This Privacy Policy explains how Imagicloud Ltd ("we," "us," or "our") collects, uses, and protects information when you use our web application designed for the paddling community.
If you are reading this policy any language other than English, it has been translated for convenience using automated tools and has not been reviewed. There could be inaccuracies in the translation. Please check the English version if you are unsure and let us know of any anomalies.
Effective Date: February 6, 2026
Brand Name: Paddle Bubble
Legal Entity: Imagicloud Ltd ("Imagicloud")
1. Our Role in Your Data
To provide a seamless experience for the paddling community, we operate in two distinct capacities:
As a Data Controller: We are responsible for the personal data of individual users who create accounts directly with us to use our tools.
As a Data Processor: When International Governing Bodies (IGBs), National Governing Bodies (NGBs), committees, or clubs use our platform to manage their members, they act as the Data Controllers. In these instances, we process that data strictly according to their instructions.
Imagicloud is registered with the Information Commissioner’s Office (ICO) as a data controller and processor. Our registration number is ZA829849. You can verify our registration on the ICO’s website.
2. Information We Collect
We collect information to help you manage your paddling activities effectively:
Account Information: Name, email address, password, and contact details.
Club/Governing Body Affiliation: Membership numbers, certifications, and roles within specific organizations.
Activity Data: Event registrations, competition results, and coaching logs.
Technical Data: IP addresses, browser types, and usage patterns to improve app performance.
3. How We Use Your Data
We use your information for the following purposes:
Service Delivery: Providing tools including for event management, membership tracking, and communication.
Coordination: Allowing NGBs and clubs to verify memberships and manage local committees.
Security: Protecting our users from fraud and ensuring a safe digital environment.
Development: Analyzing anonymized data to build better features for the paddling community.
4. Data Sharing and Disclosure
We do not sell your personal data. Sharing only occurs in these specific contexts:
Affiliated Organizations: If you are a member of an NGB or club using our platform, your data (including medical data, if provided) is accessible to their authorised administrators. Access to medical data is strictly limited to authorised personnel (such as Safety Officers or Event Leads) on a "need-to-know" basis for health and safety purposes.
Membership Verification (API): To streamline experience for members of UK National Governing Bodies, Paddle Bubble connects to the Paddle UK API to verify your membership status, insurance, and qualifications. In this context, Paddle UK acts as an independent Data Controller. In the event that Paddle Bubble later integrates with other NGBs, information already captured will be used to verify data integrity.
Service Providers: We may use third-party hosting or email services that comply with strict data protection standards.
Legal Requirements: If required by law to protect our rights or comply with judicial proceedings.
5. Your Rights
Under GDPR and relevant data protection laws, you have the right to:
Access & Rectification: View and update your personal info at any time.
Data Portability: Request a copy of your data in a machine-readable format.
Erasure: Request that we delete your personal data (subject to legal or contractual obligations held by your NGB/Club).
Withdraw Consent: Opt-out of non-essential communications.
6. Data Security
We implement industry-standard encryption and security protocols to ensure your data stays safe. However, no system is 100% secure, and we encourage users to use strong, unique passwords.
7. Communications & Marketing
We may contact you via email or SMS regarding your use of Paddle Bubble.
Service Communications: We will send you "transactional" messages necessary for the operation of the service (e.g., password resets, event registration confirmations, or critical safety updates). These do not require an opt-in as they are essential to our contact with you.
Marketing Communications: We may send you updates about new features, paddling tips, or community news.
Individuals: We will only send these if you have given us explicit consent (opt-in).
Soft "Opt-In": If you have previously purchased a service from us, we may send you marketing about similar services, provided we gave you a clear chance to opt out when we collected your details and in every subsequent message.
Clubs, Committees, NGBs & IGBs: We may send you marketing relevant to your usage, including new tools and services which may be available.
How to Opt-Out: Every marketing email includes an "Unsubscribe" link. For SMS, you can follow the instructions provided in the message.
8. Online Safety and Content Moderation
In accordance with the UK Online Safety Act, Imagicloud maintains a "Duty of Care" to keep our users safe. If our platform allows for user-generated content (such as comments, messaging, or file sharing), we implement proportionate measures to prevent illegal content and protect children from harm. Users have access to clear reporting mechanisms (feedback tool) to flag any content that is illegal, abusive, or breaches our community standards. We act swiftly to review and, where necessary, remove such content.
9. Changes to This Policy
We may update this policy to reflect changes in our services or legal obligations. We will notify you of any significant changes via the web application or email.
10. Data Storage and International Transfers'
Paddle Bubble is hosted on a distributed infrastructure to ensure high availability and performance. Your data is primarily stored and processed in the United Kingdom and the European Economic Area (EEA).
- Core Database: Hosted in Swansea, UK and London, UK.
- Redundancy & Quorum: We use an arbitrator node located in London, UK to maintain database integrity.
- Cloud Service: We use Amazon Web Services (AWS) across multiple regions (including UK and EEA) for infrastructure, encrypted backups and communication tools.
Where data is transferred outside of the UK, we ensure it is protected by appropriate safeguards, such as UK Adequacy Regulations or Standard Contractual Clauses, ensuring a level of protection equivalent to UK standards.
Contact Us
If you have questions regarding this policy or how your data is handled, please contact us at: contact@paddlebubble.com.
Note to NGBs and Clubs: As Data Controllers, you are responsible for maintaining your own privacy notices informing your members how you specifically use their data through the Imagicloud platform.