Lofore privacy statement

Last updated 11 November 2026

1. Who we are

Lofore is run by Foundpoint Oy (Business ID 3659473-6), Tähtitorninkatu 12 H 23, 00140 Helsinki, Finland. Foundpoint Oy is the controller of the personal data described here. Contact: support@lofore.com.

2. What we collect

• When you send a lost or found report: what the item is, its description, the town and place, the date, for found items where the item is now, and your email address.
• When you write to us: your name if you give it, your email address and your message.
• When you visit the site: your IP address and the time of each request, which our hosting provider records in server logs to keep the site secure.

We don't use accounts, photos, analytics, advertising or tracking cookies.

3. Why we use it, and on what legal basis

• To compare reports, tell both sides about a match and answer your messages, because you ask us to: the service you request (Article 6(1)(b) of the EU General Data Protection Regulation).
• To keep the site secure and stop spam and misuse: our legitimate interest (Article 6(1)(f)).

You don't have to give us your email address, but without it we can't tell you about a match.

4. Who sees your data

• Foundpoint Oy's staff who handle reports.
• The other side of a match sees only the item details of your report: what, where, when and the description. We never show your name or email address unless you both agree.
• Our service providers, who host the site, store reports and send email for us under data processing agreements: Vercel Inc. (the website and its forms), Resend (sending email) and Google (our mailbox, Google Workspace).
• Authorities, only where the law requires it.

We don't sell your data or use it for marketing.

5. Where it's kept

The website's forms run in Stockholm, Sweden, and our email is sent from Ireland. Vercel, Resend and Google are US companies and may also process data in the United States. For example, Resend keeps the emails it sends for 30 days in the US. These transfers rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses in the providers' data processing agreements.

6. How long we keep it

• Reports: 90 days from when they arrive, or less if you ask us to delete them or the item is returned.
• Messages to us: 12 months after the matter is closed.
• Copies of sent emails at our email provider: 30 days.
• Server logs: 1 day.

7. Your rights

You can ask to see the data we hold about you, have it corrected or deleted, restrict or object to its use, and receive it in a portable form. Email support@lofore.com; we reply within one month. You can also complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi, tietosuoja@om.fi) or to the data protection authority where you live.

8. Automated decisions

We make no automated decisions about you. People compare the reports.

9. Changes

If we change this statement, we'll update the date at the top.