Effective: 24 August 2026. Bouldering Wall is responsible for the personal information described in this notice. Contact us at [email protected].
Information we collect
If you create an account, we collect your email address, email-verification status, notification preference, a securely derived password hash, display name, username, account type and the optional profile details you add. This can include a broad home area, country, grade range, climbing preferences, availability and biography. We also store your synced Passport data, community posts and replies, reports, gym claims, ownership-verification status and evidence notes, owner-supplied listing details and media rights confirmations, profile revision history, gym-owner dashboard progress and optional owner feedback, short-lived hashed email-action tokens and account security records.
If you ask a gym about a visit, we collect your contact details, request type, optional planned date, party size, experience level and message. If you apply for a gym pilot, add a spot, join the newsletter or contact us, we collect the information you submit. For limited gym-directory outreach, we may also record publicly available or directly supplied business contact details, private outreach notes, follow-up status and whether an individual invitation link was visited. Our web server creates standard security and access logs, such as the requested page, time, browser information and IP address. Referral links contain campaign tags so gyms can see traffic sent from Bouldering Wall.
How we use it
- To create and secure your account.
- To sync your Passport and saved climbing preferences.
- To publish the profile fields, posts and replies you choose to make public.
- To review reports and moderate the community.
- With your consent, to send a visit question to the verified owner of the selected gym; if the owner contact is not verified, we hold it for manual review instead.
- To invite listed gyms to verify their free standard listing and measure the claim journey.
- To verify gym-owner claims, maintain listings and show dashboard completion progress.
- To send one-time operational reminders about an incomplete claimed listing and request optional feedback after publication.
- To operate optional gym partner packages and provide referral and enquiry reports.
- To protect the site from spam, abuse and security threats.
- To send newsletters or community notifications only when you have requested them.
Our reasons for processing
We use submitted information to take steps you request, to provide an agreed service, with your consent where appropriate, and for legitimate interests such as keeping the directory accurate and secure. You can withdraw newsletter consent at any time.
Services that help us operate
Account, profile and community records are stored in Bouldering Wall's hosted database. Resend processes the recipient address and message delivery data for account verification, password resets, gym-claim and owner-dashboard messages, safety alerts and optional community-reply notifications. Stripe processes Featured Gym checkout, billing, payment and subscription information; Bouldering Wall stores the resulting transaction and subscription references but not full card details. FormSubmit processes some listing and spot submissions so they can reach our inbox. MailerLite separately processes newsletter subscriptions and delivers requested Field Notes updates. Standard infrastructure providers may process limited technical data to host, secure and deliver the site.
Optional analytics and your choice
Google Analytics is loaded only after you accept optional analytics. It helps us understand page visits and useful actions such as official-site, map, affiliate and form clicks. With the same choice, Bouldering Wall also stores aggregate gym-listing views and official-site, booking and map clicks so a verified gym can see how its listing is performing. Those listing-event records contain the gym, action, page, placement and time—not your name, email address, form contents or a visitor profile. Gym owners see totals, not individual visitor identities. We do not send form contents or email addresses to Analytics, and advertising signals are disabled. Your choice is stored on your device for up to 180 days. Use “Cookie choices” in the footer to reject or accept analytics later.
Passport, follows, comparisons and trips
Before you sign in, Passport and planning data is stored in your browser. When you sign in, visited walls, wishlists, follows, comparison choices, trip stops and Climber DNA are merged into your account and stored so they can sync across devices. Shared trip links contain public venue identifiers only.
Precise location is requested only when you choose “near me” or “use my location”. It is used in the browser to calculate distance and is not stored in your account or sent to Bouldering Wall; the browser and map or weather provider may apply their own policies to requests they receive.
Public community information
Your display name, username, optional climbing profile, community posts and replies are public. Your email address and password record are not displayed. Do not publish home addresses, private travel routines, telephone numbers or other sensitive contact details. Reports are visible only to moderators.
Affiliate links
Some outbound shop links are affiliate links. The destination retailer applies its own privacy and cookie policies. Bouldering Wall may receive an aggregated commission report if a qualifying purchase is made.
Retention and sharing
Account-verification links expire after 48 hours, gym-ownership links after 72 hours and password-reset links after 60 minutes; only token hashes are stored, and used tokens are removed or invalidated. We keep account data while your account is active and retain security, delivery, verification, moderation or transaction records when reasonably needed to prevent abuse, meet legal obligations or resolve disputes. Gym enquiries are retained only as long as needed to route and administer the request, measure outcomes and resolve problems. Business outreach records are reviewed as the directory develops, and a do-not-contact request is retained so it can be respected. Removed community content may be retained for a limited moderation record. We do not sell personal information. We share it only with the selected verified gym owner, service providers needed for these purposes or when required by law.
Your choices and rights
Depending on where you live, you may ask for access, correction, deletion, restriction, portability or an objection to processing. Email us to make a request. UK visitors may also complain to the Information Commissioner’s Office.
International processing
Some service providers may process information outside your country. Where required, we rely on recognised safeguards provided by those services.
Changes
We may update this notice when the site or its services change. The effective date above shows the latest version.