Cayman Fly Fishing (a trading name of RIPL COLLECTIVE LTD)

Privacy Policy

Effective Date: 10 August 2025

This Privacy Policy (“Policy”) outlines how Cayman Fly Fishing, a trading name of
RIPL COLLECTIVE LTD a company incorporated in England Number: 16638607
(“we”, “our”, “us”) collects, uses, discloses, and protects personal data through our
websites, mobile applications, digital maps, and associated services (collectively, the
“Services”). Cayman Fly Fishing complies with the UK General Data Protection
Regulation (UK GDPR) and the Data Protection Act 2018.

By accessing or using the Services, you acknowledge and agree to this Policy. If you
do not agree, please do not use the Services.

1. Information We Collect

We collect the following categories of personal data:

a. Account Information

· Email address, name or nickname, password (encrypted), and optionally a
profile photo and mobile phone number.

· Additional information you choose to provide in your profile.

b. Location Data

· Real-time geolocation (with opt-in consent).

· Historical location data (e.g., saved fishing spots).

· Device-based GPS and cellular-based location data.

c. Device & Technical Data

· IP address, device ID, operating system and browser type, usage logs, diagnostic
data, crash reports.

· Device settings and connectivity status.

d. Usage Data

· Interaction with our Services, visited pages, map features used, timestamps, and
analytic identifiers.

e. Communication Data

· User messages, support tickets, feedback forms, emails, and related metadata.

f. Purchase Information

· Name, billing/shipping address, email, phone number, and order history.

Payment details are handled securely by third-party payment processors and are
not stored on our servers.

2. How We Use Personal Data

We use your data for the following purposes:

· To register and manage your account.

· To provide and personalize the Services.

· To process transactions and provide customer support.

· To improve performance, conduct analytics, and develop new features.

· To send notifications and service-related messages.

· To send marketing communications with your opt-in consent.

· To ensure the integrity and security of the Services.

· To detect and prevent fraud, abuse, and violations of our terms.

· To comply with legal and regulatory requirements.

3. Legal Bases for Processing

Under UK GDPR, we rely on the following lawful bases:

· Consent: for location sharing, marketing communications, and optional data.

· Contract: to fulfill our obligations under our terms of service.

· Legitimate Interests: to improve services, maintain security, and ensure a
positive user experience.

· Legal Obligation: to comply with applicable laws and regulatory obligations.

4. Sharing and Disclosure

We share personal data only as necessary:

· With third-party service providers (e.g., cloud hosting, analytics, customer
support, payment gateways).

· With other users (if you opt to share content, locations, photographs, fishing
information or profiles).

· With legal authorities if required to comply with legal requests or enforce
rights.

· With affiliates or during business transfers or restructuring.

All third parties are required to adhere to strict confidentiality and data protection
standards.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

· Enable essential functionality.

· Analyze usage patterns to improve user experience.

· Store preferences and settings.

· Deliver tailored content and marketing (only with your consent).

You can manage cookies through browser settings or via our cookie consent tool.

6. Data Security

We apply robust security measures to protect personal data:

· secure access controls, and regular security audits.

· Passwords are hashed and never stored in plaintext.

· Role-based access for internal data handling.

However, no system is entirely secure. We urge users to use strong passwords and
update them regularly.

7. Retention of Data

We retain personal data only as long as necessary:

· Active accounts: while your account is active and for 24 months after inactivity.

· Legal requirements: for as long as legally mandated.

· Marketing: until you opt out or withdraw consent.

· Support queries: typically retained for up to 2 years unless ongoing.

Data is securely deleted or anonymised when no longer needed.

8. Children’s Privacy

Our Services are not intended for users under 18. We do not knowingly collect data
from children. If informed of such collection, we will delete the data promptly.

9. International Data Transfers

If your data is transferred outside the UK:

· We ensure an adequate level of protection through standard contractual clauses
or adequacy decisions under UK GDPR.

· Data may be stored on servers in the UK, EEA, or secure third countries.

10. Your Rights

You have the following rights under UK GDPR:

· Right of Access: Obtain a copy of your personal data.

· Right to Rectification: Correct inaccurate or incomplete data.

· Right to Erasure: Request deletion of your data (“right to be forgotten”).

· Right to Restrict Processing: Limit how your data is used.

· Right to Object: Object to processing based on legitimate interests.

· Right to Data Portability: Transfer your data to another provider.

· Right to Withdraw Consent: Revoke previously given consent at any time.

To exercise these rights, email: caymanflyfishing@gmail.com. We respond within
one month of request receipt.

11. Changes to This Policy

We may revise this Policy periodically. Changes will be posted with a revised
effective date. Where significant changes occur, we will notify users by email or in-
app alerts and seek consent if legally required.

12. Contact Us

If you have any questions, complaints, or concerns, please contact:

Data Protection Officer

Richard Langford, Cayman Fly Fishing (a trading name of RIPL COLLECTIVE
LTD)

London, UK WC12

Email: caymanflyfishing@gmail.com