FieldMarks
FieldMarks Data & Privacy Statement
- Version
- 1
- Effective
- 4 August 2026
Who operates FieldMarks
FieldMarks is operated by Yeldis.
Contact details
Questions about personal information or this statement can be sent to contact@fieldmarks.info.
What information FieldMarks uses
When you create an account, FieldMarks records your name, email address, encrypted password information, account status, role, login times and the version of this statement that you acknowledged.
When you use FieldMarks, the service may store locations, routes, route geometry, notes, photographs, categories, groups, measurements, settings, challenge progress, Explorer records, climbing records and other information you choose to add.
Locate Me uses location information supplied by your browser or device. FieldMarks uses that location to display your position and support the feature you requested. Your browser controls whether location access is allowed.
FieldMarks also creates essential session, security, rate-limit, diagnostic and audit records needed to operate and protect the service. Passwords are stored as one-way password hashes rather than readable passwords. API tokens are stored as hashes.
Why this information is used
Account and profile information is used to create and administer your account, authenticate you, provide your requested features, communicate important service information and protect FieldMarks from misuse.
Saved locations, routes, photographs and activity records are used to provide the mapping, planning, organisation, export and progress features you choose to use.
Security and diagnostic information is used to prevent abuse, investigate faults, maintain availability and protect users and the service.
The legal bases relied on may include performance of the service requested by you, legitimate interests in operating and securing FieldMarks, compliance with legal obligations, and consent where a genuinely optional activity requires it. Acknowledging this statement confirms that you have read it; it is not blanket consent for every use of personal information.
Sharing and external services
FieldMarks does not sell personal information.
Some map, weather, geological, heritage, location and identity features use external providers. Requests may include map tiles, viewport coordinates, selected coordinates, device network information or identity-provider account information needed for the feature. The provider receives information according to its own privacy terms.
Google or Apple account information will only be processed if those sign-in choices are enabled and you choose to use them. FieldMarks will store the provider's stable account identifier and information needed to link it to your FieldMarks account. Apple may provide a private relay email address.
Information may also be disclosed where required by law, to protect users or the service, or to a hosting or technical service provider acting under appropriate instructions.
International transfers
Some external providers may process information outside the United Kingdom.
Retention
Active account information and user-created records are normally kept while the account remains active and for as long as needed to provide the requested service. Security and diagnostic records are kept only for the period needed for security, troubleshooting and legal responsibilities.
We keep account and profile information, saved locations, routes, notes, settings and other user-created content for as long as the account remains active. When an account-deletion request is completed, we aim to remove this information from active systems within 30 days, unless we need to retain limited information to meet a legal obligation, resolve a dispute, prevent fraud or investigate a security incident.
Photographs remain available until the user deletes them or the associated account is deleted. Deleted photographs are removed from active storage within 30 days and expire from routine backups within 90 days.
We keep a minimal record of completed account-deletion and data-rights requests for six years after completion. This record may include the request reference, relevant dates, outcome and limited account-identifying information, but not the content that was deleted.
Routine authentication, access and security logs are normally retained for six months. Logs connected with a suspected or confirmed security incident may be retained for longer, until the investigation and any related legal, insurance or regulatory process is complete.
Encrypted backups are retained on a rolling basis for no longer than 90 days. Backups are used only for disaster recovery and are not routinely accessed. Information already deleted from the live service will not be restored for ordinary use; where a backup must be restored, applicable deletion requests will be reapplied.
Minimal records showing which version of the Data and Privacy Statement a user acknowledged may be retained for the lifetime of the account and for six years after closure.
We review these retention periods at least once each year and securely delete or anonymise information when it is no longer required. A longer retention period may apply where information is subject to a legal hold, active complaint, security investigation or other legal requirement.
Account deletion requests disable access immediately under the current FieldMarks process. Some information may remain temporarily while deletion is completed, backups expire, legal obligations are met, or records are needed to establish, exercise or defend legal claims.
Your choices and rights
Depending on the circumstances, you may have rights to request access to your personal information, correct inaccurate information, receive portable information, request deletion, restrict processing, object to processing and withdraw consent where consent is the legal basis.
You can download account information from My Data and request account deletion there. To exercise another right, use the contact details above.
You may complain to the UK Information Commissioner's Office or another applicable supervisory authority if you are concerned about how your information is handled.
Required and optional information
An email address, name, password and acknowledgement of the current statement are required for email registration. Without them FieldMarks cannot create the account. Other profile and mapping information is normally optional unless a specific feature explains that it is needed.
Children
Accounts are limited to people 16 years and over
Automated decisions
FieldMarks does not currently make decisions producing legal or similarly significant effects through solely automated processing.
Security
FieldMarks uses measures including encrypted web connections, secure session cookies, password hashing, rate limiting, access controls, user-scoped database queries and restricted administrator functions. No internet service can guarantee absolute security.
Changes to this statement
The published statement has a version number and effective date. Material changes will be published before the new use begins where required. New registrations record the version acknowledged at registration.
Last reviewed
04/08/2026
FieldMarks is operated by Yeldis.
Contact details
Questions about personal information or this statement can be sent to contact@fieldmarks.info.
What information FieldMarks uses
When you create an account, FieldMarks records your name, email address, encrypted password information, account status, role, login times and the version of this statement that you acknowledged.
When you use FieldMarks, the service may store locations, routes, route geometry, notes, photographs, categories, groups, measurements, settings, challenge progress, Explorer records, climbing records and other information you choose to add.
Locate Me uses location information supplied by your browser or device. FieldMarks uses that location to display your position and support the feature you requested. Your browser controls whether location access is allowed.
FieldMarks also creates essential session, security, rate-limit, diagnostic and audit records needed to operate and protect the service. Passwords are stored as one-way password hashes rather than readable passwords. API tokens are stored as hashes.
Why this information is used
Account and profile information is used to create and administer your account, authenticate you, provide your requested features, communicate important service information and protect FieldMarks from misuse.
Saved locations, routes, photographs and activity records are used to provide the mapping, planning, organisation, export and progress features you choose to use.
Security and diagnostic information is used to prevent abuse, investigate faults, maintain availability and protect users and the service.
The legal bases relied on may include performance of the service requested by you, legitimate interests in operating and securing FieldMarks, compliance with legal obligations, and consent where a genuinely optional activity requires it. Acknowledging this statement confirms that you have read it; it is not blanket consent for every use of personal information.
Sharing and external services
FieldMarks does not sell personal information.
Some map, weather, geological, heritage, location and identity features use external providers. Requests may include map tiles, viewport coordinates, selected coordinates, device network information or identity-provider account information needed for the feature. The provider receives information according to its own privacy terms.
Google or Apple account information will only be processed if those sign-in choices are enabled and you choose to use them. FieldMarks will store the provider's stable account identifier and information needed to link it to your FieldMarks account. Apple may provide a private relay email address.
Information may also be disclosed where required by law, to protect users or the service, or to a hosting or technical service provider acting under appropriate instructions.
International transfers
Some external providers may process information outside the United Kingdom.
Retention
Active account information and user-created records are normally kept while the account remains active and for as long as needed to provide the requested service. Security and diagnostic records are kept only for the period needed for security, troubleshooting and legal responsibilities.
We keep account and profile information, saved locations, routes, notes, settings and other user-created content for as long as the account remains active. When an account-deletion request is completed, we aim to remove this information from active systems within 30 days, unless we need to retain limited information to meet a legal obligation, resolve a dispute, prevent fraud or investigate a security incident.
Photographs remain available until the user deletes them or the associated account is deleted. Deleted photographs are removed from active storage within 30 days and expire from routine backups within 90 days.
We keep a minimal record of completed account-deletion and data-rights requests for six years after completion. This record may include the request reference, relevant dates, outcome and limited account-identifying information, but not the content that was deleted.
Routine authentication, access and security logs are normally retained for six months. Logs connected with a suspected or confirmed security incident may be retained for longer, until the investigation and any related legal, insurance or regulatory process is complete.
Encrypted backups are retained on a rolling basis for no longer than 90 days. Backups are used only for disaster recovery and are not routinely accessed. Information already deleted from the live service will not be restored for ordinary use; where a backup must be restored, applicable deletion requests will be reapplied.
Minimal records showing which version of the Data and Privacy Statement a user acknowledged may be retained for the lifetime of the account and for six years after closure.
We review these retention periods at least once each year and securely delete or anonymise information when it is no longer required. A longer retention period may apply where information is subject to a legal hold, active complaint, security investigation or other legal requirement.
Account deletion requests disable access immediately under the current FieldMarks process. Some information may remain temporarily while deletion is completed, backups expire, legal obligations are met, or records are needed to establish, exercise or defend legal claims.
Your choices and rights
Depending on the circumstances, you may have rights to request access to your personal information, correct inaccurate information, receive portable information, request deletion, restrict processing, object to processing and withdraw consent where consent is the legal basis.
You can download account information from My Data and request account deletion there. To exercise another right, use the contact details above.
You may complain to the UK Information Commissioner's Office or another applicable supervisory authority if you are concerned about how your information is handled.
Required and optional information
An email address, name, password and acknowledgement of the current statement are required for email registration. Without them FieldMarks cannot create the account. Other profile and mapping information is normally optional unless a specific feature explains that it is needed.
Children
Accounts are limited to people 16 years and over
Automated decisions
FieldMarks does not currently make decisions producing legal or similarly significant effects through solely automated processing.
Security
FieldMarks uses measures including encrypted web connections, secure session cookies, password hashing, rate limiting, access controls, user-scoped database queries and restricted administrator functions. No internet service can guarantee absolute security.
Changes to this statement
The published statement has a version number and effective date. Material changes will be published before the new use begins where required. New registrations record the version acknowledged at registration.
Last reviewed
04/08/2026