Recovers Your Lost Property

Foundit Lost Property Ltd
Recovers Your Lost Property

Privacy Policy

Last updated: 22 September 2026

Foundit Lost Property Ltd, trading as Foundit (“Foundit”, “we”, “us”, or “our”), is a company registered in Ireland (Company Number: 771021). We operate foundit.ie and provide a lost property recovery service using labels and QR codes.

This policy explains what personal data we collect, why we collect it, the legal grounds we rely on, how long we keep it, and the rights you have over it. It applies to anyone who registers a Foundit label, reports a found item, or purchases a label pack.

1. Data We Collect & How We Use It

A. When You Register a Label

  • What we collect: Your name and one or two email addresses.
  • Purpose: To link your unique label ID to your contact details so we can alert you if your property is found.
  • Legal Basis: Performance of a Contract (Article 6(1)(b) GDPR). This information is strictly necessary to deliver the recovery service you signed up for.

B. When You Report a Found Item

Communications Between Finders and Owners

To protect your privacy, our platform enables anonymous communication between finders and property owners to facilitate the safe return of lost items. We never automatically share or require you to disclose your name, email address, or phone number to the owner.

  • Free-Text Message Box: A free-text message box is provided solely for finders to input descriptive details about the found item and how to collect it.
  • Voluntary Disclosure & Consent: If you choose to type personal details (such as your name, email address, phone number, or social media handles) into the message box, you acknowledge that you are providing this information voluntarily to facilitate the return of the property. By doing so, you explicitly consent to Foundit.ie transmitting this data directly to the property owner. Finders are strongly advised to only share contact details they are comfortable disclosing. Foundit.ie facilitates this specific transmission as a data processor and is not responsible for how the property owner uses information you choose to share independently.
  • Minors and Age Restrictions: In compliance with Irish data protection laws, the digital age of consent is 16. Where an individual under the age of 16 wishes to report a found item independently outside of an official school-managed program, a parent or legal guardian must complete the report form on their behalf.

C. When You Buy a Label Pack

  • What we collect: Your name, delivery address, billing address, and order history.
  • Payment Processing: Payments are securely processed directly by our third-party payment gateways: Stripe, PayPal, or WooCommerce Payments. Foundit does not view, store, or process your credit/debit card numbers.
  • Purpose: To fulfil, ship, and account for your order.
  • Legal Basis: Performance of a Contract (Article 6(1)(b) GDPR) for fulfilment, and Compliance with a Legal Obligation (Article 6(1)(c) GDPR) for keeping mandatory financial records.

D. Technical & Website Usage Data

  • What we collect: Basic technical logs, including IP addresses, browser types, and access times.
  • Purpose: For server optimisation, security monitoring, and troubleshooting.
  • Cookies: We strictly use essential session cookies to keep the website working (e.g. holding items in your shopping cart or maintaining a form submission). We do not use analytical, tracking, or advertising cookies. If this changes, we will update this policy and seek your explicit consent via a cookie banner first.
  • Legal Basis: Legitimate Interests (Article 6(1)(f) GDPR) to guarantee a secure, reliable online platform.

2. Children’s Privacy

We love helping school communities stay organized, and we know that students of all ages will interact with our labels to help find their lost items! In line with Ireland’s Data Protection Act 2018, the digital age of consent here is 16. Because our labels are provided in partnership with your child’s school, student details are securely managed.  
  • If a student under 16 years of age is using our public website independently outside of a school program to report a found item, a parent or guardian must complete the form on their behalf so we can safely return the item.  

3. Data Sharing & International Transfers

We do not sell, rent, or trade your personal data. We share your information only with trusted service providers who help us run our platform:

  • SiteGround (our hosting and transactional email provider)
  • Stripe, PayPal, and WooCommerce Payments (our payment processors)

International Data Transfers

While our website is hosted within the European Union (EU), some of our technical partners (such as Stripe and PayPal) operate globally and may transfer or store data outside the European Economic Area (EEA), including to the United States.

Where data is transferred outside the EEA, we ensure appropriate safeguards are in place to guarantee your data receives an equivalent level of protection. This includes utilising Standard Contractual Clauses (SCCs) approved by the European Commission.

4. Data Retention (How Long We Keep Your Data)

We only retain personal data for as long as necessary to fulfil the purposes outlined in this policy:

  • Found Item Reports: All submission text is automatically and permanently deleted after 6 months.
  • Label Registration Details: Kept active for 6 years from the registration date, after which they are automatically purged. If your label is still in active use after 6 years, you are welcome to re-register it.
  • Order & Accounting Records: Kept for 6 years following the end of the relevant tax financial year to comply with Irish Revenue and tax legislation.

5. Your Data Protection Rights

Under Irish and EU data protection law (GDPR), you have the following fundamental rights:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct or update inaccurate information.
  • Right to Erasure (“Right to be Forgotten”): You can request that we delete your personal data under certain conditions.
  • Right to Restrict Processing: You can object to or restrict how we use your data.
  • Right to Data Portability: You can request that we transfer your data to another organisation, or directly to you, in a structured, machine-readable format.
  • Right to Object: You have the right to object to processing based on our legitimate interests.
  • Right to Withdraw Consent: Where we rely on your consent to process data, you can withdraw it at any time.
  • Automated Decision-Making: You have rights regarding automated decision-making and profiling. Foundit does not use any automated profiling or automated decision-making systems.

To exercise any of these rights, please email us at info@foundit.ie. We will verify your identity and respond to your request free of charge within one calendar month.

You also have the right to lodge an official complaint with Ireland’s supervisory authority:

  • Data Protection Commission (DPC)
  • Address: 6 Pembroke Row, Dublin 2, D02 X963
  • Website: www.dataprotection.ie

6. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or alteration. However, no internet transmission or electronic storage system is 100% secure, and we cannot guarantee absolute security.

7. Changes to This Policy

We may update this privacy policy periodically to reflect changes in our services or legal obligations. Any updates will be published on this page with a revised “Last updated” date.

8. Contact Us

If you have any questions or concerns regarding how your data is handled, please reach out to us:

  • Email: info@foundit.ie
  • Post: Foundit Lost Property Ltd, Wicklow Enterprise Centre, The Murrough, Co Wicklow, Ireland, A67 AC99