Privacy Policy
Last updated: April 2026
1. Introduction
Return2Owner ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our website and services at return2owner.club ("Service").
We operate in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we process data of individuals in the European Economic Area, we also comply with the EU GDPR.
Our data controller details:
Name: Return2Owner
Contact: support@return2owner.club
Website: return2owner.club
2. Data We Collect
2.1 Registered Users (Account Holders)
- Full name and email address — for account creation, login, and notifications
- Payment information — billing details processed securely by Stripe; we do not store card numbers or full payment credentials
- Subscription status and history
- Item names, descriptions, and associated tag codes registered to your account
- QR code and unique ID code assigned to your account
- Account settings and preferences
- Technical data: IP address, browser type, device information, access timestamps (collected automatically)
- Communications with our support team
2.2 Finders (Non-Registered Users)
- Name and contact details (phone and/or email) voluntarily submitted when reporting a found item
- Location where the item was found
- Any message or notes submitted with the report
- Optional photos uploaded with the report
- IP address and browser information (collected automatically)
2.3 All Visitors
- Cookies and similar tracking technologies (see Section 9)
- Analytics data (page views, session duration, referral source) via Google Analytics
3. How We Use Your Data
We process personal data under the following lawful bases:
| Purpose | Lawful Basis |
|---|---|
| Providing the lost-and-found notification service | Contract performance |
| Processing subscription payments | Contract performance |
| Sending email alerts when a tag is scanned | Contract performance |
| Account management and support | Contract performance |
| Legal compliance | Legal obligation |
| Fraud prevention and platform security | Legitimate interests |
| Service improvement and analytics | Legitimate interests |
| Marketing communications (if opted in) | Consent |
We do not use your data for automated decision-making or profiling in ways that produce legal or similarly significant effects.
4. How We Share Your Data
4.1 With Finders and Owners
When a finder submits a report, we send a notification email to the registered item owner containing the finder's name, contact details (if they have consented to sharing), location, and message. This is the core function of the Service.
4.2 Service Providers (Data Processors)
We share data with trusted third-party processors who act on our behalf and are contractually bound to process data only as instructed:
- Stripe — payment processing (see stripe.com/privacy)
- Email delivery providers — for sending notification and transactional emails
- Analytics providers — including Google Analytics for anonymised usage data
- Hosting and infrastructure providers — for storing and serving the platform
4.3 Legal Requirements
We may disclose personal data if required by law, court order, or regulatory authority, or where we believe disclosure is necessary to protect the rights, property, or safety of Return2Owner, our users, or others.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to a successor entity. We will notify affected users and ensure equivalent protections are in place.
We do not sell, rent, or trade personal data to third parties for marketing purposes.
5. International Transfers
Some of our service providers may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent approved mechanisms, in line with UK GDPR requirements.
6. Data Retention
We retain personal data only as long as necessary for the purposes it was collected:
- Account data: retained for the duration of your account, plus up to 6 years after closure for legal and accounting purposes
- Subscription and payment records: retained for 7 years in accordance with financial record-keeping obligations
- Finder reports: retained for up to 12 months from submission, then deleted
- Technical/log data: retained for up to 12 months
- Support communications: retained for up to 3 years
You may request earlier deletion of your data (see Section 8).
7. Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures, including:
- Encrypted data transmission via HTTPS/TLS
- Secure storage with access controls and authentication
- Regular security reviews and updates
- Restricted internal access to personal data on a need-to-know basis
- Payment data handled exclusively by PCI-DSS compliant Stripe
Despite these measures, no system is 100% secure. We cannot guarantee the absolute security of data transmitted over the internet. You use the Service at your own risk and are responsible for keeping your login credentials confidential.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and affected individuals without undue delay, as required by law.
8. Your Rights
Under the UK GDPR, you have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure ("right to be forgotten"): Request deletion of your data, subject to legal retention requirements
- Right to restriction: Request that we limit processing of your data in certain circumstances
- Right to data portability: Receive your data in a structured, commonly used format
- Right to object: Object to processing based on legitimate interests or for direct marketing
- Rights related to automated decision-making: Not to be subject to decisions made solely by automated processing that significantly affect you
To exercise any of these rights, contact us at support@return2owner.club. We will respond within one calendar month. We may need to verify your identity before processing a request.
You will not be charged a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse the request.
9. Cookies & Tracking Technologies
9.1 Essential Cookies
We use essential cookies that are strictly necessary for the Service to function, such as session authentication and security tokens. These cannot be disabled without affecting core functionality.
9.2 Analytics Cookies
We use Google Analytics to understand how visitors use our website. This may involve setting cookies and collecting anonymised usage data (such as pages visited and session duration). You can opt out of Google Analytics tracking via the Google Analytics Opt-out Browser Add-on.
9.3 No Advertising Cookies
We do not use advertising, retargeting, or third-party marketing cookies.
9.4 Managing Cookies
You can control and delete cookies through your browser settings. Please note that disabling cookies may affect the functionality of the Service.
10. Children's Privacy
Our Service is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child, please contact us at support@return2owner.club and we will delete it promptly.
11. Third-Party Links
Our website may contain links to third-party websites. This Privacy Policy applies only to our Service. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies.
12. Marketing Communications
If you have opted in to receive marketing communications from us, we may send you updates, newsletters, or promotional content by email. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or contacting us at support@return2owner.club. Opting out of marketing will not affect transactional communications related to your account.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify registered users by email. We encourage you to review this policy periodically.
14. Complaints
If you have concerns about how we handle your personal data, please contact us first at support@return2owner.club so we can try to resolve the matter.
You also have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
If you are in the EEA, you may also contact your local data protection authority.
15. Contact Us
For any privacy-related queries or to exercise your rights:
Email: support@return2owner.club
Website: return2owner.club