Privacy Policy

Who we are

Hand Linne is operated as a personal project and is accessible at handlinne.co.uk. For any data-related queries, contact us at hello@handlinne.co.uk.

What data we collect

We collect only what is necessary to provide the service:

• Account information — your name and email address, obtained via your chosen login provider (Google or similar) through Auth0.
• Canyon records — descents you log, including canyon name, date, team size, water level, star rating, comments, tags, and any links to external canyon information pages.
• Gear records — ropes and equipment you add, including names, specifications, and usage history.

We do not collect payment information, and we do not use advertising or behavioural tracking technologies.

Why we collect it

Your data is used solely to:

• Provide and maintain your journal (contract performance).
• Associate your records with your account securely (legitimate interest).
• Respond to support or privacy requests you send us (legitimate interest).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Third-party processors

We use a small number of trusted third-party services to operate Canyon Journal:

• Auth0 — handles authentication. When you log in, Auth0 processes your credentials and profile information. See Auth0's Privacy Policy.
• Heroku (Salesforce) — hosts the application and database. Data is stored in the EU/UK region where possible. See Salesforce's Privacy Statement.

Cookies

Canyon Journal uses only essential session cookies required for authentication. No advertising or analytics cookies are set.

How long we keep your data

Your data is retained for as long as you have an active account. If you request deletion of your account, we will delete your personal data within 30 days, except where retention is required by law.

Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your personal data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, email hello@handlinne.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Changes to this policy

We may update this policy from time to time. Material changes will be noted by updating the "Last updated" date above. Continued use of the service after changes constitutes acceptance of the revised policy.

Contact

For any privacy-related questions, please contact us at hello@handlinne.co.uk or via our contact page.