Privacy policy

What this is

Lost Then Found is an NFC dog tag service operated by Lost Then Found Dog Ltd, trading as Lost Then Found (company number 17206535), registered in England and Wales. Registered office: 4 Warwick Place, Winsford, Cheshire, CW7 1EZ. This policy explains what data we collect, why, how long we keep it, and your rights under GDPR. Lost Then Found Dog Ltd is the data controller for lostthenfound.dog. For data questions, contact us here.

What data we collect and why

Data	Why	Legal basis
Owner name, email, phone	Scan notifications and order updates	Contract / Legitimate interest
Dog profile (name, breed, photo, etc.)	Display on profile page for finders	Consent
Order delivery address	To dispatch your tag	Contract
Finder location (GPS when alert pressed)	Included in owner notification	Legitimate interest
Finder messages	Relay messages between finder and owner	Legitimate interest
IP address and user agent	Security logging only	Legitimate interest

What we don't do with your data

• We don't sell it. Ever.
• We don't share it with third parties except as required to deliver the service (SendGrid and Twilio for email/SMS, Stripe for payment).
• We don't run advertising or analytics on dog profile pages - finders should never feel tracked.
• We don't use your data for profiling or automated decision-making.

Third parties

SendGrid (Twilio): transactional email. Your email address is transmitted for delivery purposes. Twilio privacy policy

Twilio: SMS alerts. Your phone number is transmitted to Twilio to send scan notifications. Twilio privacy policy

Stripe: payment processing for tag orders. We never see your card details. Stripe privacy policy

Krystal Hosting: UK-based web host. Data stored on UK servers.

How long we keep your data

• Owner profile data: until you delete it, or 3 years after last login if tag becomes inactive
• Order data: 7 years (HMRC requirement)
• Scan logs: 12 months rolling
• Messages: 6 months after the conversation ends

Cookies and tracking

We use two cookies on this website:

Cookie	Type	Purpose	Expires
PHPSESSID	Strictly necessary	Keeps you logged in as a tag owner between pages. No consent required.	Session
__cf_bm	Strictly necessary	Set by hCaptcha to distinguish humans from bots on our order and contact forms.	30 minutes
_fbp	Targeting	Set by Facebook Pixel to measure the effectiveness of our advertising on Facebook and Instagram. Only set if you accept cookies.	3 months

We also set a ltf_cookie_consent cookie to remember your preference. It contains only "accepted" or "declined" and expires after 12 months.

Dog profile pages carry no tracking or advertising cookies whatsoever.

On our public website pages we use the following third-party tools:

• Plausible Analytics - privacy-friendly, cookie-free analytics. No personal data is collected or shared. Hosted in the EU. Plausible privacy policy.
• Facebook Pixel - used to measure the effectiveness of our advertising. Only active if you accept cookies. Data is processed by Meta Platforms. You can manage your ad preferences at facebook.com/adpreferences.

None of these tools are active on dog profile pages.

Your rights

Under GDPR you have the right to access, correct, delete, and port your data, and to withdraw consent at any time. Contact us or use the deletion form below.

Complaints

Contact the ICO at ico.org.uk or call 0303 123 1113.