Last Updated: 28 August 2025
At Lost&Found, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website.
1. Who We Are
Lost&Found is an online platform based in Ireland that connects people and organisations to help return lost property to its rightful owners.
For data protection purposes, Lost&Found is the Data Controller under the General Data Protection Regulation (GDPR).
2. Information We Collect
When you use Lost&Found, we may collect the following information:
- Account Information: Name, email address, and login details if you create an account.
- Listings Data: Details you provide when posting a found item (e.g., description, date, location).
- Claim Requests: Any information you provide when trying to claim an item, including verification details.
- Communication Data: Messages exchanged through our platform.
- Technical Data: IP address, browser type, and cookies (see Section 8).
We do not require or store sensitive identification documents (e.g., passports, ID cards) unless voluntarily shared by you in a claim.
3. How We Use Your Data
We use your data to:
- Provide and improve our lost & found service.
- Allow you to create and manage listings.
- Facilitate secure communication between finders and claimants.
- Prevent fraud and misuse of the platform.
- Comply with legal obligations.
We will never sell your data to third parties.
4. Lawful Basis for Processing
We process your data under the following lawful bases:
- Contract: To provide you with access to the FoundFirst service.
- Consent: Where you choose to share information (e.g., in a claim form).
- Legal Obligation: To comply with Irish and EU laws.
- Legitimate Interests: To prevent fraud and improve our services.
5. Data Sharing
Your data may be shared with:
- Other Users: Limited details (e.g., your message in a claim) will be shared with finders.
- Service Providers: Web hosting, email, and analytics providers that help us run the site.
- Authorities: If required by law or for fraud prevention.
We will never expose your personal email address to other users. Communication happens only through the platform.
6. Data Retention
- Listings and claims are kept for as long as necessary to provide the service.
- Inactive accounts may be deleted after 24 months.
- Some records may be retained longer if required by law.
7. Your Rights
Under GDPR, you have the right to:
- Access your personal data.
- Request correction or deletion.
- Restrict or object to processing.
- Data portability (receive a copy of your data).
- Withdraw consent at any time.
To exercise your rights, contact us at: [Insert support email].
8. Cookies
We use cookies and similar technologies to:
- Enable website functionality.
- Improve user experience.
- Collect anonymous analytics.
You can manage or disable cookies in your browser settings.
9. Data Security
We take appropriate technical and organisational measures to protect your data, including encryption and secure hosting. However, no online service can be completely secure, and users should take care when sharing information.
10. Children’s Privacy
Our service is not intended for children under 18. If we discover we have collected data from a child, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will always be posted on our website.
Contact Us
If you have questions about this Privacy Policy, please contact: [Insert support email address]