1. Who we are

Fish Geek UK is operated by Devon Aquatics Ltd, company number 16751098, registered at 79 Hoker Road, Exeter, Devon, United Kingdom, EX2 5JA. Devon Aquatics Ltd is the controller of personal information collected through fishgeek.co.uk.

You can contact us about this policy or your personal information at support@fishgeek.co.uk.

2. Information we collect

• Identity and contact details: your name, billing and delivery address, email address and telephone number.
• Order details: products, sizes, preferences, order numbers, delivery information, returns, refunds and customer-service messages.
• Payment details: payment status, payment method and transaction references. Full card details are normally collected directly by the payment provider and are not stored by Fish Geek.
• Account and marketing details: login information, saved preferences, newsletter choices, reviews, survey answers and promotion entries.
• Technical and usage details: IP address, browser, device, approximate location, referral source, pages and products viewed, cart activity, cookie identifiers and security logs.
• Communications: messages and files sent through our contact form, email or social channels, together with records of our response.

We collect information directly from you, automatically from your device, and from providers involved in payments, delivery, fraud prevention, analytics or social media.

3. How and why we use information

Where we rely on legitimate interests, we consider the impact on you and do not use the information if your rights override our interests. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

4. Who receives information

We do not sell personal information. We share only what is reasonably necessary with:

• manufacturing, fulfilment, packaging and delivery partners;
• WooCommerce, hosting, website, email, backup, security and customer-support providers;
• the payment provider selected at checkout, banks and fraud-prevention services;
• analytics, advertising and social platforms where you have given any consent required by law; and
• professional advisers, insurers, regulators, courts, law enforcement or a buyer of the business where disclosure is legally permitted.

Some providers may process information outside the UK. Where UK law requires it, we use an adequacy regulation, approved contractual safeguards or another lawful transfer mechanism.

5. Retention and security

We keep personal information only for as long as it is needed for the purpose for which it was collected. Order, payment and tax records are generally kept for up to six years after the relevant transaction or relationship, unless law or a live dispute requires longer. Marketing records are kept until you opt out or after an appropriate period of inactivity. Security logs and abandoned-cart information are normally kept for shorter periods.

We use proportionate technical and organisational safeguards, including encrypted connections, access controls, updates, backups and carefully selected service providers. No internet service is completely secure, so please use a strong, unique password and tell us if you suspect misuse of your account.

6. Marketing and cookies

You can unsubscribe from marketing at any time using the link in a message or by contacting us. Messages necessary to manage an order or account are not marketing.

We use cookies and similar technologies for essential store functions and, where you consent, for preferences, analytics and marketing. See our Cookie Policy for more information.

7. Your data-protection rights

Subject to the conditions in data-protection law, you may ask us to:

• confirm whether we process your information and provide a copy;
• correct inaccurate or incomplete information;
• delete information or restrict how it is used;
• provide information you supplied in a portable format;
• stop direct marketing or object to processing based on legitimate interests;
• review a significant decision made solely by automated means; and
• withdraw consent at any time.

We may need to verify your identity. We normally respond within one month and do not charge unless a request is manifestly unfounded, excessive or repeated.

8. Questions and complaints

Please contact us first so we can investigate. You also have the right to complain to the UK Information Commissioner’s Office through ico.org.uk, or to the data-protection authority where you live or work.

We may update this policy when our services, providers or legal duties change. Material changes will be highlighted where appropriate and the date at the top of this page will be updated.