LEGAL · UPDATED 13 OCTOBER 2026 · V1.1

GDPR

How Locufy meets data protection law, and how to use your rights.

IN SHORT — THE SUMMARY; THE FULL TEXT IS BENEATH AND IS THE ONE THAT APPLIES

  • The data controller is Locufy LTD. Contact: [email protected].
  • We process your data only on a lawful basis: contract, legitimate interests, consent or legal obligation.
  • You can access, correct, delete, restrict or move your data, and object to its use.
  • You can complain to the Data Protection Commission.

1. Our Commitment

Locufy is fully committed to complying with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. We process personal data lawfully, fairly, and transparently, and only for specified, legitimate purposes.

2. Data Controller

The data controller is Locufy LTD. Contact: [email protected].

Locufy acts as the data controller for personal data collected through the platform. We determine the purposes and means of processing your data. For provider-related data shared during a booking, the provider may act as an independent data controller.

3. Lawful Basis for Processing

We process your data under the following legal bases:

  • Contract: Processing necessary to fulfil our agreement with you (e.g., creating your account, processing bookings).
  • Legitimate interest: Platform improvement, fraud prevention, marketing communications to existing customers, and creating unclaimed business listings from publicly available information (which a business can claim or ask us to remove).
  • Consent: Marketing emails, and analytics and marketing cookies, which are set only after you accept them via our cookie banner. You may withdraw consent at any time.
  • Legal obligation: Tax reporting, regulatory compliance, and responding to lawful requests from authorities.

4. Your Rights Under GDPR

As a data subject, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Ask us to correct inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data ("right to be forgotten"), subject to records we are required to keep for legal, tax, dispute-resolution and fraud-prevention purposes.
  • Restriction: Ask us to limit processing of your data in certain circumstances.
  • Portability: Receive your data in a structured, machine-readable format and transfer it to another service.
  • Objection: Object to processing based on legitimate interest or direct marketing.
  • Automated decisions: Not be subject to decisions based solely on automated processing that significantly affect you.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

5. Data Protection Contact

For any questions or concerns about how we handle your personal data, contact our data protection team at [email protected].

6. International Transfers

Your data is primarily stored within the European Economic Area (EEA). If any data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Irish Data Protection Commission within 72 hours and inform affected individuals without undue delay.

8. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.

v1.1, updated 13 October 2026. Previous versions are kept: v1 (20 August 2026). Printing this page gives the full text with the date.

LEGAL · UPDATED 13 OCTOBER 2026 · V1.1

GDPR

How Locufy meets data protection law, and how to use your rights.

IN SHORT — THE SUMMARY; THE FULL TEXT IS BENEATH AND IS THE ONE THAT APPLIES

  • The data controller is Locufy LTD. Contact: [email protected].
  • We process your data only on a lawful basis: contract, legitimate interests, consent or legal obligation.
  • You can access, correct, delete, restrict or move your data, and object to its use.
  • You can complain to the Data Protection Commission.
Contents — 8 sections
  1. 1. Our Commitment
  2. 2. Data Controller
  3. 3. Lawful Basis for Processing
  4. 4. Your Rights Under GDPR
  5. 5. Data Protection Contact
  6. 6. International Transfers
  7. 7. Data Breach Notification
  8. 8. Complaints

1. Our Commitment

Locufy is fully committed to complying with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. We process personal data lawfully, fairly, and transparently, and only for specified, legitimate purposes.

2. Data Controller

The data controller is Locufy LTD. Contact: [email protected].

Locufy acts as the data controller for personal data collected through the platform. We determine the purposes and means of processing your data. For provider-related data shared during a booking, the provider may act as an independent data controller.

3. Lawful Basis for Processing

We process your data under the following legal bases:

  • Contract: Processing necessary to fulfil our agreement with you (e.g., creating your account, processing bookings).
  • Legitimate interest: Platform improvement, fraud prevention, marketing communications to existing customers, and creating unclaimed business listings from publicly available information (which a business can claim or ask us to remove).
  • Consent: Marketing emails, and analytics and marketing cookies, which are set only after you accept them via our cookie banner. You may withdraw consent at any time.
  • Legal obligation: Tax reporting, regulatory compliance, and responding to lawful requests from authorities.

4. Your Rights Under GDPR

As a data subject, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Ask us to correct inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data ("right to be forgotten"), subject to records we are required to keep for legal, tax, dispute-resolution and fraud-prevention purposes.
  • Restriction: Ask us to limit processing of your data in certain circumstances.
  • Portability: Receive your data in a structured, machine-readable format and transfer it to another service.
  • Objection: Object to processing based on legitimate interest or direct marketing.
  • Automated decisions: Not be subject to decisions based solely on automated processing that significantly affect you.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

5. Data Protection Contact

For any questions or concerns about how we handle your personal data, contact our data protection team at [email protected].

6. International Transfers

Your data is primarily stored within the European Economic Area (EEA). If any data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Irish Data Protection Commission within 72 hours and inform affected individuals without undue delay.

8. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.

QUESTIONS ABOUT YOUR DATA

Ask for your data, correct it or delete it from your account, or write to us. We answer within 30 days.

Contact the privacy team