Privacy Policy

MegaFin Fishing LLC (“MegaFin,” “we,” “us,” or “our”) is a Florida limited liability company that offers handmade fishing flies, fly assortments, fly boxes, apparel, gift cards, accessories, fishing expeditions, and related fly-fishing products and services.

MegaFin Fishing LLC does business as “MegaFin,” “Megafin Fishing Company,” and “Megafin Brush & Fly.”

This Privacy Policy applies to personal information that we collect through:

• The MegaFin website and online store;
• Purchases, checkout, order fulfillment, returns, and customer service;
• Newsletter and marketing subscriptions;
• Contact forms and direct communications;
• The MegaFin Guide Program;
• Expedition and fishing-trip inquiries, bookings, and participation;
• Reviews, testimonials, photographs, and other content submitted to us;
• Our business communications with guides, fly shops, lodges, outfitters, collaborators, and wholesale contacts; and
• Cookies, analytics tools, advertising technologies, and similar technologies used on the Site.

This Privacy Policy does not govern the independent privacy practices of third parties that we do not own or control, such as social media platforms, payment processors, shipping carriers, lodges, outfitters, or third-party websites linked from the Site. Those third parties process information under their own privacy notices and terms.

For purposes of this Privacy Policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household.

Personal information generally does not include information that has been lawfully made public, aggregated information, or information that has been deidentified so that it cannot reasonably be associated with an individual.

The meaning of personal information may vary under applicable law.

We collect personal information through the following principal sources:

1. Directly from you, such as when you place an order, subscribe to our newsletter, submit a form, contact us, apply to the Guide Program, or inquire about or book an expedition.
2. Automatically from your browser or device, through cookies, pixels, logs, analytics tools, and similar technologies.
3. From service providers, including payment providers, analytics providers, advertising platforms, email-service providers, fraud-prevention services, and shipping carriers.
4. From business partners or public sources, where appropriate, such as information provided by guides, fly shops, lodges, outfitters, expedition partners, collaborators, social media platforms, or individuals who interact with MegaFin publicly.

Depending on how you interact with MegaFin, we may collect the following information.

When you visit the Site, MegaFin and certain service providers may automatically collect:

• Internet Protocol address;
• Browser type and version;
• Device type;
• Operating system;
• Device or online identifiers;
• Approximate location derived from an IP address;
• Referring website or advertising source;
• Pages viewed;
• Products viewed;
• Links or buttons clicked;
• Search activity on the Site;
• Shopping-cart activity;
• Checkout activity;
• Dates and times of visits;
• Session duration;
• Interaction with emails or advertisements; and
• Technical information used to detect errors, fraud, bots, or security incidents.

This information may be associated with a browser, device, cookie identifier, customer account, email address, or transaction, depending on the technology and applicable settings.

MegaFin uses third-party payment-processing services to process customer payments.

Depending on the payment options enabled at checkout, payments may be processed through Squarespace Payments or PayPal. Digital-wallet or alternative-payment options, such as Apple Pay or Google Pay, may be offered through the applicable payment infrastructure.

Payment providers may collect:

• Cardholder name;
• Billing address;
• Credit or debit card information;
• Bank or digital-wallet information;
• Transaction identifiers;
• Device and fraud-prevention information; and
• Other information required to authorize and complete a payment.

Payment providers process payment information under their own privacy notices and contractual terms.

We may use personal information to:

• Operate, administer, secure, and maintain the Site;
• Display content and provide Site functionality;
• Process and fulfill purchases;
• Verify and authorize payments;
• Calculate taxes, shipping costs, and order totals;
• Arrange shipping and delivery;
• Communicate about orders, delays, customs, returns, refunds, or delivery issues;
• Provide customer service;
• Administer customer accounts;
• Process Guide Program applications;
• Arrange, administer, and provide expeditions and fishing trips, including coordinating with travel and logistics partners and addressing participant safety;
• Manage relationships with guides, fly shops, lodges, outfitters, wholesale customers, collaborators, and other business contacts;
• Send newsletters, product announcements, promotions, and other marketing communications;
• Measure email engagement;
• Analyze Site traffic and customer interactions;
• Improve our Site, products, communications, and customer experience;
• Measure advertising performance;
• Conduct remarketing or targeted-advertising activities where permitted;
• Maintain records of consent and communication preferences;
• Detect, prevent, investigate, and respond to fraud, misuse, security incidents, or unlawful activity;
• Protect MegaFin, our customers, and other persons;
• Establish, exercise, or defend legal claims;
• Comply with tax, accounting, consumer-protection, privacy, customs, law-enforcement, and other legal obligations;
• Enforce our agreements and Terms of Service;
• Complete or evaluate a business transaction involving MegaFin; and
• Carry out another purpose disclosed to you at the time information is collected.

We will not use personal information for a materially different, unrelated, or incompatible purpose without providing appropriate notice and obtaining consent where required by law.

MegaFin and its service providers may use cookies, pixels, tags, scripts, software-development tools, server logs, and similar technologies.

Where available, you may use the Site’s cookie banner, the “Your Privacy Choices” link, or the “Cookie Settings” control to accept permitted cookies, reject non-essential cookies, select categories of non-essential cookies, and change or withdraw your preferences.

You may also control cookies through your browser or device settings. Blocking all cookies may prevent certain Site functions, including shopping-cart, account, or checkout features, from working correctly.

Deleting cookies may remove previously stored preferences and cause the cookie banner to appear again.

Our ability to block or control cookies placed through custom code or third-party integrations depends on the technical configuration of those tools. We review our integrations and seek to honor applicable choices, but third-party services may also provide their own privacy controls.

The Site is hosted and operated using Squarespace. Squarespace may process information concerning browsers, networks, and devices; IP addresses; pages visited before accessing the Site; pages and content viewed on the Site; clicks, scrolling, searches, and timestamps; shopping-cart and checkout activity; orders and customer details; and Site security and performance.

Squarespace processes information to host and secure the Site, provide commerce and checkout functionality, generate analytics, prevent fraud, and provide other services requested by MegaFin. Squarespace’s handling of information is governed by its own privacy documentation and its agreements with MegaFin.

MegaFin may use Squarespace Analytics and Google Analytics to understand how visitors use the Site. Analytics information may include pages viewed, approximate location, device and browser information, referring source, time spent on the Site, interactions with Site content, and conversion or transaction events.

Google may process this information under its own privacy policies and terms. Where required, analytics technologies will be activated only after appropriate consent.

We do not represent that all analytics data is completely anonymous. Some analytics information may constitute personal information or pseudonymous information under applicable law.

MegaFin may use advertising services provided by Meta Platforms, Inc., including the Meta Pixel, to measure advertising effectiveness, understand interactions with advertisements, and conduct remarketing or retargeting.

Depending on configuration, the Meta Pixel may collect pages or products viewed; shopping-cart or checkout activity; purchases; browser and device information; cookie or advertising identifiers; IP address; and information used for matching advertising interactions with a Meta account.

MegaFin does not sell personal information in exchange for money.

However, certain U.S. privacy laws use broad definitions of “sale,” “sharing,” “targeted advertising,” or “cross-context behavioral advertising.” Under those definitions, allowing an advertising provider to collect or receive online identifiers and Site-interaction information for advertising purposes may be treated as a sale, sharing, or targeted-advertising activity even when MegaFin receives no money.

Where applicable, you may request to opt out of this type of advertising-related disclosure by:

• Using the “Your Privacy Choices” link in our website footer;
• Using the Site’s cookie-preference controls;
• Activating a legally recognized browser-based opt-out preference signal, such as Global Privacy Control, where supported;
• Adjusting your advertising preferences with the relevant platform; or
• Emailing fish@megafinfishing.com with the subject line “Privacy Opt-Out Request.”

MegaFin does not knowingly sell or share the personal information of individuals under 16 years of age for cross-context behavioral advertising.

MegaFin uses Squarespace Email Campaigns, or another identified email-service provider, to administer newsletter subscriptions and send marketing communications. The email-service provider may process email address; subscription status; signup source and date; campaign delivery information; email opens and clicks, where enabled; device and browser information; unsubscribe activity; and related engagement information.

Where required by applicable law, we will obtain appropriate consent before sending marketing communications.

Marketing emails sent by MegaFin will use accurate sender and routing information; avoid materially deceptive subject lines; identify MegaFin as the sender; include a valid physical postal address; include a clear and functioning method to unsubscribe; and be managed consistently with applicable U.S. commercial-email requirements.

We will honor valid unsubscribe requests within the period required by applicable law and, in any event, no later than ten business days after receipt.

We will not charge a fee, require information beyond what is reasonably necessary, or require more than a reply email or a visit to a single webpage as a condition of processing a marketing-email opt-out.

Order confirmations, shipping notices, security messages, responses to customer-service requests, and other primarily transactional or relationship communications may still be sent when reasonably necessary.

MegaFin does not currently use automated abandoned-cart marketing emails.

If MegaFin activates abandoned-cart communications in the future, we will review the applicable consent requirements, configure the service appropriately, and update this Privacy Policy if the change materially affects our privacy practices.

MegaFin does not currently send recurring marketing communications by SMS or text message.

If MegaFin offers SMS or text-message communications in the future, we will obtain your prior express consent through a separate opt-in that is not a condition of any purchase; clearly disclose the program, the approximate message frequency, and that message and data rates may apply; provide a simple opt-out method, such as replying STOP; and honor opt-out requests promptly.

Mobile telephone numbers and consent information collected for SMS delivery will not be sold, and will not be shared with third parties for those third parties’ own marketing purposes.

We may disclose personal information to the following categories of recipients.

MegaFin does not disclose customer names, email addresses, or telephone numbers to unaffiliated third parties for those third parties to use in their own independent direct-marketing lists.

This statement does not prevent disclosures to service providers, advertising platforms, business-transaction recipients, or other recipients described in this Privacy Policy.

MegaFin does not intentionally collect through the ordinary operation of the Site: Social Security numbers; government identification numbers; account passwords for third-party services; precise geolocation; health diagnoses; biometric templates; racial or ethnic origin; religious or philosophical beliefs; or other categories treated as sensitive personal information under applicable comprehensive privacy laws.

In connection with expeditions and fishing trips, you may choose to provide health, medical, dietary, or accessibility information that may be treated as sensitive personal information. Where required, we process that information only with your consent and only as reasonably necessary to arrange and provide the trip and to support participant safety. See Section 5.6.

Please do not include sensitive personal information in unrestricted text fields or unsolicited communications.

MegaFin is established in the United States and primarily markets its products to customers in the United States. To the extent a jurisdiction requires MegaFin to identify a lawful basis for processing, the basis may include:

• Performance of a contract, such as processing and fulfilling an order or arranging an expedition;
• Consent, such as for certain marketing communications, non-essential cookies, or certain sensitive-information processing;
• Legitimate interests, such as operating, securing, preventing fraud, and improving the Site, provided those interests are not overridden by applicable individual rights;
• Compliance with legal obligations; and
• Establishment, exercise, or defense of legal claims.

MegaFin and many of its service providers operate in the United States. If you access the Site from another country, your personal information may be transferred to, stored in, or processed in the United States or another country where our providers operate. Those countries may have privacy laws that differ from the laws in your jurisdiction.

MegaFin does not currently represent that it specifically directs or targets its Site to residents of the European Economic Area or United Kingdom. International customers remain entitled to any privacy rights that apply to MegaFin under mandatory law.

Certain MegaFin products may be manufactured or prepared in Colombia by MegaFin’s own operations or by an affiliated or related party.

MegaFin does not ordinarily transfer customer names, payment information, billing information, or complete order records to production personnel in Colombia solely because a product is manufactured there.

If information must be disclosed to a person or entity in Colombia for customization, fulfillment, quality control, shipping, customer service, or another operational need, MegaFin will seek to limit the information to what is reasonably necessary for that purpose. Any party in Colombia that processes personal information on MegaFin’s behalf is expected to handle that information consistently with this Privacy Policy and with applicable Colombian data-protection law, including Law 1581 of 2012 and its implementing regulations.

MegaFin retains personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting, contractual, fraud-prevention, and dispute-resolution purposes.

• Order, payment, tax, and transaction records: generally up to seven years after the transaction, or longer where required.
• Customer-account information: while the account remains active and for a reasonable period afterward.
• Newsletter information: until you unsubscribe or the list is discontinued.
• Contact-form and customer-service communications: generally up to three years after the matter is closed.
• Guide Program records: generally up to five years after the relationship ends.
• Expedition and fishing-trip records: generally up to five years, or longer where necessary for contractual, insurance, or legal purposes.
• Analytics information: according to configured settings and provider retention options.
• Privacy-request records: for a reasonable period to document our response and compliance.

These periods are general guidelines and may be shortened or extended based on the nature of the information, applicable law, deletion requests, or other circumstances.

MegaFin uses reasonable administrative, organizational, and technical safeguards designed to protect personal information, including use of established website, payment, and communications providers; account-access controls; secure transmission technologies; fraud-prevention tools; and data-minimization practices.

Security incidents. If we determine that a security incident has compromised personal information, we will investigate and take reasonable steps to address it, and we will notify affected individuals and applicable authorities where required by law, including the Florida Information Protection Act, within the timeframes those laws require.

Residents of certain U.S. states may have privacy rights when the applicable law applies to MegaFin and the relevant processing activity. Depending on the jurisdiction, these rights may include the right to:

• Confirm whether we process personal information;
• Access personal information;
• Obtain a portable copy;
• Correct inaccurate personal information;
• Delete personal information;
• Opt out of the sale of personal information;
• Opt out of sharing for cross-context behavioral advertising;
• Opt out of targeted advertising;
• Opt out of certain profiling;
• Limit certain uses of sensitive personal information;
• Appeal a decision concerning a privacy request; and
• Receive equal service without unlawful discrimination for exercising a privacy right.

These rights are subject to applicable definitions, thresholds, exemptions, exceptions, verification procedures, and limitations. Nothing in this Privacy Policy represents that MegaFin is presently subject to every comprehensive state privacy statute.

Even where a comprehensive state privacy law does not legally require MegaFin to provide a particular right, MegaFin will make a reasonable good-faith effort to honor verified requests from U.S. residents to access, correct, delete, or obtain a portable copy of personal information, and to opt out of advertising-related sale, sharing, or targeted advertising.

You may submit a request by emailing:

Please specify your name; the email address associated with your order, subscription, or communication; your state or country of residence; the type of request; any relevant order number; and enough information for us to reasonably locate the applicable records.

Do not send a copy of a government identification document unless we specifically request it and provide appropriate instructions.

We may take reasonable steps to verify your identity and authority before responding. Verification may include confirming control of the email address associated with an order or subscription; requesting information about a transaction; or using another proportionate verification method.

We may deny or limit a request where we cannot reasonably verify identity, the request is fraudulent or abusive, an exception applies, or fulfilling the request would infringe the rights of another person.

Where applicable law permits, you may authorize another person to submit a request on your behalf. We may require written proof of the agent’s authority, direct confirmation from you, and verification of both your identity and the agent’s identity. We may deny a request from an agent who does not provide sufficient evidence of authority.

We will respond to valid privacy requests within the period required by applicable law. If applicable law provides a right to appeal and we deny your request, our response will explain how to submit an appeal.

Where no statutory appeal right applies, you may ask us to reconsider by emailing fish@megafinfishing.com with the subject line “Privacy Request Reconsideration.”

Where applicable law requires recognition of a browser-based opt-out preference signal, such as Global Privacy Control, MegaFin will seek to process the signal as required for the browser or device transmitting it. A browser signal may not opt you out of communications associated with an email address unless we can reasonably connect the signal to that address.

Some browsers transmit “Do Not Track” signals. Because there is not a universally accepted technical or legal standard governing all Do Not Track signals, the Site may not respond to them in a uniform manner. Global Privacy Control and other legally recognized opt-out preference signals are addressed separately in Section 33.

MegaFin will not unlawfully deny goods or services, charge a different price, provide a different level or quality of service, or retaliate against you because you exercised an applicable privacy right.

The Site and MegaFin’s products are not directed to children under 13 years of age. MegaFin does not knowingly collect personal information online from a child under 13 in a manner subject to the Children’s Online Privacy Protection Act without legally required parental consent.

A parent or legal guardian who believes that a child submitted personal information to MegaFin may contact fish@megafinfishing.com.

MegaFin maintains or may maintain profiles on Instagram, Facebook, YouTube, and other social platforms. When you interact with MegaFin through a social platform, the platform may collect and process information independently under its own privacy notice. Your use of a social media platform is governed by that platform’s policies.

Content submitted for publication may become publicly accessible. Before publishing customer or participant content, MegaFin may request permission or rely on an applicable submission form, program agreement, license, release, or direct authorization.

Unless a separate written agreement provides otherwise: you retain any ownership rights you lawfully hold in submitted content; you represent that you have the authority to submit the content; MegaFin will use identifiable submitted content for the purposes disclosed when permission is requested; and you may contact us to request that we stop future use, although removal may not be possible from materials already produced or distributed.

The Site may contain original photographs owned by MegaFin; photographs owned by or licensed from photographers; content provided by guides, customers, or collaborators; stock or licensed visual materials; photographs edited using digital tools; composite images; illustrations; and content generated or enhanced with artificial-intelligence-assisted tools.

Where visual content depicts an identifiable person, MegaFin seeks to use that content under an appropriate permission, release, license, legal exception, or other lawful basis.

MegaFin does not intend to use synthetic or materially altered content to misrepresent the essential characteristics, construction, quantity, or appearance of a product offered for sale.

The Site may link to or embed third-party services, including social media pages, videos, maps, partner websites, payment services, advertising services, and other external content. A third party may collect information when you load, view, or interact with embedded content, even if you do not leave the Site.

MegaFin does not control the independent privacy practices, security, or content of third-party websites and services.

MegaFin may update this Privacy Policy to reflect changes to the Site or products, new or discontinued service providers, changes to cookies or advertising practices, new business programs, changes in applicable law, or clarifications to our practices.

The revised policy will be posted with an updated “Last Updated” date. Where required or appropriate, we may provide additional notice through email, a Site banner, or another reasonable method. Changes apply prospectively from their stated effective date.

Questions, requests, or complaints concerning this Privacy Policy may be directed to: