If you have any question, contact us by
If you have any question, contact us by

Privacy policy

Found4U Privacy Notice

FOUND4U EUROPE, UNIPESSOAL LDA. (hereinafter “Found4U”, “We”, “Our”, “Us”) is the entity responsible to operate the web site https://found4u.com/, a Platform for purchase and sale of products where customers can purchase products from the merchants who offer their products to buyers (hereinafter “Platform”). The Platform also provides paid advertising services for promotion of products.

In this document, both buyers [a buyer shall be any natural person that buys products through the Platform] and merchants [a merchant shall be a legal/natural person that sells products in the Platform, and as such is registered as a Merchant in it] that are natural persons , or the legal representatives of merchants (hereinafter jointly referred as “Data Subject”, or “You”) may find information pertaining the processing of personal data that is carried out by Found4U in the Platform.

We note that in case You provide personal data to a Merchant, the provision of such data is not of the responsibility of Found4U. In such case we suggest that You read the privacy notice of the Merchant, as it will be the Controller of such processing.

A. Summary Information

  • Data Controller
    Name: Found4U Europe, Unipessoal Lda. Legal Person Identification Number / Commercial Registry: 513 874 151 Headquarters and postal address: R da Manutenção, nº 67, 1900-319 Lisboa, distrito de Lisboa, concelho de Lisboa, freguesia de Beato, Portugal
    Email address:
    Data Protection Officer (“DPO”) contact details:

    For details, please refer to section B.I.

  • Purposes and legal basis of the processing
    Purpose Legal basis
    In case you are a Merchant that is a natural person, or the legal representative of a Merchant we will process your personal data in order to execute the Merchant Agreement In case you are a Merchant that is a natural person, or the legal representative of a Merchant we will process your personal data in order to execute the Merchant Agreement In case you are a Merchant that is a natural person: Performance of a contract to which the data subject is party. In case you are a legal representative of a Merchant: Our legitimate interest to execute the agreement concluded with the legal person that you represent.
    In case you are a buyer, within the scope of the operation of our Platform, and in order to be able to provide you with our services, we will process the personal data that you provide us with for the following purposes:
    • Execution of the Terms and Conditions;
    • Creation of your user profile;
    • For platform-user-analysis: we will process your personal data together with the personal data of all other users in order to study the major characteristics of our addressable market so that we can improve and customize our services. We will process your personal data together with the personal data of all other users in order to study the major characteristics of our addressable market so that we can improve and customize our services.
    • Provide you with information pertaining your transaction history.
    • Forwarding the buyer’s personal data to the respective Merchant, whenever such data is necessary for tax purposes, such as issuing invoices.
    		 Performance of a contract to which the data subject is party.
    Sending commercial communications through a newsletter In order to send you commercial communications through email related to our activity, you must provide us with your consent to do so. In this case, the legal basis applicable to the processing of your personal data will be your consent . This consent may be revoked at any time, without this, however, making unlawful the processing of personal data carried out on the basis of this consent until the date on which it is revoked. In this case, failure to provide your consent will prevent us from sending you commercial communications related to our activity.
    Comply with legal obligations Processing is necessary for compliance with a legal obligation to which we are subject.
    Platform’s troubleshooting and bug fixing Our legitimate interest to support, expand, evaluate and improve Platform's activities, services and the Data Subject’s experience. Our legitimate interest to support, expand, evaluate and improve Platform's activities, services and the Data Subject’s experience.
    Provide technical assistance and for the purpose of responding to requests, inquiries, or complaints. Our legitimate interest in providing you with a quality and personalized service, managing the complaints we receive as applicable.

    For details, please refer to section B.II.

  • Recipients of the data
    We use third-party service providers within the operation of the Platform, and We will share your Personal Data with them for the provision of the services they provide Us.

    We share your Personal Data with governmental authorities, courts, external advisors, and similar third parties that are public bodies as required or permitted by applicable law.

    We share Personal Data with the recipients only to the extent necessary.

    We will share your personal data with companies that are affiliated with Us. Some of those companies are located or have relevant operations outside of the EEA (namely, Brazil). By way of entering into appropriate data transfer agreements or by other adequate means, We have established that all such recipients located outside the EEA will provide an adequate level of protection for the Personal Data and that appropriate technical and organizational security measures are in place to protect Personal Data. Any onward transfer is subject to appropriate onward transfer requirements as required by applicable law.

    For details, please refer to section B.IV.

  • Data Subject rights
    Access; Rectification; Erasure; Object; restriction of the processing; Portability. When the legal ground is consent, the data subject has the right to revoke such consent at any time. To exercise any right, please send an email to .

    For details, please refer to section B.IV.

B. Detailed Notice

  • Data Controller
    The Controller of your personal data is Found4U Europe, Unipessoal Lda., with registered office at R Fernando Curado Ribeiro, 20, 1, B ALGÉS, distrito de Lisboa, concelho de Oeiras, freguesia de Algés, Linda-a-Velha e Cruz Quebrada-Dafundo, Portugal.
    You can contact Us via: email address
    You may also contact our Data Protection Office via:


  • What are the purposes and legal grounds for processing your personal data?
    We will process your personal data for the following purposes and based on these legal grounds:
    Purpose Legal basis
    In case you are a Merchant that is a natural person, or the legal representative of a Merchant we will process your personal data in order to execute the Merchant Agreement In case you are a Merchant that is a natural person: Performance of a contract to which the data subject is party. In case you are a legal representative of a Merchant: Our legitimate interest to execute the agreement concluded with the legal person that you represent.
    In case you are a buyer, within the scope of the operation of our Platform, and in order to be able to provide you with our services, we will process the personal data that you provide us with for the following purposes:
    • Execution of the Terms and Conditions;
    • Creation of your user profile;
    • For platform-user-analysis: we will process your personal data together with the personal data of all other users in order to study the major characteristics of our addressable market so that we can improve and customize our services. We will process your personal data together with the personal data of all other users in order to study the major characteristics of our addressable market so that we can improve and customize our services.
    • Provide you with information pertaining your transaction history.
    • Forwarding the buyer’s personal data to the respective Merchant, whenever such data is necessary for tax purposes, such as issuing invoices.
    		 Performance of a contract to which the data subject is party.
    Sending commercial communications through a newsletter In order to send you commercial communications through email related to our activity, you must provide us with your consent to do so. In this case, the legal basis applicable to the processing of your personal data will be your consent. This consent may be revoked at any time, without this, however, making unlawful the processing of personal data carried out on the basis of this consent until the date on which it is revoked. In this case, failure to provide your consent will prevent us from sending you commercial communications related to our activity.
    Comply with legal obligations Processing is necessary for compliance with a legal obligation to which we are subject.
    Platform’s troubleshooting and bug fixing Our legitimate interest to support, expand, evaluate and improve Platform's activities, services and the Data Subject’s experience.
    Provide technical assistance and for the purpose of responding to requests, inquiries, or complaints Our legitimate interest in providing you with a quality and personalized service, managing the complaints we receive as applicable.

    Some of the personal data indicted on the table above is collected and processed through Cookies, and as such we suggest that you consult our Cookie Policy.


  • How long do we retain your personal data?
    The time limit during which we retain your personal data may vary depending on the purpose for which they were processed. Therefore, we will retain your personal data within the following time limits:
    Purpose Retention Period
    In case you are a Merchant that is a natural person, or the legal representative of a Merchant we will process your personal data in order to execute the Merchant Agreement
    • for as long as necessary to ensure full performance of the contract entered into with you;
    • during the applicable legal time limits.
    In case you are a buyer, within the scope of the operation of our Platform, and in order to be able to provide you with our services, we will process the personal data that you provide us with for the following purposes:
    • Execution of the Terms and Conditions;
    • Creation of your user profile;
    • For platform-user-analysis: we will process your personal data together with the personal data of all other users in order to study the major characteristics of our addressable market so that we can improve and customize our services. We will process your personal data together with the personal data of all other users in order to study the major characteristics of our addressable market so that we can improve and customize our services.
    • Provide you with information pertaining your transaction history.
    • Forwarding the buyer’s personal data to the respective Merchant, whenever such data is necessary for tax purposes, such as issuing invoices.
    • for as long as necessary to ensure full performance of the contract entered into with you;
    • during the applicable legal time limits.
    Sending commercial communications through a newsletter Until you revoke your consent, whichever is applicable. Without prejudice, in case we do not engage in activity with Us during 1 year, we will delete your personal data for this purpose.
    Comply with legal obligations For the time required to comply with the legal obligations applicable in each case.
    Platform’s troubleshooting and bug fixing Until the moment that personal data are no longer necessary for the fulfilment of this purposes.
    Provide technical assistance and for the purpose of responding to requests, inquiries, or complaints Until the moment that personal data are no longer necessary for the fulfilment of this purposes.

  • To whom do we transfer your personal data
    We will transfer your Personal Data for the respective purposes and limited to the extent necessary to the recipients and categories of recipients listed below:
    • Within the Found4U group: We share your Personal Data with other Found4U group entities as follows in order to carry out the following purposes:
      • Platform’s troubleshooting and bug fixing;
      • Provide technical assistance and for the purpose of responding to requests, inquiries, or complaints.
      A list of such other Found4U group entities can be found here ("Found4U Group Entities").
    • Service providers: We use third-party service providers, to provide the Platform and will share your Personal Data with them for the provision of the services. Our service providers are contractually obligated to process such Personal Data on behalf of Found4U under appropriate instructions as necessary for the respective processing purposes and to appropriately protect your Personal Data. Our service providers may not otherwise process or share your Personal Data, except as permitted by law. We share your Personal Data with service providers listed below:
      • Stripe Technology Europe, Limited (“STEL”). STEL is authorized as an electronic money institution by the Central Bank of Ireland (reference number: C187865).
    • Governmental authorities and regulators, courts, external advisors (e.g., lawyers, accountants, auditors), and similar third parties that are public bodies as required or permitted by applicable law, in order to: (i) ensure compliance with applicable laws; (ii) respond to governmental inquiries or requests from public authorities; (iii) comply with valid legal process; (iv) protect the rights, privacy, safety or property of Found4U, site visitors, guests, employees or the public; (v) permit Us to pursue available remedies or limit the damages that We may sustain; and (vi) respond to an emergency. Such data transfers are based on Art. 6 (1) (c) or (f) GDPR.
    Some of the recipients of your Personal Data are located or have relevant operations outside of the EEA (namely, USA, and Brazil), where the data protection laws may provide a different level of protection compared to the laws in your jurisdiction. We will take all necessary measures to ensure that transfers out of the EEA are adequately protected as required by applicable data protection law.
    By way of entering into appropriate data transfer agreements based on the Standard Contractual Clauses (2021/914/EU) as referred to in Art. 46 (2) (c) GDPR (the "SCC"), or by other adequate means, which are accessible upon request. We have established that all recipients located outside the EEA will provide an adequate level of protection for the Personal Data and that appropriate technical and organizational security measures are in place to protect Personal Data against accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure or access, and against all other unlawful forms of processing. Any onward transfer (including to Our group entities outside the EEA) is subject to appropriate onward transfer requirements as required by applicable law. For example, we will enter into appropriate data transfer agreements based on the SCC in order to transfer your Personal Data to US.


  • What rights can the data subject exercise?
    Under the conditions set out under applicable data protection law (e.g., the GDPR), you may have the following rights:
    • Right of access: You have the right to obtain confirmation from Us as to whether or not Personal Data concerning you is processed, and, where that is the case, to request access to the Personal Data. The access information includes – inter alia – the purposes of the processing, the categories of Personal Data concerned, and the recipients or categories of recipients to whom the Personal Data have been, or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access. You also have the right to obtain a copy of the Personal Data undergoing processing. For further copies requested by you, We may charge a reasonable fee based on administrative costs.
    • Right to rectification: You have the right to obtain rectification of inaccurate Personal Data concerning you from Us. Depending on the purposes of the processing, you have the right to have incomplete Personal Data completed, including by means of providing a supplementary statement.
    • Right to erasure ("right to be forgotten"): Under certain circumstances, you have the right to obtain the erasure of Personal Data concerning you from Us and We may be obliged to erase such Personal Data.
    • Right to restriction of processing: Under certain circumstances, you have the right to obtain the restriction of processing your Personal Data from Us. In this case, the respective data will be marked and may only be processed by Us for certain purposes.
    • Right to data portability: Under certain circumstances, you have the right to receive the Personal Data concerning you, which you have provided to Us, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another entity without hindrance from Us.
    • Right to object: You have the right to object, on grounds relating to your particular situation, at any time to processing of your Personal Data by Us which is based on the necessity of processing for the purposes of the legitimate interests pursued by Us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection. We will no longer process your Personal Data unless We demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
    • Moreover, if your Personal Data are processed for direct marketing purposes, where such processing is permitted without you prior consent, you have the right to object at any time to the processing of Personal Data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case your Personal Data will no longer be processed for such purposes by Us.
    • Right to lodge a complaint: In addition to the rights set out above, you also have the right to lodge a complaint with the competent data protection supervisory authority.

    If you have any question or wish to exercise these rights, you may send an email to . The exercise of rights is free of charge, unless the request is obviously ungrounded, excessive or repeated.


  • Final Provisions
    This policy is subject to change due to technological developments, changes in laws regarding the functionality of electronic services, etc. objective factors. The controller of personal data will publish information about changes in the policy on the Platform. Date of last change: 04.07.2023