Privacy notice
Last updated 3 November 2026
This notice explains what personal data we collect when you buy or use a CarpVantage Cube, contact us or register interest, why, how long we keep it, and your rights.
Who we are
CarpVantage Limited (registered in England and Wales, company number 17494379) is responsible for your data (the "controller"). We are registered with the Information Commissioner's Office, reference ZC270973. Contact us about your data at support@carpvantage.co.uk, or write to CarpVantage Limited, 59 Queen Elizabeth Chase, Rochford, SS4 1JJ.
What we collect, why, and for how long
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Name, delivery address, email, phone (if needed for delivery) | To take, deliver and support your order | Contract | Address and phone: deleted from our systems about 60 days after delivery (we keep only the postcode district, such as SS4, to see which areas we sell to; it can't identify you or your address). Name and email on the order: deleted 15 months after dispatch - the 12-month guarantee plus 3 months to settle any claim (3 months after a cancelled order) - and kept longer only while a return or payment dispute is open. |
| Order record: date, items, price, payment reference, Cube ID | Accounting and tax; handling returns and guarantee claims | Legal obligation; contract | 6 years |
| Your email address, linked to your Cube | Verifying you during setup, renewal reminders, support, moving a Cube to a new owner (we email both the old and the new address when that happens) | Contract | While your Cube is in use - your service is active, or the Cube is still collecting weather. Deleted 12 months after the later of your service ending and your Cube last being online. If you come back after that, email us and we'll link your Cube to your address again |
| Your Cube's ID, the fishing location you set, and records of its updates (time, success or failure, software version, rough network information such as your internet provider and country, and, if the Cube fails to join Wi-Fi, the reason with the signal strength and channel) | Running the service, fixing problems, protecting the service from misuse | Contract; legitimate interests (security) | Individual update records: 30 days. Your current location: while the Cube is in use. A short history of key events for the Cube (set up, location changed, software updated, problems reported): as long as the order record. |
| Messages you send through the contact form on our website, with your email address, and the reason you chose | Answering your message. Emailed to our support (or feedback or security) inbox and not stored on the website; we email you a short acknowledgement | Legitimate interests | We review our mailbox at least once a year and delete messages that are dealt with and no longer needed |
| Emails you send us | Answering you | Contract; legitimate interests | We review our mailbox at least once a year and delete conversations that are finished and no longer needed |
| Register-interest email (if you signed up on our website) | Telling you when the Cube launches; while our founding testers draw is open (until 27 November 2026), entering you in it and emailing you if you win (see the draw's terms) | Consent | Until you unsubscribe or we stop sending launch updates; unconfirmed sign-ups deleted after 30 days |
| Founding testers draw winners: postal address, and the feedback you give us | Sending your prize; improving the Cube | Contract (the draw's terms) | Postal address: deleted once delivery is confirmed. Feedback: kept to improve the product; quoted only with your agreement |
Your Cube sends its ID and the fishing location you set to our servers with each hourly update. Each update is signed, so it can't be altered or faked on the way, but it is not encrypted. Your email address, your Wi-Fi password and the Cube's secret key are never sent this way.
We don't use cookies or analytics on our website. The Buy page uses a Cloudflare check to tell people from automated programs; it does not track you. Payment card details are handled by Stripe; we never see or store them. We don't make automated decisions about you, except that a Cube showing signs of serious misuse (such as a copied identity) can be blocked automatically to protect the service - contact us if you think that's happened by mistake.
We'll only send you marketing emails if you've asked for them, and every one has an unsubscribe link. Service emails (verification codes, renewal reminders, important notices) are part of the service you've bought.
Who else handles your data
We never sell your data. These companies process it for us, under contracts that require them to protect it:
| Company | What for |
|---|---|
| Cloudflare | Hosting our website, service and databases |
| Google (Google Workspace) | Sending and receiving our emails |
| Stripe | Taking payments (Stripe also keeps payment records under its own legal obligations) |
| Royal Mail | Delivering your order and returns (Royal Mail also keeps its own delivery records, under its own privacy policy) |
| Open-Meteo | Weather data - receives only the map coordinates of fishing locations, never your name or contact details |
Some of these may process data outside the UK. Where they do, it is protected by the UK's approved safeguards (adequacy regulations or the international data transfer addendum in their contracts). We may also share data if the law requires it.
Your rights
You can ask to see the data we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Where we rely on consent you can withdraw it at any time. Email support@carpvantage.co.uk and we'll respond within one month. Some data we must keep (for example order records for tax) even if you ask us to delete it.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.