Privacy Policy & Data Notice

At Finderstoryshelf (operated by Finderstoryshelf Media Ltd., Company No. 14892011, registered at 42 Maritime Quay, Bristol BS1 4XH, United Kingdom), we are committed to safeguarding the privacy and personal data of our users across all European and international jurisdictions. This Privacy Policy sets out how we collect, process, store, and protect your information under the UK General Data Protection Regulation (UK GDPR), EU GDPR (Regulation EU 2016/679), and the California Consumer Privacy Act (CCPA/CPRA).

1. Data We Collect and Method of Acquisition

We collect personal and technical data to deliver our map-first European coastline directory and hotel discovery services. The categories of information processed include:

• Direct Inquiries & Communication Data: When you submit a concierge request, subscribe to coastal updates, or communicate via our contact channels, we collect your name, email address, phone number (if provided), and the specific shoreline criteria or questions submitted.
• Technical & Navigation Telemetry: IP address (anonymized at capture), browser user-agent, operating system, screen dimensions, referrer URLs, and interaction timestamps.
• Geographical & Mapping Preferences: Selected coastline filters (e.g., French Riviera, Amalfi, Balearic Sea), map marker zoom levels, and saved hotel comparisons stored locally in your browser storage.

2. Lawful Grounds for Processing

Under Article 6 of the UK/EU GDPR, we process your personal data under the following legitimate legal bases:

• Consent (Art. 6(1)(a)): Explicit consent given when choosing cookie preferences or submitting optional concierge inquiry forms.
• Contractual Necessity (Art. 6(1)(b)): Delivering requested coastal reports, route itineraries, and direct contact desk services.
• Legitimate Interests (Art. 6(1)(f)): Maintaining platform security, monitoring server stability, preventing bot fraud, and optimizing interface layout rendering across devices.

3. Third-Party Sub-Processors and Data Transfers

Finderstoryshelf Media Ltd. does not sell, rent, or lease personal customer profiles to data brokers. We share minimal required telemetry strictly with vetted infrastructure partners who comply with international data security standards:

• Cloud Hosting & CDN: AWS / Cloudflare (providing distributed edge caching and SSL encryption across the European Economic Area).
• Mapping Infrastructure: Open-source vector rendering running directly within client browser environments without sending location coordinates to external surveillance trackers.
• Email Dispatch: Transactional mail relay servers hosted within ISO 27001-certified facilities in the UK and European Union.

4. Cookie Policy Integration & Local Storage

Our website utilizes local storage tokens (such as finderstoryshelf_cookie_consent) to remember your privacy decisions across visits. For a detailed matrix of technical, performance, and analytical cookies, please consult our full Cookie Policy.

5. Your Statutory Rights (GDPR & CCPA)

Depending on your jurisdiction, you are entitled to exercise the following enforceable rights regarding your personal records:

• Right of Access: Request a complete copy of all personal records maintained by Finderstoryshelf Media Ltd.
• Right to Rectification: Require the correction of inaccurate or incomplete contact records.
• Right to Erasure ("Right to be Forgotten"): Request the irrevocable deletion of your correspondence history from our active servers.
• Right to Restrict or Object to Processing: Object to processing carried out under legitimate interests.
• Right to Data Portability: Receive your provided records in a structured, machine-readable format (e.g., JSON or CSV).
• Non-Discrimination: California residents have the right not to receive discriminatory pricing or service quality for exercising CCPA statutory rights.

6. Data Retention Period

Concierge inquiry dispatches are retained for a maximum of 24 months to satisfy customer service audit requirements, after which records are automatically scrubbed or permanently anonymized. Server access log files containing masked IP addresses are cycled every 90 days.

7. Data Protection Officer Contact

To exercise your data privacy rights or register a formal inquiry, please submit your request to our designated privacy desk: