Privacy Policy

This policy explains what personal data Wave Pro collects, why, and your rights over it. We follow UK GDPR and the Data Protection Act 2018, and we keep data collection to what the service genuinely needs.

1. Who we are

Wave Pro is operated by Primox Software Ltd, which is the data controller for the personal data described here. Primox Software Ltd is registered with the Information Commissioner’s Office under registration number ZC172666, and Wave Pro is the name we trade and provide the service under. You can reach us at privacy@wave-pro.co.uk.

2. What we collect

• Account — your email address, name, and an encrypted password, together with the record that you accepted our Terms and confirmed you are 18 or over when you created the account.
• Profile — your home location (stored as coordinates only), your chosen home launch, notification preferences, a profile photo if you add one, and a bio and @handle if you use Social.
• Garage — details and records of craft you add, including service history, reminders, ownership details, and any documents or photographs you upload. These are private to your account unless you publish a public craft page.
• Ride Mode journeys — if you choose to record a ride, the route of that journey, distance and time. Journeys are private to you. If you enter a Compete class, derived figures from those rides (such as distance, time or a personal best) can appear on a ranking among other members who entered the same class.
• Saved journeys — routes you save in Plan a Journey, private to you.
• Social — posts, captions, photographs, likes, comments, follows, blocks and reports you choose to make. Posts are reviewed before they appear to other riders.
• Marketplace — listing title, description, price, category, postcode and, if you choose, a phone number, WhatsApp number or contact email so a buyer can reach you. Live listings are visible without an account.
• Ride Outs and events — if you organise or join a plan: the meet details you write, and your RSVP.
• Contributions — launch suggestions, updates, reports and photographs you choose to submit for the launch record, and basic technical logs needed to run and secure the service.

Some features you may see described as later — including Rider Assistance — are not currently available to members. This policy describes what Wave Pro does today, and we will update it when new features launch.

3. How we use it

• to provide and personalise Wave Pro — your greeting, nearby launches, Home briefing, Garage, rides and Compete figures;
• to show other members what you choose to publish (a Social profile, a post, a live Marketplace listing, a Ride Out);
• to review and moderate community contributions, Social photographs and Marketplace listings before they appear publicly, or to take them down;
• to keep the platform safe and prevent abuse;
• to send service messages, and — only where you have opted in — notifications.

4. Legal bases

We process data to perform our contract with you (providing the service), for our legitimate interests (keeping Wave Pro working, safe, and improving), and with your consent where required (such as notifications and precise location). You can withdraw consent at any time.

5. Sharing your data

We do not sell your personal data. We share it only:

• Publicly, where you choose to publish — a launch suggestion, update or photo appears on a launch record only after it has been reviewed and approved. A Social post appears only after review. A Marketplace listing that is live can be read without an account, including the contact details you chose to show. A public rider or craft profile is visible to people who have the link.
• With other members, where the product requires it — for example a Ride Out you join, or a Compete ranking you entered. Rankings show your name only if your profile is public; otherwise the row is anonymous.
• With service providers that run Wave Pro on our behalf — cloud database, authentication and file storage (Supabase), application hosting (Netlify), weather and marine forecasts (Open-Meteo — receives the coordinates being forecast, including a launch or the start of a recorded ride when a conditions snapshot is taken), map tiles (Geoapify and OpenStreetMap), place and postcode search (OpenStreetMap Nominatim and postcodes.io — receive the search you type, requested by our server), transactional email delivery (Resend), error reporting (Sentry) and privacy-friendly analytics (Plausible — cookieless and aggregate only, with no personal identifiers). They act on our instructions.
• Where required by law, or to protect the rights and safety of our members and the public.

6. Businesses listed in Services & Dealers

Wave Pro’s Services & Dealers directory helps riders and boaters find marine dealers, servicing, parts, storage, training, clubs, hire and specialist services. Every listing is free, and so are its contact details and its logo. Many listings are added and kept up to date by Wave Pro from the business’s public information before the business has been in touch with us; those are marked Listed by Wave Pro, unless the listing shows the business’s logo with its permission. Being listed is not a verification, an endorsement or a partnership.

• What we publish — the business’s trading name and where it trades from: its trading address or town or, for a business that works across an area without a public address, its service area (for example “Covering Anglesey & Cheshire”). Where available, we also publish its postcode; the categories, services and brands it deals in; a short factual description; its opening hours, where it publishes them; and the contact details it makes public for customers — telephone, a general business email address, website and WhatsApp number. We publish a contact detail only after checking it against the business’s own published information, or because the business gave it to us for its listing. We never publish a personal phone number, home address or personal email address that the business has not made public for its customers. We show a business’s logo only when the business has given it to us or given us permission; the logo is free. We publish no reviews or photographs for a listing Wave Pro added. Showing a logo does not mean the business has verified its listing or that Wave Pro endorses it. A sponsorship is labelled and is separate from all of these.
• Sole traders and partnerships — where a business is run by a sole trader or a partnership, its contact details and trading name may be personal data. We publish only the details the business itself makes public for customers (or gives us for its listing), never a personal number, address or email it has not made public for its business, and we correct or remove them promptly when asked.
• Separate trading locations — a business that trades from more than one place may have a listing for each location, shown as part of the same business.
• Order of listings — in the full list, businesses follow an order that rotates each week, so that each business takes its turn near the top. A logo, a sponsorship or contact with Wave Pro doesn’t change that order. A search shows the closest name matches first, and in the app a list near a place shows businesses verified by Wave Pro first, then the nearest. If we ever offer paid placement, it will always be clearly labelled.
• Maps and search engines — where a postcode is published, we use the approximate position of that postcode (not the exact premises) to show distances and nearby businesses. The directory page also includes the listing details in structured data that search engines can read, including those postcode-derived map coordinates. A business listed by service area has no map position and no distance.
• Where it comes from — information the business publishes itself (its own website, social media pages and signage), manufacturers’ dealer lists, and Companies House. We may use automated research tools to find and check this public information. We check each listing before it appears and keep a record of where its information came from and when it was added or last updated.
• Legal basis — our legitimate interest in helping riders find the businesses that keep them on the water, which also gives the businesses free visibility. Where a trading name is a person’s name, that name, the business’s address and its public contact details are personal data and are handled in the same way, and a business can ask us at any time to correct or remove any of them.
• Contacting listed businesses — we may contact a listed business to tell it about its free listing and to invite it to confirm or correct the listing, send us its logo free of charge, or ask us to remove it. We do not use the directory to email businesses about anything else without their agreement. We use only a general business address the business publishes itself (such as an info@ or sales@ address on its own website), never a personal address. We email companies, limited liability partnerships and other corporate bodies in this way; we email a sole trader or a partnership only if they have asked us to or agreed to it. We send no more than one email and two follow-ups about a listing. Our legal basis is our legitimate interests: keeping the directory accurate and telling a business we list how to correct or remove its listing. We have weighed that against the business’s interests, which is why the contact is limited in these ways. Every email says who we are, links to this policy and explains how to opt out.
• Your right to object — a business can object to these emails at any time, free of charge: reply “no thanks” or “unsubscribe”, or email business@wave-pro.co.uk, and we stop. We then keep a minimal do-not-contact record (the address or business and the date) for as long as we run the directory, so that we never contact it again. We keep our record of these conversations, including the business’s replies, in our own customer records, hosted by our service providers (Supabase and Netlify) and our business email provider (Zoho). We keep those records for two years after our last contact with the business; if it asks us to change its listing, we keep them as records of changes (below).
• Records of changes — when a business confirms, corrects or removes its listing, or sends us its logo, we record what was asked, who asked (the business name and the address the request came from), what we changed, and when. We keep this for as long as the listing is published and for two years afterwards. Records kept under our former paid claim terms (before 5 November 2026) stay under the retention periods that applied when they were made.
• Your choices — if you run a listed business you can, free of charge, ask us to confirm or correct your listing; add or update its public contact details, your logo or further factual service information; remove it; or stop it being listed again (suppression), by emailing business@wave-pro.co.uk. Before we make a correction, add a logo or change a contact detail, we take reasonable steps to check that the request comes from the business. A request to remove a listing, or an objection to it, does not depend on proving that you own the business: anyone whose details appear in a listing can make one, and we may ask only for what we need to find the listing. We remove a listing promptly when asked, normally within two working days, and keep only the minimum record needed (the business name, its location and the date) so that it is not listed again.

7. Location and permissions

Location is optional. If you allow it, we use your device location to find nearby launches, and your home area is stored as coordinates only. If you choose to record a ride with Ride Mode, the route of that journey is saved as a location trace — recorded only while the app is open and on screen. The raw route is visible only to you. Wave Pro never records your location in the background, and no one else can follow your live position. A Compete ranking may show a launch name derived from a ride if you entered that class — not the GPS trace. You can change or clear your home area any time in your account, and revoke location permissions in your device settings.

8. Retention, export and deleting your account

We keep your data while your account is active. From Account settings you can manage your account yourself at any time — change your password or email, update notification preferences, and download a copy of your data.

Deleting your account is permanent and cannot be undone. When you delete your account:

• We permanently delete your profile, Garage and craft history (including uploaded documents and private photographs), your recorded journeys, saved launches, saved journeys and home launch.
• We delete files stored under your account in craft, avatar, marketplace, contribution, ride-telemetry, Social (including public photographs) and public craft-image storage, and any staging uploads that never went live.
• We anonymise and keep any genuine launch contributions you made — with your personal link removed and the author shown as “Former member” — so useful community knowledge is not lost.
• We retain records needed for platform integrity — such as moderation and abuse-report records — with your personal attribution removed. These are never shown to other users with your identity.

Social photographs and public craft images are removed with the account. If a file is ever left behind by a processing error, email privacy@wave-pro.co.uk and we will complete the removal.

Where we must keep limited records to meet a legal, accounting, or fraud-prevention obligation, we retain only what is necessary for that purpose.

After your account is deleted you may optionally tell us why you left. That note is stored against a random reference, not your old account. We do not copy your deleted email address onto the response. If you want a reply you must type an email address and say we may contact you. We keep these notes for 24 months, then delete them. Private comments are never shown in public dashboards, analytics or error reports.

9. Security

Access to your data is protected by authentication and row-level security so members can only reach their own private records. Passwords are stored hashed, and data is encrypted in transit.

10. Your rights

Under UK GDPR you can access, correct, delete, restrict, or object to our use of your personal data, and request a portable copy. You can exercise several of these yourself from Account settings — download your data, change your password or email, and permanently delete your account. For any other request, email privacy@wave-pro.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

11. Cookies and storage on your device

Wave Pro uses only the storage needed to run the service: your signed-in session and essential preferences are kept in your browser or app’s local storage, and a ride you are recording is buffered on your device until it is saved. We do not use advertising or cross-site tracking cookies, and our analytics are cookieless.

12. Age requirement and children

Wave Pro accounts are for adults: you must be 18 or over to create an account, and creating one includes confirming this. That is an eligibility rule we set for Wave Pro accounts. Wave Pro is not directed at children.

13. International transfers

Where a service provider processes data outside the UK or EEA, we rely on appropriate safeguards (such as adequacy decisions or standard contractual clauses) to protect it.

14. Changes

We may update this policy as Wave Pro evolves. We will post the revised version here with a new date, and for material changes we will take reasonable steps to bring them to your attention where reasonably practicable.

The version published at wave-pro.co.uk/privacy is the current one. Older versions of the Wave Pro app may show an earlier copy of this policy; where they differ, the published version applies.

15. Contact

For any privacy question or request, email privacy@wave-pro.co.uk.