Privacy Policy

Cast & Reel ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website located at castandreel.co.uk (the "Website"). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Website.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account on our Website
• Use our contact form
• Subscribe to our newsletter
• Participate in our fishing game and earn FS points
• Interact with our Website in other ways

Personal information may include:

• Name
• Email address
• Phone number (if provided)
• Postal address (if provided)
• Any other information you choose to provide

1.2 Automatically Collected Information

When you visit our Website, we may automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Pages you visit on our Website
• Time and date of your visit
• Time spent on pages
• Referring website addresses
• Device identifiers

1.3 Game Data

When you play our "Traveler Angler" game, we may collect:

• FS (Fantasy Score / Funny Score / Fortune Sparks) points
• Game progress and achievements
• Fish caught and locations visited
• Game preferences and settings

This data is stored locally in your browser using localStorage and may be associated with your account if you choose to register.

2. How We Use Your Information

We use the information we collect for various purposes, including:

• To provide, maintain, and improve our Website and services
• To process your inquiries and respond to your requests
• To send you newsletters, marketing communications, and updates (with your consent)
• To personalize your experience on our Website
• To analyze usage patterns and improve user experience
• To detect, prevent, and address technical issues
• To comply with legal obligations
• To protect our rights and prevent fraud

3. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract: To perform our contract with you or take steps at your request before entering into a contract
• Legal Obligation: To comply with legal obligations
• Legitimate Interests: For our legitimate business interests, such as improving our services and preventing fraud

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Website and store certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

Types of cookies we use:

• Essential Cookies: Necessary for the Website to function properly
• Analytics Cookies: Help us understand how visitors interact with our Website
• Functional Cookies: Remember your preferences and settings
• Advertising Cookies: Used to deliver relevant advertisements

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Website.

For more detailed information about our use of cookies, please see our Cookie Policy.

5. Third-Party Services

We may use third-party services that collect, monitor, and analyze information, including:

5.1 Google Services

We use Google Analytics to analyze Website usage. Google Analytics uses cookies to collect information such as how often users visit our Website, what pages they visit, and what other sites they used prior to coming to our Website.

Google's ability to use and share information collected by Google Analytics about your visits to our Website is restricted by the Google Privacy Policy and Google Terms of Service.

You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

5.2 Other Third-Party Services

We may also use other third-party services for:

• Website hosting and infrastructure
• Email services
• Payment processing (if applicable)

These third parties have access to your information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With third-party service providers who perform services on our behalf
• Legal Requirements: When required by law or to respond to legal process
• Protection of Rights: To protect our rights, property, or safety, or that of our users or others
• Business Transfers: In connection with any merger, sale, or transfer of assets
• With Your Consent: For any other purpose disclosed by us when you provide the information

7. Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Retention Periods

We retain different types of data for different periods:

• Account Information: Retained for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your data within 30 days, unless we are required to retain it for legal purposes.
• Contact Form Submissions: Retained for 2 years from the date of submission, unless you request earlier deletion.
• Newsletter Subscriptions: Retained until you unsubscribe or request deletion.
• Game Data: Stored locally in your browser using localStorage. Server-side game data (if applicable) is retained for 1 year after your last activity.
• Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely for statistical purposes.
• Legal Compliance: Some data may be retained longer if required by law, regulation, or legal process.

7.2 Deletion of Data

Upon your request or when data is no longer needed, we will:

• Delete personal data from our active systems
• Remove data from backup systems within 90 days
• Anonymize data that must be retained for legal or business purposes
• Provide confirmation of deletion upon request

Game data stored in localStorage will persist until you clear your browser data or we update our data retention policies.

8. Your Rights Under UK GDPR

If you are located in the United Kingdom or European Economic Area, you have certain rights regarding your personal data:

• Right of Access: You have the right to request copies of your personal data
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data
• Right to Erasure: You have the right to request deletion of your personal data under certain circumstances
• Right to Restrict Processing: You have the right to request restriction of processing of your personal data
• Right to Data Portability: You have the right to request transfer of your data to another service
• Right to Object: You have the right to object to processing of your personal data
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9.1 Technical Security Measures

We employ various security technologies and procedures to help protect your personal information:

• Encryption: We use SSL/TLS encryption for data transmission between your browser and our servers
• Secure Storage: Personal data is stored on secure servers with restricted access
• Access Controls: We implement role-based access controls to ensure only authorized personnel can access personal data
• Regular Updates: We keep our systems and software updated with the latest security patches
• Firewalls: Our servers are protected by firewalls and intrusion detection systems
• Backup Systems: Regular backups are performed with encrypted storage

9.2 Organizational Security Measures

We also implement organizational measures to protect your data:

• Staff training on data protection and privacy
• Confidentiality agreements with all employees and contractors
• Regular security audits and assessments
• Incident response procedures for data breaches
• Data protection impact assessments for new projects

9.3 Data Breach Notification

In the event of a data breach that may affect your personal information, we will:

• Notify the Information Commissioner's Office (ICO) within 72 hours if the breach is likely to result in a risk to your rights and freedoms
• Notify you without undue delay if the breach is likely to result in a high risk to your rights and freedoms
• Provide clear information about the nature of the breach, likely consequences, and measures taken to address it
• Take immediate steps to contain and remediate the breach

10. Children's Privacy

Our Website is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10.1 Age Restrictions

In accordance with UK GDPR and the Children's Online Privacy Protection Act (COPPA), we have the following age restrictions:

• Under 13: Children under 13 are not permitted to create accounts or provide personal information without verifiable parental consent
• Ages 13-16: Users aged 13-16 may use our Website with parental consent. We may require verification of parental consent before processing personal data
• 16 and Over: Users aged 16 and over may use our Website independently

10.2 Parental Rights

If you are a parent or guardian, you have the right to:

• Review any personal information we have collected from your child
• Request deletion of your child's personal information
• Refuse to allow further collection or use of your child's information
• Request that we stop using your child's information for marketing purposes

10.3 Verification Process

If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will:

• Immediately suspend the account or service
• Attempt to verify parental consent
• If consent cannot be verified, delete the child's personal information from our servers
• Notify the parent or guardian of the action taken

10.4 Educational Content

While our Website may contain educational content about fishing, it is designed for general audiences. Parents and guardians are encouraged to supervise their children's use of the Internet and our Website.

11. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

11.1 Data Transfer Mechanisms

When we transfer your personal data outside the UK or EEA, we ensure appropriate safeguards are in place:

• Adequacy Decisions: We may transfer data to countries that have been deemed adequate by the UK government or European Commission
• Standard Contractual Clauses: We use EU-approved standard contractual clauses with third-party service providers
• Binding Corporate Rules: Where applicable, we rely on binding corporate rules for intra-group transfers
• Certification Schemes: We may use certified mechanisms such as the EU-US Privacy Shield Framework (where applicable)

11.2 Transfer to United Kingdom

If you are located outside the United Kingdom and choose to provide information to us, please note that we transfer the data, including personal data, to the United Kingdom and process it there.

By using our Website, you consent to the transfer of your information to the United Kingdom.

11.3 Third-Party Service Providers

Some of our third-party service providers may be located outside the UK or EEA. When we share your data with these providers, we ensure they have appropriate safeguards in place, including:

• Contractual obligations to protect your data
• Compliance with UK GDPR and applicable data protection laws
• Regular security audits and assessments
• Data processing agreements that meet UK GDPR requirements

11.4 Your Rights Regarding Transfers

You have the right to:

• Request information about where your data is being transferred
• Request a copy of the safeguards we have in place for international transfers
• Object to certain transfers if you believe your rights are at risk

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

12.1 Notification of Changes

We will notify you of material changes to this Privacy Policy through:

• Email notification to registered users (if you have provided an email address)
• Prominent notice on our Website homepage
• In-app notifications (if applicable)
• Updating the "Last Updated" date at the top of this policy

12.2 Material Changes

Material changes include, but are not limited to:

• Changes to the types of personal information we collect
• Changes to how we use or share your personal information
• Changes to your rights or how to exercise them
• Changes to our data retention practices
• Changes to our security measures

12.3 Effective Date

Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of our Website after changes are posted constitutes your acceptance of the updated Privacy Policy.

If you do not agree with the changes, you should stop using our Website and may request deletion of your account and personal information.

12.4 Version History

We maintain a version history of this Privacy Policy. Previous versions are available upon request. The current version is always available on this page.

13. Marketing Communications

We may send you marketing communications if you have consented to receive them or if we have a legitimate interest in doing so (where permitted by law).

13.1 Types of Marketing Communications

Marketing communications may include:

• Newsletters about fishing tips, new articles, and Website updates
• Information about new game features and FS point opportunities
• Promotional offers and special events
• Surveys and feedback requests
• Partner offers (with your consent)

13.2 Opt-Out

You can opt-out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your preferences in your account settings
• Contacting us directly at [email protected]

Please note that even if you opt-out of marketing communications, we may still send you important service-related messages, such as account notifications, security alerts, and updates to our Terms of Service or Privacy Policy.

13.3 Third-Party Marketing

We do not sell your personal information to third parties for their marketing purposes. We may share aggregated, anonymized data with partners for analytics and improvement purposes, but this data cannot be used to identify you personally.

14. Data Processing for Specific Purposes

14.1 Website Analytics

We use analytics tools to understand how visitors use our Website. This helps us improve our content, user experience, and Website functionality. Analytics data is typically aggregated and anonymized.

14.2 Game Performance Data

We may collect data about how you interact with our "Traveler Angler" game, including:

• Gameplay patterns and preferences
• Time spent playing
• Features used most frequently
• Technical performance metrics

This data helps us improve the game experience and fix technical issues.

14.3 Customer Support

When you contact our customer support, we may collect and store:

• Your contact information
• Details of your inquiry or issue
• Correspondence history
• Technical information relevant to resolving your issue

This information is used solely to provide you with support and improve our services.

15. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal effects or significantly affects you. If we implement such systems in the future, we will:

• Notify you in advance
• Obtain your explicit consent where required
• Provide you with the right to object
• Allow you to request human intervention
• Explain the logic involved in any automated processing

16. Your Responsibilities

You also have responsibilities regarding your personal information:

• Accurate Information: Please provide accurate and up-to-date information when creating an account or using our services
• Account Security: Keep your account credentials secure and do not share them with others
• Report Issues: Notify us immediately if you suspect unauthorized access to your account
• Respect Others: Do not provide personal information about others without their consent
• Update Information: Keep your personal information current by updating your account settings

17. Third-Party Links and Services

Our Website may contain links to third-party websites, services, or applications that are not owned or controlled by us. This Privacy Policy does not apply to third-party websites or services.

17.1 Third-Party Websites

When you click on links to third-party websites, you will be subject to their privacy policies and terms of service. We encourage you to read the privacy policies of any third-party websites you visit.

17.2 Embedded Content

Our Website may include embedded content from third parties (such as videos, maps, or widgets). These third parties may collect data about you, use cookies, embed additional tracking, and monitor your interaction with the embedded content.

18. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

19. Supervisory Authority

If you are located in the UK or EEA and believe we have not addressed your concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Website: https://ico.org.uk
Phone: 0303 123 1113