Who we are
Our website address is: fishingdiscoveries.com
What personal data we collect and why we collect it
Overall Policy
IF YOU DO NOT WANT TO GRANT US PERMISSION TO CONTACT YOU BY EMAIL with either lessons, updates, subscriber offers or product launches (or anything else we get up to), please unsubscribe now (there’s a link that you can click at the bottom of every one of our notification emails to do exactly that).
Unsubscribing from other platforms
If you’ve also downloaded anything from Gumroad (the third party platform that we often use to deliver digital content) you would need to unsubscribe from receiving notifications/updates from there too if you no longer wish to be contacted through their messaging system. To do this, go to any update email from Gumroad, scroll to the bottom and click the “Unfollow” link.
Exactly the same process applies if you no longer want to receive updates from us through any third party webinar platform that we may use to coach and run Q & A sessions (including those involving “Patreon” supporters).
The same process applies if you want to unsubscribe from Patreon updates too – of course.
In future we are looking to use a more sophisticated email delivery system (probably “Kartra“) which will help to reduce the amount of messages that are not 100% relevant to you. The same process would apply if you changed your mind about wanting to receive updates (and bear in mind that you might have been added to more than one sequence of lessons – so you might have to unsubscribe from more than one list)
The personal data we hold
The main focus of GDPR is about your personal details that we hold and may need to process as part of what we do with our business and our free lessons. Although, legally, it applies to European and UK users, we want to extend the same level of protection to anyone – regardless of where you come from.
As a top-line message – for all online transactions we NEVER get to see your credit card number or credit card details.
Part of the new GDPR law now means that organisations can no longer charge people to see what personal data they hold on them – and to make things as easy as possible, I can show what personal data of yours that we receive in the following cases:
Signing up to email lists/lessons/updates/offers
- We can see your email address and the system automatically uses that to deliver your content
- We can see the name that you enter when you register
- For email-confirmed subscriptions the email system estimates a nearby city location
When you confirm a subscription by clicking a button within an email, the system sends us an email with the name you entered, the email address you entered and an estimated nearest city location that you signed up from (based, as I understand, on the internet server that the subscription was processed through).
Buying products with payments processed by PayPal (Including credit card transactions via the website shopping cart as well as PayPal buttons).
Personal data that we see and use in these cases are:
- Your email address
- Delivery Address
- Name
This information is used to get your products to you and it’s all held by PayPal and are made accessible to us when we log in to our PayPal account.
We DON’T get to see your credit or debit card details.
Buying products through Kartra or Gumroad (and the same applies to becoming a Patreon Donor)
We can access and use the following data to deliver your products/items/bonuses and information:
- Name (as entered)
- Delivery Address (where entered for physical products/items/bonuses)
Other than addressing products for delivery – we do not pass on any of your personal details to third parties. This includes the fact that we remove any personal data (email address, name, delivery address) from any accounting material that we send to accountants and/or book-keeping services.
Where we keep records of sold products (other than those maintained on secure, password protected external services like PayPal, Gumroad, GetResponse, Kartra etc.), those data are stored on encrypted, password-protected external drives.
We will also remove/destroy notification emails for subscriptions that become older than three years (so that we do not store your email contact details from those notifications indefinitely).
So – I realise that this isn’t the most amazingly exciting message in the world but it is extremely important for you to understand how we treat your data and also how hard we’ll be working to comply with GDPR standards for everyone that we deal with.
As part of that compliance, we will have to pay a subscription fee/tax to register with the ICO (Information Commissioner’s Office), so – again – it is something that we’re taking very seriously.
And the big ask from me, once more, is that if you’re not 100% happy to receive email communications from us on the subjects, lessons, product launches, bonus offers and activities that we’d like to keep you updated on
PLEASE UNSUBSCRIBE!
If you’re staying with us, then you are incredibly welcome and I hope that you have a clearer idea of how carefully we treat your data.
Personal Data Flow Mapping Audit
Personal data is received (and may be subsequently processed by us by 4 primary means:
Voluntary sign-up to email newsletter information and offers
This occurs typically via “double opt-in” using a web sign-up form (and subsequent clicking of confirmation link within an email that the subscriber wishes to receive our content) using the services GetResponse and also Kartra. Additionally, advertising campaigns run on Facebook or other platforms may be added directly to an email distribution list via single opt-in where the advert and form completion process makes clear the content and its method of delivery that subscribers can expect.
The information submitted is the name supplied by the subscriber and their email address, the email subscription platform (e.g. GetResponse) may supply the approximate location of the server used to complete that registration (to the nearest city level). That information is not always provided. When such information is generated and supplied, it may be transmitted by email (for double opt-in subscribers) or merely added to the subscriber database within the email subscription platform.
- Any emails notifying us of a subscription are deleted after 3 years.
- Subscribers are notified prior to subscription and at multiple points during receipt of email content that they can unsubscribe from any list by clicking the link provided with each and every email communication that is automatically delivered
Voluntary Registration for a Webinar Broadcast
In order to receive the private link to a webinar, registrants submit their preferred name and an email address to a third party platform. While those email addresses are stored and maintained by that third party platform, it is possible for Double Badger media Ltd. (when logged in to the third party platform) to both contact and also see the email addresses registered for the purposes of attending that webinar and receiving relevant updates and offers related to it. The landing page used by attendees to sign up to that service makes clear the nature of information that they can expect to receive and that completion of the form constitutes consent to be contacted by those means. Double Badger media does not transfer those email address details to other storage locations and simply uses the automated email contact facility provided by third party webinar platform or platforms.
Purchase of a Product Via Online Platforms (including our own websites and the third party platform Gumroad.com
The fulfilment and attendant customer service pertaining to online purchases may involve the receipt of a customer’s address (for delivery of physical goods), email address and phone number (for customer service and, in the case of email address, may also include delivery of download links and discount codes for digital products).
Payments that are processed on our own webpages are processed via PayPal. Delivery addresses and contact details for the purposes of fulfilling those orders and/or resolving issues are maintained by PayPal and made available for vendors, such as ourselves, to access and process. Those details are periodically transferred from PayPal’s secure servers to our own system for accounting and customer service functions. When such transfers are made, those data reside on password-protected computers and encrypted, password-protected external drives. Personal data details are removed from records prior to being forwarded to accounting and book keeping third parties.
In future, we may adopt Stripe as a payment processor. At such time, personal data that is made available to us from Stripe will be treated in the manner described for PayPal.
The Gumroad.com platform maintains email addresses and user-provided names of customers who have downloaded a product and/or have voluntarily opted to receive updates by being a “follower” of a particular Gumroad vendor page. Gumroad.com informs users that they can opt out of notifications at any time and they are undertaking their own GDPR compliance activities as a third party provider. The facility to have Gumroad.com email customers and followers on our behalf is the most typical method that we use to issue notifications of updates to existing products and news of new products. This does not involve us processing personal data as message delivery is automated from within the Gumroad.com platform.
Delivery of the small number of physical products we offer via Gumroad.com involves the copying the delivery address (displayed when logged in to Gumroad’s secure platform) by hand onto packaging labels. For customer service, we may copy and paste a customer’s email address directly into the recipient’s address field within a personal email account that is separate from Gumroad to provide a more personalised experience.
Voluntarily becoming a “Patron” via Patreon.com (i.e. patreon.com/tenkara)
When donors decide to support our creative efforts by signing up for a monthly payment via the Patreon.com platform they enter their email address and preferred name/nickname as well as their payment card details. While the payment card details are not passed on from Patreon.com, the individual email addresses of supporters are visible within the login-secured “Creator” area of the platform. We do not exercise an option to transfer those personal details outside of the Patreon Platform and, instead, use the automatic communication mechanisms within the platform to communicate with Patreon.com supporters of our work.
We will continue to revisit, revise and re-publish updates to this data-flow mapping audit,
Paul Gaskell and John Pearson
Fishing Discoveries
(Part of Double Badger Media Ltd.)
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms
Obviously, any personally-identifying details that you enter to our contact form will be processed by us (and subject to the normal stipulations of GDPR) and used by us to address your enquiry. We will also use your entered contact details to respond to your request(s).
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
Who we share your data with
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.