Privacy Policy.

The full policy

1. Who we are

Izak Walton Ltd is the controller of your personal data. We are a company registered in England and Wales, company number 17345946, registered office 71–75 Shelton Street, London WC2H 9JQ. We are registered with the Information Commissioner’s Office, registration number ZC270253.

Contact us at privacy@fishwithizak.com, or by post at the address above, marked “Privacy”.

2. Who this policy covers

This policy covers anglers using the Izak app, visitors to fishwithizak.com, people on the waitlist, people with a Pro account, creators and guides using the creator portal, businesses and their members using the vendor portal, and creators whose public content Izak indexes before they join (see section 14). Separate terms apply to businesses and creators, and those terms say which of their data is covered by this policy.

3. What we collect

• Your account. Name, email, username, password (stored hashed, never readable), and the sessions and devices you sign in with.
• Your fishing. What you log in the app: catches, photos, species, weights, trips, waters and spots, the tackle in your bag, your saved content, the creators you follow, and the questions you ask Izak.
• Location. A catch or spot you log carries the location you give it. If you allow it, the app also uses your device’s location while you use location features. [Location metadata is removed from photos when they are uploaded.]
• Requests to guides. The day, the trip, the party size, the extras and the note you send, and what you chose to share with the guide.
• Businesses. For a business on the vendor portal, its name, handle, business email, legal entity, members and roles, listing, channels, products, requests and reviews, and the documents its owner accepted (which version, when). Tax residence, and a tax ID when the business gives one, stored encrypted with a key kept away from the database.
• Creators. Your profile, the content you publish on Izak, and, if you connect a YouTube channel, the channel data Google sends us (see section 8).
• How you use Izak. Which screens and content you open, plays, saves and clicks, searches, and how features are used, so Izak can recommend better and creators can see how their content does.
• Your device. IP address, device type, operating system, app version, language, and crash reports.
• Sign in with Apple or Google. If you sign in that way, Apple or Google sends us your name, your email (or a relay address if you hide it) and an identifier for your account. We do not receive your password.
• Permissions on your phone. The app asks before it uses your camera, your photo library or your location, and you can change each permission in your phone’s settings. If Izak offers to find people you know, it asks before reading your contacts, uses them only to match against Izak members, and does not store the list.
• Payments. If you buy a Pro account or book a guide, our payment processor handles your card details. We see the last four digits, the amount, and whether the payment succeeded, never the full card number.
• Support. What you send us when you write to us.

4. Where it comes from

Almost all of it comes from you. Some comes from your device, with your permission. A guide or business tells us about a booking they accept. When a creator connects a YouTube channel, Google sends us data about that channel. Before a creator joins, we collect the public titles and descriptions of their fishing videos from YouTube so anglers can find them (section 14).

5. What we use it for, and our legal reason

UK data protection law requires a legal reason for each use. These are ours.

Where we rely on legitimate interests, we have weighed them against your rights and interests, and you can object (section 16). Where we rely on consent, you can withdraw it at any time without affecting what happened before.

6. Ask Izak and AI

When you ask Izak a question, the question and the parts of your logbook and tackle bag needed to answer it are sent to an AI model provider that works for us under contract. Our providers may only use what they receive to answer you. They are not allowed to keep it for their own purposes or to train their models on it.

Izak also trains its own models so it understands fishing better. For that we use what anglers log and how Izak is used. Before anything is used for training, the location on it is reduced to the water and the region. Your exact pin is never used. Creators’ content that they give Izak directly is used to train Izak’s own models under the training licence in the Creator Terms, which is explained on the screen where a creator joins and which the creator can switch off at any time. Data from a connected YouTube channel is never used for training.

No outside AI company trains on your data or on creators’ content through Izak.

7. Your location

A catch or spot you log carries the location you give it. Other anglers see it only as precisely as you choose. Guides never see a pin on a spot. They see water names and regions only.

When Izak learns from what you log, the location is first reduced to the water and the region. Your exact pin is never used to train Izak’s models.

8. Who else sees it

• Other anglers see what you choose to share in Social and on public catches, with the location precision you set. Nothing on Izak can be seen without an Izak account, and we do not make your content available to search engines.
• A guide you send a request to sees your rating and guided days on Izak, and only what you chose to share: your level, the species from your logbook, your home town. Your name, photo and contact reach the guide only when the guide accepts.
• A creator sees plays, citations, saves and clicks as numbers, never who you are, unless you choose to share your details with them.
• A business you buy from receives your name, delivery address and order so it can fulfil it. It is responsible for that data under its own privacy policy. [Only once the marketplace is live.]
• Service providers that run parts of Izak for us: cloud hosting and databases, email delivery and email audience management, maps, payment processing, AI model providers, analytics and crash reporting, and customer support tools. Each works under a contract that limits them to our instructions and requires them to protect your data. A list of our current providers is available on request.
• YouTube. Videos on Izak play in YouTube’s own player, so YouTube receives the data its player normally collects. Creators who connect a channel do so through YouTube API Services. By using Izak you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms), and Google’s Privacy Policy (http://www.google.com/policies/privacy) applies to the data Google collects. A creator can disconnect their channel in the creator portal or revoke Izak’s access from Google’s security settings (https://security.google.com/settings/security/permissions). We refresh or delete stored YouTube channel data at least every 30 days, and delete it when a creator disconnects.
• Authorities and others where the law requires it, to protect Izak or its users, or if Izak is sold or merged, in which case the buyer takes on this policy.

We do not sell your personal data.

9. Where your data is stored

Your data is stored and processed in the United Kingdom, the European Economic Area and the United States, because that is where our providers run. When data leaves the UK we rely on the safeguards UK law allows: the UK’s adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework for providers certified under it, and otherwise the Information Commissioner’s International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. You can ask us for a copy of the safeguard for any provider.

[Draft note: Yaser to confirm, for each provider, where it processes and which safeguard its terms contain.]

10. How long we keep it

When you delete your account, your personal data is removed on the timetable above. A business you own must be handed over or closed first, and its records are kept in the business’s name.

11. How we keep it safe

Data is encrypted in transit and at rest. Passwords are stored hashed. Tax IDs are encrypted with a key kept away from the database. Access inside Izak is limited to the people who need it. No system is perfectly secure, so keep your password private and tell us at once if you think your account has been used by someone else. If a breach puts you at risk we will tell you and the ICO as the law requires.

12. Cookies and similar technology

On fishwithizak.com, only the cookies needed to run the site load until you tell us otherwise. When you first visit the website we ask whether Izak may use an analytics cookie to see how the website is used, and nothing is set until you say yes. When you sign up, in the app or on the website, we ask once whether Izak may use non-essential cookies and similar technology in the app, and your choice applies across the app and the website. You can change either choice at any time, in the cookie settings on the website or in settings in the app. We do not use third-party advertising trackers. Our cookie notice at [link] lists what we use.

13. Automatic decisions

Izak blocks accounts automatically when their behaviour matches spam, bots or abuse. If that happens to you, you can ask for a person to review the decision by writing to privacy@fishwithizak.com. We make no other decisions about you by automatic means alone that have a legal or similarly significant effect.

14. Creators who have not joined Izak

So that anglers can find fishing content, Izak collects the public titles, descriptions and channel names of fishing videos on YouTube and organises them by species, water and technique. We do not store or analyse the videos themselves. If you are a creator and would rather your public content was not listed on Izak, write to privacy@fishwithizak.com and we will remove it. If you would like to join Izak, the creator portal is at www.fishwithizak.com

15. Children

Izak is for people 13 and over. If you believe someone under 13 has an account, tell us and it will be removed. Accounts for people aged 13 to 17 start with private settings, and their data is not used to train Izak’s models or in any insights we provide to others. If you are under 18, you may only buy a Pro account, book a guide or buy from a business on Izak with a parent or guardian’s permission and involvement.

16. Your rights

You can ask us to:

• give you a copy of everything we hold about you, which you can also download from the app
• correct anything that is wrong, which you can also do in the app
• delete your personal data, which you can also do by deleting your account in the app
• stop or limit how we use it while a question about it is resolved
• give you your data in a form you can take to another service
• stop using your data where we rely on legitimate interests, and stop marketing to you at any time
• withdraw a consent you have given
• have a person review an automatic decision

Write to privacy@fishwithizak.com. We may need to check it is you. We answer within one month, or tell you if we need longer. These rights are free, and there are limits to some of them that we will explain if they apply.

If you are unhappy with how we handle your data, tell us first and we will acknowledge your complaint within 30 days and tell you how we will deal with it. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

17. If you are outside the UK

Izak is run from the UK under UK law, and the rights in section 16 are offered to everyone who uses Izak, wherever they are. If you live in the United States, Part C below adds what US law asks us to tell you. [Izak is not currently available in the European Economic Area.]

18. Changes to this policy

When this policy changes, the version and date at the top change. If the change matters to you, we will tell you in the app or by email before it takes effect.

19. Contact

privacy@fishwithizak.com, or Izak Walton Ltd, 71–75 Shelton Street, London WC2H 9JQ, marked “Privacy”.

Part C. Privacy notice for people in the United States

This part is for people who live in the United States. It adds to the full policy and uses the words US state privacy laws use. If anything here differs from the full policy, this part applies to you.

What we collect, in the categories US law uses.

Sections 3 to 5 say where this comes from and what we use it for. Section 8 says who receives it. Section 10 says how long we keep it.

Selling and sharing. We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16.

Your rights. You can ask us to tell you what personal information we hold about you and what we do with it, to correct it, to delete it, to limit how we use sensitive personal information, and to opt out of any sale or sharing (there is none). We will not treat you differently for using these rights.

How to ask. Use the download and delete tools in the app, or write to privacy@fishwithizak.com. Izak operates only online, so email is our method of contact. We may ask you to confirm it is you, usually by replying from the email on your account. We answer within 45 days, and tell you if we need up to 45 more. Someone you authorise can ask on your behalf if they show us your written permission.

Browser signals. We honour Global Privacy Control signals as a request to opt out of sale and sharing, which we do not do anyway. We do not respond to “Do Not Track” signals, because there is no agreed standard for them.

Changes. The date at the top of this policy is the date this notice was last updated. Section 18 says how we tell you about changes.