Privacy notice
Who is responsible
CYW Solutions Ltd (registration number HE 453068, 25 Voukourestiou Street, Neptune House, Floor 1, Office 11, Zakaki, 3045 Limassol, Cyprus) is the controller of personal data processed through PepFinder. Contact us about your data at james@pepfinder.com.
If you just browse
We set no tracking or advertising cookies (see cookies). We count page views, where visits come from and clicks to suppliers as anonymous totals, using our own counters and Vercel Web Analytics; to count a visitor once a day we use a one-way code made from the connection details that changes daily and is not stored with the page viewed. We read the country your connection comes from to show suppliers and prices for that country.
If you create an account
We keep your email address, display name, a scrambled (hashed) form of your password, your email preferences, the stores you follow, and what you contribute: reviews, questions, answers, order and support reports. When you click through to a store while signed in we record that visit, to ask you later whether you ordered. We record whether our emails to you are delivered, opened and clicked, to keep sending working and to stop sending where it is not wanted.
If you manage a store
We keep the details of the people on a store’s account, the store information you enter, and records of what was changed and by whom. If you ask customers to review your store through PepFinder, you give us their email address and first name for that invitation; we use them only to send it, and delete the address when the invitation expires after 90 days. We also contact stores at email addresses published on their own websites about their listing.
Why we use it
To run your account and the features you use (our contract with you); to keep the site secure, prevent fake reviews and abuse, measure use and improve the site (our legitimate interests); to send optional emails such as deals and newsletters only if you turn them on (your consent, which you can withdraw in your email settings at any time); and to meet legal obligations.
Who processes it for us
Vercel (hosting, file storage and cookieless analytics), Neon (our database) and Resend (sending email). Their services may process data outside the European Economic Area, including in the United States, under the safeguards they offer, such as the EU Standard Contractual Clauses. We do not sell personal data or share it for advertising.
How long we keep it
Account data until you delete your account; deleting it deletes your reviews and contributions too. Records of email delivery for 90 days. Review-invitation email addresses until the invitation expires. Security and audit records for as long as they are needed to protect the site and meet our obligations.
Your rights
You can ask for a copy of your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable form; you can delete your account yourself in your account settings. Write to james@pepfinder.com. You may also complain to the Commissioner for Personal Data Protection in Cyprus, or to the data protection authority where you live.
Changes
We will update this notice when what we collect or why changes; the version on this page applies from the date it is published.