayPal — an alternative payment processor. The same principle applies as with Stripe.
- Mapbox — powers the interactive maps on the site. Your location (if you use the "Near Me" feature) is sent to Mapbox to load nearby map tiles.
- Cloudflare Turnstile — a CAPTCHA service used to prevent automated abuse on login, registration, and contact forms.
How long we keep your data
Account data is kept for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Order records are retained for seven years for legal and accounting reasons.
Your rights
Under UK GDPR you have the right to access, correct, or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise any of these rights, please contact us via the Contact page.
Cookies
We use a single session cookie to keep you logged in. We do not use tracking or advertising cookies.
Contact
If you have any questions about this policy, please get in touch via our Contact page.