Privacy Policy

Introduction

Welcome to Rapala Fishing ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and mobile application (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

We may collect information that you provide directly to us, including:

• Account information (email address, username, password)
• Profile information (name, profile picture, fishing preferences)
• Fishing log data (catch records, locations, conditions)
• User-generated content (photos, notes, reviews)
• Communications with us (support requests, feedback)

Information Collected Automatically

When you use our Service, we may automatically collect:

• Device information (device type, operating system, browser type)
• Usage data (pages visited, features used, time spent)
• Location data (with your permission, for fishing log features)
• Cookies and similar tracking technologies

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Personalize your experience and recommendations
• Process your fishing logs and catch data
• Communicate with you about updates and features
• Analyze usage patterns to improve our products
• Ensure the security and integrity of our Service
• Comply with legal obligations

Data Sharing and Disclosure

We may share your information in the following circumstances:

With Your Consent

We may share your information when you explicitly consent to such sharing, such as when you choose to share fishing logs with friends.

Service Providers

We work with third-party service providers who help us operate our Service:

• Supabase - Database and authentication services
• Vercel - Website hosting and analytics
• Cloudinary - Image storage and processing (if enabled)

Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request your data in a portable format
• Opt-out: Opt out of certain data processing activities

To exercise these rights, please contact us at admin@rapalafishing.ca.

Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Canadian Privacy Law Compliance

Rapala Fishing complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Law 25). We collect, use, and disclose personal information only with your knowledge and consent. You have the right to access your personal information held by us, challenge its accuracy, and withdraw consent for its use. Our Privacy Officer can be reached at the email address below. We conduct Privacy Impact Assessments for new features that involve personal data collection and maintain a breach response protocol in accordance with PIPEDA requirements.

GPS and Location Data

GPS and location data is collected only with your explicit opt-in consent. You may enable or disable location services at any time through your device settings or within the app. When enabled, location data is used to provide fishing spot recommendations, weather information, and safety features. Location data is stored securely and is never sold to third parties. Following the precedent set by the Privacy Commissioner of Canada's investigation of Tim Hortons' location tracking practices, we ensure that location data collection is proportional to its purpose and that users are clearly informed about what data is collected and how it is used. You may request deletion of all stored location data at any time.

Data Breach Notification

In the event of a data breach that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as soon as feasible, in accordance with PIPEDA's mandatory breach notification requirements. Notification will include a description of the breach, the types of personal information involved, steps we have taken to reduce harm, and steps individuals can take to protect themselves. We maintain a breach response protocol and conduct regular security assessments to minimize breach risk.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Active account data is retained for the duration of your account. If you delete your account, we will remove your personal information within 30 days, except where retention is required for legal, regulatory, or legitimate business purposes (such as fraud prevention or dispute resolution). Anonymized and aggregated data that cannot identify you may be retained indefinitely for analytics and service improvement purposes. You may request information about our retention practices at any time.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We take appropriate safeguards to ensure your information remains protected.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.