Carp Army Ltd (company number 08225014) is the data controller for personal data collected through the Carp Army Platform. Our registered office is at 85 Great Portland Street, First Floor, London, England, W1W 7LT.
This Privacy Policy explains how we collect, use, share and protect your personal data when you use the Carp Army app, website (carp.army), business dashboard (business.carp.army), or any related services (together, the "Platform").
We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
We do not sell your personal data to third parties for their own marketing purposes.
| Purpose | Lawful Basis |
|---|---|
| Creating and managing your account | Performance of a contract |
| Providing app features (feed, fishery finder, logging, leaderboards, messaging) | Performance of a contract |
| Processing payments and payouts | Performance of a contract |
| Operating the business dashboard and seller tools | Performance of a contract |
| Displaying catch locations and personalised fishery recommendations | Performance of a contract / Legitimate interests |
| Sending transactional emails (order confirmations, receipts, security alerts) | Performance of a contract |
| Sending marketing emails and newsletters | Consent (you may withdraw at any time) |
| Improving and developing the Platform | Legitimate interests |
| Detecting and preventing fraud, abuse and security incidents | Legitimate interests / Legal obligation |
| Complying with legal obligations (e.g. HMRC, court orders) | Legal obligation |
| Analytics and aggregate reporting | Legitimate interests |
| Displaying targeted advertising within the Platform | Consent |
| Running the affiliate and rewards programme | Performance of a contract / Legitimate interests |
| Syncing stock and order data to connected third-party platforms | Performance of a contract / Your instructions |
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and interests. You can request more information about that balancing test by contacting us.
We do not sell your personal data. We share data only in the following circumstances:
We share data with trusted third-party processors who help us operate the Platform. These include:
All processors are bound by data processing agreements and may only use your data to provide services to us.
If you connect your account to third-party platforms (e.g. Shopify, eBay, Amazon, Xero, Mailchimp), we share order, product and customer data with those platforms as directed by you. Each third party's privacy policy governs their use of that data.
Content you post publicly (catches, reviews, listings, profile) is visible to other users. Your username, profile photo and public posts may be discoverable via search.
When you purchase from a seller on the Platform, we share your name, delivery address and order details with the seller to fulfil your order.
We may disclose personal data if required by law, court order, or regulatory authority, or where we reasonably believe disclosure is necessary to protect the rights, property or safety of Carp Army Ltd, our users, or others.
If Carp Army Ltd is involved in a merger, acquisition or sale of assets, personal data may be transferred to the acquiring entity, subject to the same protections as this Policy.
We use cookies and similar technologies on our websites. Cookies are small text files stored on your device.
You can manage cookie preferences at any time via your browser settings. Disabling non-essential cookies will not prevent you from using the Platform but may limit certain features.
The Carp Army app uses your device's GPS location to power features including fishery finder, catch pinning, session replay and What3Words location tags. Location access is always at your discretion — you can grant or revoke permission in your device settings at any time.
Precise catch locations are stored as private by default. You choose what location data is visible to other users when you post a catch or pin a venue.
We do not share precise GPS coordinates with advertisers.
The Platform is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child under 13 has registered, please contact us at [email protected] and we will delete their account and data.
Users aged 13–17 may use the Platform with parental consent. We take additional care to limit data collection and marketing for users we know to be under 18.
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes and enforce our agreements. Typical retention periods:
You may request early deletion of your data subject to legal obligations — see Section 9.
Under UK GDPR you have the following rights regarding your personal data:
To exercise any of these rights, email us at [email protected]. We will respond within one calendar month. We may need to verify your identity before processing your request.
These rights may be exercised free of charge. If requests are manifestly unfounded or excessive, we may charge a reasonable fee.
Some of our service providers are based outside the UK and European Economic Area (EEA). Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including:
You can request details of the safeguards in place for specific transfers by contacting us.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These include:
No system is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the ICO as required by law.
We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or via an in-app notification at least 14 days before the change takes effect. The date at the top of this page reflects the most recent update.
For any privacy-related queries or to exercise your rights, please contact our Data Protection team:
Carp Army Ltd — Data Protection
85 Great Portland Street, First Floor
London, England, W1W 7LT
Email: [email protected]
If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk