Privacy Notice

Last updated: July 2026

1. Data controller

CraicFinder is operated by Hamilton Rocha, trading as CraicFinder (sole trader, Ireland). Contact: support@craicfinder.ie.

[ADDRESS PLACEHOLDER — to be updated with registered virtual office address before launch]

2. What data we collect and why

We collect the following categories of personal data:

Data	Purpose	Lawful basis
Email address	Account creation and authentication	Art. 6(1)(b) — contract performance
GPS coordinates (check-in)	Verify you are physically at the pub when submitting a review	Art. 6(1)(b) — contract performance
Review content (ratings, text)	Publish your review on the pub listing page	Art. 6(1)(b) — contract performance
Pub listing details (name, address, phone, website)	Create and display your pub listing	Art. 6(1)(b) — contract performance
Licence reference number	Verify pub ownership during the claim process	Art. 6(1)(b) — contract performance
Review submission patterns (velocity, GPS clustering)	Detect and prevent fraudulent reviews	Art. 6(1)(f) — legitimate interests

We do not collect special category data (Article 9 GDPR) and do not carry out automated decision-making with legal or similarly significant effects.

3. GPS data

When you submit a review, your device's GPS coordinates are used solely to verify that you are physically present at the pub. Your precise check-in coordinates are stored temporarily and deleted automatically after 90 days. The verification result (whether your check-in was within the required distance) is retained as part of your review record.

GPS coordinates are never displayed to other users, pub owners, or third parties.

4. How long we keep your data

Data	Retention period
User account and profile	Until you request deletion
Reviews and ratings	3 years from submission date
GPS check-in coordinates	90 days from submission, then deleted automatically
Fraud detection records	2 years from creation
Pub listing data	Until the listing is permanently removed

5. Who we share your data with

We use the following processors to operate CraicFinder:

Processor	Purpose	Location
Supabase Inc.	Database, authentication, storage	EU (Ireland, eu-west-1)
Vercel Inc.	Web hosting and deployment	EU edge nodes
Resend Inc.	Transactional email delivery	EU
Mapbox Inc.	Address geocoding and mapping	USA (address queries only, no personal data transmitted)

All processors are bound by data processing agreements. No personal data is sold or shared with advertisers. Supabase and Vercel process data within the EEA. Mapbox queries contain only address strings — no account identifiers or GPS coordinates are transmitted.

6. Your rights

Under GDPR you have the following rights:

Right of access (Art. 15)

Request a copy of the personal data we hold about you.

Right to rectification (Art. 16)

Request correction of inaccurate personal data.

Right to erasure (Art. 17)

Request deletion of your account and associated personal data. Note: anonymised aggregate data and fraud records may be retained where there is a legitimate interest in doing so.

Right to restriction (Art. 18)

Request that we limit processing of your data in certain circumstances.

Right to data portability (Art. 20)

Request your data in a structured, machine-readable format.

Right to object (Art. 21)

Object to processing carried out on the basis of legitimate interests, including fraud detection.

To exercise any of these rights, contact us at support@craicfinder.ie. We will respond within one month (Article 12 GDPR). You also have the right to lodge a complaint with the Data Protection Commission (Ireland).

7. Cookies and tracking

CraicFinder uses a session cookie for authentication only. No analytics cookies, advertising cookies, or third-party tracking scripts are used. The authentication session cookie is strictly necessary for the service to function and does not require consent under the ePrivacy Directive.

8. Changes to this notice

We will update this notice when our data processing activities change. Material changes will be notified to registered users by email. The date at the top of this page reflects the most recent revision.