Privacy Policy

Last Updated: 10 February 2026

1. Overview

Find-2-Day complies with GDPR and Spanish data protection laws.

2. Data Collected

General users: email and encrypted password.

Business users: business details, contact information, and payment via Stripe.

3. Data Not Collected

We do not collect location data, contacts, photos, or behavioural tracking.

4. Purpose

Data is used only for account access, security, and support. No marketing.

5. Legal Basis

Processing is based on contract and legitimate interest.

6. Storage

Data is stored securely on GDPR-compliant servers.

7. Retention

Data is deleted within 30 days after account deletion.

8. User Rights

Users can access, correct, delete, or request a copy of their data.

8.1 Publicly-Available Business Data

Some business listings on Find-2-Day are initially created from publicly-available business data (e.g. directories, official registers) so that local users can discover businesses in their area. Where this information relates to a sole trader or other natural person, our lawful basis is legitimate interest under GDPR Art. 6(1)(f) — operating a local business discovery service balanced against the individual's right to object. Such listings are clearly labelled, do not imply any partnership, endorsement, verification, or owner approval, contain only generic publicly-available data (name, category, town, public contact details), and never include private information. Business owners — including sole traders — may at any time claim, correct or request the removal of their listing through the "Request edit or removal" link on the listing page or by emailing support@find-2-day.com. Removal requests are actioned within 5 working days and the corresponding personal data is then deleted within 30 days.

9. Data Sharing & Third-Party Processors

We do not sell data. We use the following GDPR-compliant third-party processors strictly to operate the service:

  • Stripe (Ireland) — payment processing for business subscriptions. Receives name, email, billing details and card data.
  • Resend (EU) — transactional emails (welcome, password reset, notifications, edit tokens). Receives name and email.
  • Supabase (EU) — secure cloud storage for business, classified and lost & found photos.
  • OneSignal (USA, EU Data Processing Agreement in place) — optional push notifications. Receives only an anonymous device token; no email or personal data.
  • MongoDB Atlas (EU region) — primary database for account, listing and subscription data.

We do not share data with advertisers, data brokers or analytics providers.

10. Security

We use encryption and secure systems.

11. Classified Listings & Lost & Found

When posting a classified or lost & found item, the following data is collected and displayed publicly: name, email, phone (optional), item description, photos, and location. This data is visible to all visitors. Posts are managed via a private edit link — we do not store user accounts for these features. Data is automatically deleted when listings expire (30 days) or are removed by the user.

12. Saved Searches & Email Alerts

Users may save a search query with their email to receive notifications when matching items are listed. We store the email address, search keyword, and optional category. You can unsubscribe at any time using the link in each notification email. Saved search data is deleted upon unsubscription.

13. Location Data

The "Nearest Me" feature uses your browser's geolocation API with your explicit permission. Your coordinates are used only to calculate distances and are not stored, logged, or shared. You may deny location access at any time.

14. Photo Storage

Photos uploaded for listings and profiles are stored on Supabase cloud storage, a GDPR-compliant infrastructure. Photos are deleted when the associated listing or account is removed.

15. Contact

Email: find-2-day@outlook.com

Install Find-2-Day

Get the full app experience with notifications

What's New

🔔

Get instant alerts from your favourite businesses — new events, offers, and more

📱

Works on all devices — push notifications plus email fallback

Made with Emergent