How we collect, use, and protect your personal data
Findr Dublin ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our lost property recovery service.
We operate in full compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Irish Data Protection Act 2018. As a Data Controller, we take our responsibilities seriously and are committed to transparency in our data practices.
The Data Controller responsible for your personal data is:
Findr Dublin
6 Fern Road
Sandyford, Dublin 18
D18FP98
Ireland
Email: info@findrdublin.ie
WhatsApp: +353 89 467 5775
We collect and process the following categories of personal data:
| Data Category | Examples | Purpose |
|---|---|---|
| Contact Details | Name, email address, phone number, postal address | To communicate about your claim and arrange delivery |
| Claim Information | Item description, venue visited, date lost, verification answers | To match and verify ownership of items |
| Payment Information | Transaction records (processed via Stripe/Revolut) | To process finder's fees and delivery charges |
When we collect lost items from partner venues, certain items may contain personal data belonging to their owners:
Important: We do NOT collect passports, national identity cards, driving licences, or other government-issued identification documents. These remain with the venue or are reported to An Garda Síochána.
When you visit our website, we may collect:
We process your personal data under the following lawful bases as defined in Article 6 of the GDPR:
| Processing Activity | Lawful Basis |
|---|---|
| Processing claims and returning items | Legitimate Interest – Reuniting owners with their property is in the interest of both parties and is reasonably expected |
| Processing payments | Contract – Necessary to fulfil our service agreement |
| Contacting you about your claim | Legitimate Interest – Essential for service delivery |
| Retaining transaction records | Legal Obligation – Required for tax and accounting purposes |
| Website analytics | Legitimate Interest – To improve our service and user experience |
Where we rely on legitimate interest, we have conducted a Legitimate Interest Assessment (LIA) and concluded that:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. We distinguish between physical item retention and personal data retention:
Lost items collected from Partner Venues are stored at our secure facility for a maximum of 30 days from the date of collection. After 30 days, unclaimed items become the property of Findr Dublin (see our Terms of Service, Section 5) and may be donated, recycled, or sold at our discretion.
| Data Type | Retention Period | Reason |
|---|---|---|
| Found item records (unclaimed) | 30 days from collection | Standard holding period; records (photos, descriptions) securely deleted after physical item is processed |
| Successful claim records | 6 years | Legal and accounting requirements; dispute resolution |
| Unsuccessful claim enquiries | 90 days | In case item is found later or claim is renewed |
| Payment transaction records | 7 years | Irish tax and accounting obligations |
| Website analytics | 26 months | Service improvement analysis |
After the retention period expires, data is securely deleted or anonymised. Personal data associated with unclaimed items (including photographs and item descriptions) is deleted within 7 days of the item being donated, recycled, or sold.
We may share your personal data with the following categories of recipients:
We do NOT share your personal data with partner venues. Venues transfer found items to us, but we handle all customer interactions directly.
We may disclose personal data if required by law, regulation, or legal process, including:
Your data is primarily stored and processed within the European Economic Area (EEA). Where data is transferred outside the EEA (e.g., to service providers with US-based infrastructure), we ensure appropriate safeguards are in place, including:
We implement appropriate technical and organisational measures to protect your personal data:
Under GDPR, you have the following rights regarding your personal data:
| Right | Description |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Request correction of inaccurate or incomplete data |
| Erasure | Request deletion of your data ("right to be forgotten") |
| Restriction | Request limited processing of your data in certain circumstances |
| Portability | Receive your data in a structured, machine-readable format |
| Object | Object to processing based on legitimate interest |
| Withdraw Consent | Where processing is based on consent, withdraw it at any time |
To exercise any of these rights, please contact us using the details in Section 12. We will respond within one month of receiving your request.
Our website uses cookies to enhance your browsing experience:
You can manage cookie preferences through your browser settings. Disabling cookies may affect website functionality.
Our service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.
For any questions about this Privacy Policy or to exercise your data protection rights:
Email: info@findrdublin.ie
Post: Findr Dublin, 6 Fern Road, Sandyford, Dublin 18, D18FP98
WhatsApp: +353 89 467 5775
We aim to respond to all enquiries within 5 working days.
If you are not satisfied with our response to a data protection concern, you have the right to lodge a complaint with the Irish Data Protection Commission:
Data Protection Commission
21 Fitzwilliam Square South
Dublin 2, D02 RD28
Ireland
Website: www.dataprotection.ie
Phone: +353 1 765 0100 / 1800 437 737
We may update this Privacy Policy from time to time. Significant changes will be communicated via our website and, where appropriate, by email. The "Last Updated" date at the top of this policy indicates when it was last revised.
This Privacy Policy is governed by Irish law and is subject to the jurisdiction of the Irish courts.