Privacy Notice

Who controls your information

Shane Fletcher operates FurFinds as an individual in the United Kingdom and is the data controller for personal information processed to run the platform.

Privacy requests can be sent to no-reply@furfinds.online. This is FurFinds’ single monitored mailbox; incoming messages are reviewed despite the mailbox name.

1. Information FurFinds collects

• Account details such as name, email, role, authentication records and account dates.
• Supplier applications, contacts, addresses, company or VAT details, links, categories, prices, shipping information and review history.
• Private supplier evidence and verification documents.
• Products, images, supplier posts, customer requests, quotes, saved finds and alert criteria.
• Messages in customer–supplier and supplier–admin conversations.
• Fifi prompts, remembered shopping preferences, filters, result interactions and feedback.
• Technical and security information such as IP address, browser, device, request logs, timestamps, rate-limit identifiers and page-view events.

2. How information is used

• Create, authenticate and secure accounts.
• Review suppliers and protect approved identity details from unauthorised changes.
• Publish approved profiles, products and posts.
• Run customer requests, quotes, saved finds, alerts and private conversations.
• Operate Fifi, search approved products and find live third-party listings.
• Prevent abuse, investigate reports, enforce rules and keep audit records.
• Send service emails, supplier decisions and requested alerts.
• Measure performance, diagnose faults and improve the service.
• Comply with law and establish or defend legal claims.

3. Legal bases

FurFinds processes information where necessary to provide the account or service you request, pursue legitimate interests in operating and protecting the platform, comply with law, or where you have given consent.

Consent is normally used for optional alerts or marketing and may be withdrawn. Legitimate interests include fraud prevention, moderation, security, service improvement and reliable supplier records.

4. Who receives information

Public profile and listing information is visible to visitors. Restricted supplier contact or purchase details may be limited to signed-in customers. Customer requests may be shown to eligible suppliers. Quotes and private conversation content are limited to relevant participants and authorised administration where access is necessary.

FurFinds uses providers for hosting, databases, authentication, email, security, AI, search and product-page processing. Current infrastructure may include Vercel, Supabase, DeepSeek, Brave Search, Jina and OpenRouter.

5. Fifi and automated systems

Fifi may send your prompt and necessary conversation context to AI or search providers to produce an answer. Do not include passwords, payment-card details, identity documents or sensitive personal information in Fifi prompts.

Fifi recommendations do not make decisions with legal or similarly significant effects. Supplier approval and serious enforcement decisions are intended to include human review.

6. International transfers

Some providers or their support teams may process information outside the United Kingdom. Where UK data-protection law requires safeguards, FurFinds will rely on an approved transfer mechanism, adequacy decision or another lawful safeguard.

7. Retention

Information is kept only for as long as reasonably needed for the purpose collected. Account and profile information is normally kept while an account is active. Application, moderation, message, quote, security and transaction-related evidence may be retained longer where needed for fraud prevention, disputes, legal claims or regulatory duties.

Backups and logs may take additional time to expire. FurFinds will delete or anonymise information when it is no longer needed unless law requires retention.

8. Your rights

• Ask for a copy of your personal information.
• Ask for inaccurate information to be corrected.
• Ask for deletion or restriction where the law allows it.
• Object to processing based on legitimate interests.
• Withdraw consent for optional processing.
• Ask for portable data where the right applies.
• Complain to the UK Information Commissioner’s Office.

9. Children

FurFinds accounts, requests, quotes and private messaging are for people aged 18 or over. The service is not designed to knowingly collect children’s account data.

10. Security and changes

FurFinds uses access controls, row-level database permissions, encryption in transit, rate limits and security logging. No online service can guarantee absolute security.

This notice may be updated as features, providers or the project’s legal status change. Material changes will be highlighted where practical.