Privacy Policy

Effective Date: 29th May 2025

1. Introduction

This Privacy Policy explains how buoysbuoysbuoys.surf and the buoysbuoysbuoys mobile and web app (“we”, “our”, or “us”) collect, use, and protect your personal information when you use our services.

2. Information We Collect

  • Account Information: Name, email address, and billing details when registering or subscribing.
  • Device Information: Browser type, operating system, app version, device type, and IP address.
  • Usage Data: Page visits, navigation paths, features used, and time spent on the website or in the app.
  • Cookies: Used on the website to manage preferences, sessions, and analytics.
  • App Permissions: If granted, we may access device location, internet/network status, and push notification settings solely to support app functionality. We do not access your camera, contacts, or files.

3. How We Use Your Information

  • To provide and personalise website and app experiences
  • To manage user accounts and subscriptions
  • To send important service announcements and support responses
  • To monitor and improve technical performance
  • To comply with legal obligations

4. Legal Basis for Processing (UK GDPR)

We process your personal data under one or more of the following lawful bases:

  • Your consent
  • Performance of a contract
  • Legal obligation
  • Legitimate interests (e.g. improving the app or website experience)

5. Analytics and Cookies

5.1 Cookies (Website Only)

We use cookies to:

  • Store your preferences and session state
  • Improve loading times and security
  • Track usage data via third-party analytics

You can control cookies via your browser settings.

5.2 App & Web Analytics

We use services such as Google Analytics and app usage platforms (e.g. Firebase or similar) to monitor user interaction. These services may collect anonymised metrics, including:

  • Crash reports
  • Feature engagement
  • Device and OS type
  • User locations (generalised, e.g. country or city)

No sensitive personal data is tracked or shared without your explicit consent.

6. Data Sharing

We do not sell or rent your data. We may share data with:

  • Cloud service providers (for secure hosting)
  • Payment processors (for subscriptions)
  • Analytics vendors (for anonymised usage tracking)

All third parties must comply with data protection obligations under UK law.

7. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes described in this policy, including legal or contractual obligations. You may request deletion at any time.

8. Your Rights

Under the UK GDPR, you have the right to:

  • Access and obtain a copy of your data
  • Correct inaccurate or incomplete data
  • Request deletion or restrict processing
  • Withdraw consent at any time
  • Complain to the ICO (Information Commissioner’s Office)

9. Children's Privacy

Our Services are not intended for use by children under 13. We do not knowingly collect data from children. If you believe a child has provided us with data, please contact us so we can delete it.

10. International Transfers

Some of our service providers may process data outside the UK. In such cases, we ensure adequate safeguards are in place under UK data protection law.

11. Changes to This Privacy Policy

We may update this policy periodically. Material changes will be posted with a new effective date. Continued use of our services indicates acceptance of the updated policy.

12. Contact Us & Data Deletion

For any questions or to exercise your rights, for example to instigate data deletion, contact:
📧 Email: buoysbuoysbuoys.surf@gmail.com