Privacy policy
What we collect, why we need it and the choices you have. Last updated 13 July 2026.
Fun Finds is the data controller for the personal information described here. Questions or rights requests can be sent to hello@funfinds.co or through the contact page.
Information you give us
The contact form stores your name, email address and message. We use it to read and respond to the message. Our lawful basis is legitimate interests: we need a workable way to answer users and correct listings. Do not include sensitive personal information in the form.
Technical information
Our hosting and API services process ordinary request logs, which can include an IP address, requested URL, timestamp, browser details and error information. We use these logs to operate the service, prevent abuse and investigate faults. The contact form also uses an IP address briefly to enforce a submission limit; the address is not written to the contact-message record.
Cookies, local storage and analytics
The public Fun Finds site does not currently set analytics or advertising cookies, run product analytics, or store user preferences in local storage. A cookie banner is therefore not required for the current public experience. The private administrator area uses a strictly necessary, secure session cookie after an authorised administrator signs in.
Place information
We use information published by venues and other public sources. Our catalogue is about places, not profiles of individual visitors. Public material may still contain names or other personal information. We keep supporting records where needed to verify a listing and document editorial decisions. Contact us if you believe a listing or supporting record includes personal information that should be corrected or removed.
Who handles the data
We use service providers to host the website, database and application infrastructure. They process information for us under their own security and data-protection commitments. Some providers may process data outside the UK; where that happens, we rely on the provider’s applicable transfer safeguards.
How long we keep it
We keep contact messages while they are needed to handle the request, maintain an audit trail and improve the catalogue. We do not currently run automatic deletion. An administrator removes records manually when they are no longer needed or after a valid deletion request, unless an active dispute or legal obligation requires us to keep them. Infrastructure providers retain technical logs according to their configured operational retention periods.
Your rights
Depending on the circumstances, you can ask for access, correction, deletion, restriction or objection, and you may have a right to data portability. Email hello@funfinds.co with enough detail for us to identify the relevant record. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.
Changes to this policy
We will update this page before introducing public analytics, preference storage or another material change in data use. The date at the top shows when the wording last changed.