This policy covers https://findable.live and the work we do for customers. It is written in plain English and lists only information we actually collect.
Who we are
Findable is a trading name of Paul Sales, a sole trader. We are the data controller for the information described here. You can reach us at paul@move37.fun.
What we collect
When you ask for a free AI check
The form asks for five things, and we store exactly those:
- Your business name
- Your town
- Your trade
- Your email address
- Your phone number
When you buy
After payment we ask a longer set of questions so we can do the work. Depending on what you answer, that can include:
- Your name, email address and phone number
- Your business address
- The services you offer and the areas you want work from
- Your accreditations, and anything you tell us we must not say about your business
- The name of a competitor you want us to keep an eye on
- Who looks after your website, what it is built on, and their email address if a web company manages it
- Whether you have a Google Business Profile, whether it is verified, and whether you have given us manager access to it
Every one of these is optional except the ones the form marks as required. If you leave a question blank we store nothing for it.
Information we look up about your business
To run the audit we look your business up in Google's public business listings and store what comes back: your public phone number, website, address, star rating and review count, and Google's own identifier for the listing. This is information already published about your business, not anything private.
When you pay
We never see your card details. Payment happens on Stripe's own page. We send Stripe only the amount and two internal reference numbers; Stripe collects your card and your email itself. What comes back to us afterwards is the amount you paid, the date, what it was for, and Stripe's customer and subscription identifiers so we can manage hosting and refunds.
Messages
If we message you on WhatsApp or by email, we keep those messages and a record of when they were sent and delivered. If you tell us to stop contacting you, we keep your phone number and email address on a suppression list; that record exists so we do not contact you again, and deleting it would defeat its purpose.
Cookies and tracking
This site sets no cookies and has no analytics. There is no Google Analytics, no tag manager, no advertising pixel and no session recording. Nobody is watching you read this.
The sign-up form keeps two things in your browser's session storage: a draft of your answers, so a reload does not lose them, and a marker so we can tell you have come back from Stripe. Both are stored in your browser only, are never sent anywhere, and disappear when you close the tab.
Why we hold it, and on what basis
| What | Why | Lawful basis |
|---|---|---|
| Free check details | To run the check and send you the result | Legitimate interests: you asked us for it |
| Questionnaire answers | To build your pages and fix your listings | Performance of our contract with you |
| Payment records | To take payment, handle refunds, and keep our accounts | Contract, and legal obligation for tax records |
| Messages | To answer you and keep a record of what was said | Legitimate interests |
| Suppression list | To make sure we never contact you again | Legal obligation |
Who else handles it
We use these companies to run the service. They process data on our instructions and we do not sell your information to anyone.
| Who | What they get |
|---|---|
| Supabase | Our database and servers: everything listed above is stored there |
| Cloudflare | Hosts this website and delivers your pages |
| Stripe | Takes the payment. They collect your card and email directly; we send them only the amount and two reference numbers |
| We look your business up in Google's public listings. We send your business name and town | |
| Apify | Runs the AI questions for us. We send the question text only, for example "best plumber in Wisbech". We do not send your name, email or phone |
| OpenAI | Helps write and check your page copy. We send your business name, trade, town, services and the audit results. We do not send your email, phone or address |
| Resend | Sends our internal notification emails when someone signs up |
| Meta (WhatsApp) | Delivers WhatsApp messages. They get your phone number and the message |
| Instantly | Sends cold outreach email. They get your email address and business details |
How long we keep it
We keep customer records for as long as you are a customer and for six years afterwards, because tax law requires us to keep records of what we sold and to whom. If you asked for a free check and never became a customer, ask us and we will delete your details. Suppression records are kept indefinitely, because their only job is to stop us contacting you.
Your rights
You can ask us to:
- Send you a copy of what we hold about you
- Correct anything that is wrong
- Delete it, where we are not required to keep it
- Stop using it for a particular purpose
- Send it to you, or to someone else, in a portable format
Email paul@move37.fun and we will answer within one month. You do not have to pay for this. If you think we have handled your data badly you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you told us first so we can put it right.
Where your data is held
Some of the companies above process data outside the UK. Where that happens it is covered by the UK's approved safeguards for international transfers, which those companies publish in their own terms.
Changes
If we change this policy we will change the date at the top. If the change is significant and you are a customer, we will email you.