Privacy Policy

1. Who We Are

CeliacFinder is operated by Celiac Finder ("we", "us", "our"), the data controller responsible for personal data processed through this service. References to "CeliacFinder" in this policy refer to the service provided by Celiac Finder.

2. Information We Collect

We collect: account data (email, name, authentication identifiers), profile and submission data (venue listings you submit), usage and device data (IP address, browser, pages viewed), and, with your permission, approximate location data to help you find nearby venues. Payment data (card details, billing address) is collected and processed by our payment provider Paddle — we do not store full card numbers.

3. How We Use Information & Legal Bases

We process your data on the following legal bases (GDPR Article 6 where applicable):

• Performance of a contract (Art. 6(1)(b)) — providing the service, account management, processing subscriptions.
• Legitimate interests (Art. 6(1)(f)) — service improvement, analytics, security and fraud prevention.
• Legal obligation (Art. 6(1)(c)) — tax, accounting, and responding to lawful requests.
• Consent (Art. 6(1)(a)) — optional cookies, location access, and marketing communications.

4. Data Sharing

We do not sell your personal data. We share data with:

• Paddle.com Market Ltd — our Merchant of Record and payment provider. Paddle acts as a separate data controller for payment, billing, tax, fraud-prevention, and invoicing data. See paddle.com/legal/privacy.
• Service providers / subprocessors — hosting, database, authentication, email delivery, and analytics providers acting on our instructions.
• Google Maps Platform — for venue data and location services, governed by Google's privacy policies.
• Authorities — where required by law or to protect our rights.

5. Data Retention

We keep personal data only as long as needed for the purposes above:

• Account data — for the life of your account, then deleted or anonymised within 90 days of closure.
• Subscription and billing records — retained for up to 7 years to meet tax and accounting obligations.
• Usage and analytics logs — typically retained for up to 24 months.
• Support correspondence — retained for up to 24 months after the matter is resolved.

6. Cookies and Tracking

We use essential cookies to keep you signed in, and optional analytics cookies to understand how the service is used. You can control cookies through your browser settings.

7. Data Security

We apply reasonable technical and organisational measures — encryption in transit, access controls, and least-privilege administration — to protect your data. No internet transmission is fully secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, port, or restrict processing of your data, to object to processing based on legitimate interests, and to withdraw consent. EEA/UK users may also lodge a complaint with their local supervisory authority. Contact us to exercise these rights.

9. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be posted on this page with an updated date.

10. Contact

For privacy-related questions or requests, contact Celiac Finder at privacy@celiacfinder.com.