Privacy
Privacy notice
A plain account of your data: what ReloFinder collects and why, who gets it, how long it stays with us and what you can ask us to do about it.
Version 0.1 ·
The short version
- ReloFinder is free for people who move. You send a request, and we pass it to one relocation agency chosen for you, or to up to three if you ask to compare offers.
- The agency first sees an anonymous summary. It receives your name, email, phone number and message only after it accepts your request.
- We do not sell personal data. Our own page statistics use no cookies. Marketing and analytics cookies from Google and Meta load only if you accept them, and only where we have switched them on.
- We keep a request that does not lead to an introduction for 12 months, then delete it.
Who is responsible
Loaded AG operates ReloFinder and decides why and how your data is used. It is the controller under the EU General Data Protection Regulation (GDPR), under the UK GDPR where that applies, and under the Federal Act on Data Protection (FADP) of Switzerland.
Loaded AG, Klostergutstrasse 4, CH-8252 Schlatt-Altparadies, Switzerland. Email: hello@relofinder.com. More details are on the imprint.
Representative in the EU (GDPR Article 27): [Art. 27 representative]. Representative in the United Kingdom, if one is required: [UK representative]. Data protection officer: [none appointed, or name and contact: the lawyer decides whether one is needed].
What we collect, why, and on what basis
Provider details in this notice are marked [to verify] where Loaded AG has not yet checked its data processing agreements.
| What | Why | Legal basis | Kept |
|---|---|---|---|
| Your request: name, email, phone number, household, citizenship, where you move to (country and city), timing, services, budget, your notes, whether you want to compare, and the page you started from. | To pass your request to the agency we select for you and to answer you. | Your consent (GDPR Article 6(1)(a)), given in the form, and steps you ask for before a contract (Article 6(1)(b)). | 12 months if no introduction follows. See "How long we keep data". |
| Your consent record: the wording you agreed to, its version and the time. | To prove what you agreed to. | Legitimate interests (Article 6(1)(f)): being able to show consent. | As long as the request. |
| Where a visit came from: campaign tags in the address (utm), the referring site, the landing page. Kept in your browser session and sent with a request you submit. | To see which guides and pages lead to requests. | Legitimate interests (Article 6(1)(f)). [Lawyer: whether ePrivacy rules need consent for this.] | In your browser until the tab closes. With a request: as long as the request. |
| Emails to you: a confirmation of your request, and messages about it. | To tell you what happens to your request. | Steps you ask for (Article 6(1)(b)). | As long as the request. |
| Messages to us: your email address and what you write. | To answer you. | Legitimate interests (Article 6(1)(f)) and, where you ask for something, Article 6(1)(b). | [12 months after the last message: proposal] |
| Visit data: IP address, browser, pages and time in the logs of our host, and page counts from Plausible, which sets no cookies. | To show the site, keep it secure and count visits. | Legitimate interests (Article 6(1)(f)). | Logs: [period set by the host, to verify]. Plausible: aggregated counts. |
| Abuse protection: a one-way code (HMAC) of your IP address, with the name of the form and a time window. We never store the address itself in that table. | To stop spam and repeated submissions. | Legitimate interests (Article 6(1)(f)). | One day. |
| Agencies that apply (agency name, contact person, email, website, phone, regions, services, interest, notes). | To assess the application and to talk to the agency. | Steps before a contract (Article 6(1)(b)) and legitimate interests (Article 6(1)(f)). | While the agency works with us, then [period to set] for records. |
| Business contact details of people at agencies, taken from their websites and public directories. | To invite agencies to list on ReloFinder or to receive requests. | Legitimate interests (Article 6(1)(f)). [Lawyer: rules on contacting businesses in each country.] | Until the agency says no; then only a record that it must not be contacted. |
Giving us the data for a request is your choice. Without it, we cannot match you with an agency.
How your request reaches an agency
You consent in the form to this wording, which we store with the version of the text: "Pass my request to one relocation agency in {city} selected by ReloFinder (up to 3 if I ask to compare)."
- We choose the agency from what you told us: the city, the services, your language and the agency's availability. A person at ReloFinder reads every request.
- The agency first receives an anonymous summary: the city, the services, the timing and the budget. It does not receive your name, contact details or notes.
- If the agency accepts through the link in the summary, we send it your name, email, phone number and message. If it declines or does not answer, it never sees them, and we may offer the request to another agency.
- From the moment the agency accepts, it is an independent controller of the data it received. It answers to you for its own use of your data and for requests about it.
A request that you start from an agency's own profile goes to that agency, if it takes requests. If you ask to compare, up to three agencies receive the anonymous summary, and each one that accepts receives your details.
We do not know what an agency does with your data after it accepts. Ask the agency for its privacy notice. The agency agrees in our terms to use the data only to answer your request and to serve you, and not to sell or pass it on.
Who else receives data
Providers that process data for us, under a contract, only on our instructions:
| Provider | What for | Where [to verify] |
|---|---|---|
| Supabase | The database that stores requests, agencies and records. | Hosted in Zurich (region eu-central-2) [to verify] |
| Netlify | Hosting, the delivery network and the functions that run the forms. | Global network, United States [to verify] |
| Resend | Sending the emails to you and to agencies. | United States [to verify] |
| Plausible Analytics | Page statistics without cookies. | European Union [to verify] |
| Stripe | Payments by agencies for introductions and profiles. Stripe does not process payments of people who move. | Ireland and United States [to verify] |
| Google and Meta | Analytics and advertising measurement, only if you accept the cookies, and only if we switch them on. | United States and elsewhere [to verify] |
We also share data with advisers who are bound by confidentiality (for example lawyers and accountants), and with authorities where the law requires it. We do not sell personal data.
Data sent to other countries
Loaded AG is based in Switzerland. The agencies you ask us to contact are in the country you move to, which may be outside the European Economic Area, the United Kingdom and Switzerland, for example in the United Arab Emirates. Some providers above are in the United States.
Where data leaves those areas, we rely on an adequacy decision, on standard contractual clauses or on another mechanism the law allows [lawyer: which mechanism for each provider and each country]. When you ask us to pass your request to an agency abroad, the transfer is needed to take the step you asked for.
How long we keep data
- Requests that do not lead to an introduction: 12 months after you send them. Then we delete the request or remove every field that identifies you.
- Requests that lead to an introduction (an agency accepted): we keep the record of the request, the agency and the dates for [period to be set by the lawyer], to bill the agency and to deal with disputes. The agency keeps its own copy under its own policy.
- Consent records: as long as the request they belong to.
- Abuse protection codes: one day.
- Page statistics: aggregated, with no personal profile.
- Agencies that asked not to be contacted: we keep the minimum needed to honour that, for as long as it is needed.
You can ask us to delete your data sooner. See "Your rights".
Your rights
You can ask us, free of charge:
- for a copy of your data and information about how we use it (access);
- to correct data that is wrong (rectification);
- to delete your data (erasure);
- to limit how we use it (restriction);
- to receive the data you gave us in a usable format (portability);
- to stop using it where we rely on legitimate interests (objection).
Where we use your data on the basis of your consent, you can withdraw it at any time. Withdrawing does not affect what we did before. Write to hello@relofinder.com. We answer within one month (GDPR Article 12(3)). If we need to confirm that you are who you say you are, we ask you for that first.
You also have the right to complain to a data protection authority: where you live or work, or where you think a breach happened. In Switzerland that is the Federal Data Protection and Information Commissioner (FDPIC). In the United Kingdom it is the Information Commissioner's Office (ICO). [Lawyer: list the lead authority, if one applies.]
We do not make decisions about you by automated means that have legal or similarly significant effect. We choose an agency by the criteria you gave us, and a person reads every request.
Children
ReloFinder is for adults who plan a move. We do not knowingly collect data from children. [Lawyer: minimum age for the request form in each country.]
Security
Requests are stored in a database that only our server functions can read. Agencies see an anonymous summary until they accept. The links we send to agencies are signed, and opening one changes nothing until the agency confirms. No system is perfect: if a breach puts you at risk, we tell you and the authority as the law requires.
Changes to this notice
We update this page when what we do changes, and the date under the title changes with it. If a change affects what you agreed to, we ask you again.