This policy covers https://findable.live, the businesses we contact, and the work we do for clients. It is written in plain English and lists only information we actually collect.
Who we are
Findable is a trading name of Paul James Sales, a sole trader. He is the data controller for the information described here. Findable serves businesses in the UK and is run from Thailand, where Paul is based. You can reach us at [email protected].
This policy covers website visitors, people who ask for a free check, our clients and their staff, and businesses we contact before they have contacted us. Self-employed salespeople who work with Findable get a separate privacy notice.
Your right to object
You can tell us to stop contacting you for marketing at any time, and we will. Reply STOP to a WhatsApp message, reply to an email, tell the person who called you, or email [email protected]. You can also object to any other use of your information that we base on our legitimate interests, and ask us to restrict how we use it while a question about it is sorted out.
What we collect
Businesses we contact first
We look for UK local businesses that may benefit from our service and contact some of them before they have contacted us. For a sole trader or partnership, some of these details are personal information. We hold:
- The business name, trade, town and address
- Its public phone number, email address and website
- Its Google rating and review count, and links to its public business pages on social media
- For a registered company, public details from Companies House, such as when it was incorporated and whether it is active
- The result of any AI visibility check we run on the business
- A record of our calls, messages and emails with the business, and any notes from them
Where it comes from: Google's public business listings, Companies House, the business's own website, business directories, and public social media business pages.
How we contact businesses: by phone, and by WhatsApp message or email to the business contact details that are published for the business. Self-employed salespeople working with Findable may make these calls and send these messages, using our own systems. If you ask us to stop, we stop, for everyone who works with us.
When you ask for a free AI check
The form asks for five things, and we store exactly those:
- Your business name
- Your town
- Your trade
- Your email address
- Your phone number
When you buy
Before you pay, you accept our Client Service Agreement. We keep a record of your details on it (your business's legal name and, for a company, its number; your name and role; your business address, email and phone) and of the version you accepted and when.
After payment we ask a longer set of questions so we can do the work. Depending on what you answer, that can include:
- Your name, email address and phone number
- Your business address
- The services you offer and the areas you want work from
- Your accreditations, and anything you tell us we must not say about your business
- The name of a competitor you want us to keep an eye on
- Who looks after your website, what it is built on, and their email address if a web company manages it
- Whether you have a Google Business Profile, whether it is verified, and whether you have given us manager access to it
Every one of these is optional except the ones the form marks as required. If you leave a question blank we store nothing for it.
Information we look up about your business
To run the audit we look your business up in Google's public business listings and store what comes back: your public phone number, website, address, star rating and review count, and Google's own identifier for the listing. This is information already published about your business.
When you pay
We never see your card details. Payment happens on Stripe's own page. Stripe collects your card and your email itself. What comes back to us is the amount you paid, the date, what it was for, and Stripe's customer and subscription identifiers so we can manage your monthly payments and refunds.
Messages
If we message you on WhatsApp or by email, we keep those messages and a record of when they were sent and delivered. If you tell us to stop contacting you, we keep your phone number and email address on a suppression list; that record exists so we do not contact you again, and deleting it would defeat its purpose.
Websites we host for clients
If we host a client's website, personal information their own customers send through it (for example a contact form) belongs to the client. We handle it only on the client's instructions, as their processor under clause 12 of the Client Service Agreement, and the client's own privacy notice covers it.
Cookies and tracking
This site sets no cookies. There is no Google Analytics, no tag manager, no advertising pixel and no session recording.
We run our own simple visit counter, so we can see how many people use the site and where they get
stuck. When a page loads, your browser sends us: the page's address on this site; the name of the
website that sent you here, if any (for example google.com, never the full link); any campaign tags in
the link you followed (the utm_ ones); whether the window is phone, tablet or computer
sized; and a random code for this browser tab. We also note three steps: starting the free check,
opening the sign-up form, and reaching the payment page.
That random code is made up by your browser and kept in its session storage on your device, and it disappears when you close the tab. It is not linked to your name or email. Our visit counter does not record your IP address and we do not fingerprint your device. The counts are kept in our own database (Supabase, listed below) and never shared or sold. If your browser has Do Not Track or Global Privacy Control switched on, nothing is sent at all.
Like any website, the companies that host this site and our database (Cloudflare and Supabase) process your IP address to deliver pages and protect the service from abuse, and may keep it for a short time in their own security logs.
The sign-up form also keeps two things in your browser's session storage: a draft of your answers, so a reload does not lose them, and a marker so we can tell you have come back from Stripe. Both stay in your browser, are never sent anywhere, and disappear when you close the tab.
Why we hold it, and on what basis
| What | Why | Lawful basis |
|---|---|---|
| Details of businesses we contact first | To find businesses that may benefit from our service, check their AI visibility and contact them about it | Legitimate interests: telling relevant businesses about a service for their business. You can object at any time |
| Free check details | To run the check and send you the result | Legitimate interests: you asked us for it |
| Agreement record and questionnaire answers | To make and keep a record of our agreement with you, build your pages and fix your listings | Performance of our contract with you |
| Payment records | To take payment, handle refunds, and keep our accounts | Contract, and legal obligation for tax records |
| Messages and call notes | To answer you and keep a record of what was said | Legitimate interests |
| Occasional news about our other services, to clients | To tell existing clients about other Findable services | Legitimate interests. You can opt out when you accept the agreement, or at any time |
| Client websites and results in our portfolio | To show our work (see "Showing our work" below) | Legitimate interests. You can ask us to stop at any time |
| Visit counts | To see how the site is used and where people get stuck | Legitimate interests |
| Suppression list | To make sure we never contact you again | Legal obligation |
Who else handles it
We use these companies to run the service. They process data on our instructions and we do not sell your information to anyone.
| Who | What they get |
|---|---|
| Supabase | Our database and servers: everything listed above is stored there |
| Cloudflare | Hosts this website and delivers your pages |
| Stripe | Takes the payment. They collect your card and email directly |
| We look businesses up in Google's public listings. We send the business name and town | |
| Apify | Runs the AI questions, and looks up public business pages, for us. For the AI questions we send the question text only, for example "best plumber in Wisbech" |
| OpenAI | Helps write and check page copy and read audit results. We send business name, trade, town, services and audit results. We do not send your email, phone or address |
| Resend | Sends our emails, such as free check results, your agreement copy, your results and our internal notifications. They get your email address and the email |
| Meta (WhatsApp) | Delivers WhatsApp messages. They get your phone number and the message |
Self-employed salespeople who work with Findable can see the details of the businesses they are working with, inside our own systems, so they can do that work.
Where your data is processed
Your information is stored with the providers above, and Paul accesses and works on it from Thailand. Several of those providers are based in, or process data in, the United States and other countries. Where personal information is processed outside the UK, we rely on the safeguards UK data protection law requires. Email us and we will tell you which safeguard applies to a particular provider.
How long we keep it
We keep client records, including the agreement you accepted, for as long as you are a client and for six years afterwards, because tax law requires us to keep records of what we sold and to whom. If you asked for a free check, or we contacted your business, and you never became a client, ask us and we will delete your details. Suppression records are kept indefinitely, because their only job is to stop us contacting you.
Showing our work
We may name clients, show the websites we built or improved in our portfolio, and publish their results or a case study, as our Client Service Agreement allows. If you would rather we did not, email us at any time and we will stop.
Decisions made by software
We use software to find businesses, run AI visibility checks and draft content, but we do not make any decision about you that has a legal or similarly significant effect on you by automated means alone.
Your rights
You can ask us to:
- Send you a copy of what we hold about you
- Correct anything that is wrong
- Delete it, where we are not required to keep it
- Stop using it for marketing, or for any other purpose based on our legitimate interests
- Restrict how we use it while a question about it is resolved
- Withdraw any consent you have given us
- Send it to you, or to someone else, in a portable format
Email [email protected] and we will answer within one month. You do not have to pay for this. If you think we have handled your data badly you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you told us first so we can put it right.
Changes
If we change this policy we will change the date at the top. If the change is significant and you are a client, we will email you.