← Back to the home page

Privacy notice

1. The data controller

The data controller is the company that runs the GuideFound service. Its details are in the legal notice. Contact: hello@guidefound.com, +36 70 600 9147.

2. The data we handle

The details you enter in the contact form: your name, your email address and, if you wish, your phone number or WhatsApp contact, your business or site name, the link to your current website or social media page, where you guide or the destination, the package you chose, the topics you are interested in, the languages you need, your main goal, a free-text message, and how you prefer to be contacted.

In addition, the form provider records the time you sent the form as technical data and, to filter out abuse, the sender's IP address and browser details.

3. Purpose and legal basis

Purpose: replying to your enquiry and discussing the service. Legal basis: your consent (Article 6(1)(a) GDPR), and steps taken at your request before a contract is concluded (Article 6(1)(b) GDPR). Our legitimate interest in protection against abuse rests on Article 6(1)(f) GDPR.

4. Referral and campaign codes

If you arrive from a link that carries a referral (ref) or campaign code (UTM), your browser stores this short technical code for the length of the visit, and we attach it to your enquiry only if you actually send the form. The code is not shown on the website, and on its own it does not identify you. As no retention period has been approved, the code is stored only for the current browser session and is deleted when you close the tab.

5. Data processors

We use the following data processors to handle enquiries: Netlify, Inc. (hosting and forms), Google (email). Enquiries are stored by Netlify Forms and arrive as notifications in the hello@guidefound.com mailbox. Netlify, Inc. operates in the United States of America, so the data may also be transferred outside the European Economic Area.

6. How long we keep the data

Enquiries are kept until your enquiry is closed, or until you withdraw your consent.

7. Analytics and cookies

The website currently uses no outside analytics or measurement provider. It runs no session recording, no advertising measurement and no outside visitor counter. If we ever add such measurement, it can only start after your explicit consent, and this notice is updated first. The details are in the cookie notice.

We use our own counter: as daily totals, we record how many times each page was opened and how many times the contact buttons were used. For this your browser sends a short request, but we use no cookie, store nothing in your browser, and keep only the page address and the type of event from the request. These totals cannot be linked to anyone. The numbers are stored by Supabase Pte. Ltd in London, and the server may see the IP address of the request in its own technical log for a short time.

We never send personal data, form data or messages to an analytics system.

8. Your rights

You can ask at any time for access to your personal data, for it to be corrected or deleted, or for its handling to be restricted. You can object to the handling, and you can withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of the handling before it. You can send your request to hello@guidefound.com; we reply within the time the law sets.

You can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu), or go to court.

9. The website's assistant

An assistant that runs on artificial intelligence answers questions about GuideFound's services on this website. The answers are written by a machine, not a person, so they can be wrong: the price and the content that apply are always the ones in the written quote. The assistant makes no decision about you and sends nothing in your name.

Data we handle: the messages you type to the assistant, the answers to them and their times. We do not store your IP address; to filter out abuse we only use a code made from it that changes every day. Please do not write sensitive data to the assistant.

If you give the assistant your email address, we handle it, together with your last question, in the same way as an enquiry sent through the contact form.

Purpose and legal basis: information given at your request before a contract is concluded (Article 6(1)(b) GDPR), and checking the quality of the service and filtering out abuse, which is our legitimate interest (Article 6(1)(f) GDPR).

Data processors: Anthropic Ireland, Limited writes the answers, and Supabase Pte. Ltd stores the conversations in London, in the United Kingdom. The data is therefore transferred outside the European Economic Area: to the United Kingdom and, through Anthropic's processing, to the United States of America too. Under Anthropic's contract terms, the messages are not used to train artificial intelligence models.

How long we keep it: conversations are deleted automatically after 30 days, and the codes used to filter out abuse after 2 days. If you would like a conversation deleted, write to hello@guidefound.com.

10. The website check

If you enter an address in the website check, we open that public page and score it. Data we handle: the address, the score and the time, which we delete automatically after 30 days. They are stored by Supabase Pte. Ltd in London. The result is not public. To measure speed we may pass the address to Google's PageSpeed service. We do not store your IP address; to filter out abuse we only use a code made from it that changes every day. We also keep the full result separately for one day, so we can email it to you if you ask, and then delete it automatically.

If you ask for the full result by email, we send it once to the address you give. The email is sent by Resend, Inc. (United States of America) from its server in the European Union, in Ireland, which keeps a log of the sending for 30 days. We do not store your email address in our own database: to filter out abuse we only use a code made from it that changes every day, which we delete after 2 days. Purpose and legal basis: information sent at your request (Article 6(1)(b) GDPR), and filtering out abuse, which is our legitimate interest (Article 6(1)(f) GDPR).

We also receive your email address, the address checked, the score and whether you asked to be contacted, and we handle them in the same way as an enquiry sent through the contact form. If you did not ask to be contacted, we do not send you an offer.