Privacy Policy

Last Updated: 31 July 2026

1. Overview

Find-2-Day complies with GDPR and Spanish data protection laws.

2. Data Collected

General users: email and encrypted password.

Business users: business details, contact information, and payment via Stripe.

3. Data Not Collected

We do not collect location data, contacts, photos, or behavioural tracking.

4. Purpose

Data is used only for account access, security, and support. No marketing.

5. Legal Basis

Processing is based on contract and legitimate interest.

6. Storage

Data is stored securely on GDPR-compliant servers.

7. Retention

Data is deleted within 30 days after account deletion.

8. User Rights

Users can access, correct, delete, or request a copy of their data.

8.1 Publicly-Available Business Data

Some business listings on Find-2-Day are initially created from publicly-available business data (e.g. directories, official registers) so that local users can discover businesses in their area. Where this information relates to a sole trader or other natural person, our lawful basis is legitimate interest under GDPR Art. 6(1)(f) — operating a local business discovery service balanced against the individual's right to object. Such listings are clearly labelled, do not imply any partnership, endorsement, verification, or owner approval, contain only generic publicly-available data (name, category, town, public contact details), and never include private information. Business owners — including sole traders — may at any time claim, correct or request the removal of their listing through the "Request edit or removal" link on the listing page or by emailing support@find-2-day.com. Removal requests are actioned within 5 working days and the corresponding personal data is then deleted within 30 days.

9. Data Sharing & Third-Party Processors

We do not sell data. We use the following GDPR-compliant third-party processors strictly to operate the service:

  • Stripe (Ireland) — payment processing for business subscriptions. Receives name, email, billing details and card data.
  • Resend (EU) — transactional emails (welcome, password reset, notifications, edit tokens). Receives name and email.
  • Supabase (EU) — secure cloud storage for business, classified and lost & found photos.
  • OneSignal (USA, EU Data Processing Agreement in place) — optional push notifications. Receives only an anonymous device token; no email or personal data.
  • MongoDB Atlas (EU region) — primary database for account, listing and subscription data.

We do not share data with advertisers, data brokers or analytics providers.

10. Security

We use encryption and secure systems.

11. Classified Listings & Lost & Found

When posting a classified or lost & found item, the following data is collected and displayed publicly: name, email, phone (optional), item description, photos, and location. This data is visible to all visitors. Posts are managed via a private edit link — we do not store user accounts for these features. Data is automatically deleted when listings expire (30 days) or are removed by the user.

12. Saved Searches & Email Alerts

Users may save a search query with their email to receive notifications when matching items are listed. We store the email address, search keyword, and optional category. You can unsubscribe at any time using the link in each notification email. Saved search data is deleted upon unsubscription.

12.1 Official Community Safety Alert Emails

Registered users may receive email notifications for Official Community Safety Alerts — floods, fires, road closures, utility outages, police notices and official town-hall warnings — even if they have opted out of marketing or non-essential emails. This ensures verified residents are reachable during an emergency in their followed towns.

Legal basis: GDPR Art. 6(1)(f) — legitimate interest in reaching residents during a public-safety event, balanced against the individual's right to object. Also GDPR Art. 6(1)(d) — protection of vital interests — where the alert concerns risk to life or property.

How to disable: You can turn safety-alert emails OFF at any time from Settings → Notification Preferences → "Email backup for Official Community Safety Alerts". Your marketing and other-email preferences are separate from this setting and are always respected regardless. Push notifications and in-app safety alerts remain available even after opting out of the email backup.

Scope: This category is used strictly for verified public-safety communications. It is never used for marketing, promotions, newsletters, event advertising, business offers or any commercial communication.

13. Location Data

The "Nearest Me" feature uses your browser's geolocation API with your explicit permission. Your coordinates are used only to calculate distances and are not stored, logged, or shared. You may deny location access at any time.

14. Photo Storage

Photos uploaded for listings and profiles are stored on Supabase cloud storage, a GDPR-compliant infrastructure. Photos are deleted when the associated listing or account is removed.

15. Contact

Email: find-2-day@outlook.com

Install the Find-2-Day app

Get the Find-2-Day app — full-screen, faster, and with alerts.

What's New

🔔

Get instant alerts from your favourite businesses — new events, offers, and more

📱

Works on all devices — push notifications plus email fallback