Privacy Policy

Last updated: 5 April 2026

PiscaMaps ("we", "us") is operated by Gent Digital. This policy explains what personal data we collect, how we use it and your rights regarding it. We are committed to handling your data responsibly and in compliance with UK GDPR.

1. Data we collect

When you create an account we collect:

• Your name and email address
• A username of your choosing (optional)
• Your encrypted password (we never store passwords in plain text)
• Your membership status and billing history (processed via Stripe — we do not store card details)

When you use the service we may collect:

• Catch reports and reviews you submit
• Lakes you shortlist or favourite
• Photos you upload
• Basic usage data (pages visited, features used) for improving the service

2. How we use your data

• To provide and improve the PiscaMaps service
• To manage your account and membership
• To send transactional emails (password resets, membership confirmations)
• To display your public profile (username and catch reports, if you have set a username)

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

3. Data sharing

We share data only with the following third parties where necessary to provide the service:

• Stripe — payment processing. See Stripe's privacy policy.
• Your hosting provider — server infrastructure. Data is stored on servers within the EEA.

4. Cookies

We use a single session cookie to keep you logged in. We do not use tracking cookies or third-party analytics cookies.

5. Data retention

We retain your account data for as long as your account is active. If you delete your account, your personal data is removed within 30 days. Aggregated, anonymised usage data may be retained indefinitely.

6. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Data portability — receive your data in a machine-readable format

To exercise any of these rights, contact us. We will respond within 30 days.

7. Security

We take reasonable technical and organisational measures to protect your data, including encrypted passwords, HTTPS throughout, and restricted database access. No system is completely secure; we cannot guarantee absolute security.

8. Changes to this policy

We may update this policy from time to time. We will notify registered members of significant changes by email.

9. Contact

Data controller: Gent Digital. Questions or data requests: contact us here.