Privacy Policy
Version 1.1 — updated 10 September 2026 (first published 9 September 2026)
FINDYOURDREAMSPACE LTD (company number 17024024, registered office 167-169 Great Portland Street, London, England, W1W 5PF) ("FYDS", "we") is the controller of personal data processed on findyourdream.space. Contact us about privacy at privacy@findyourdream.space.
This policy explains what we collect, why, who we share it with, and your rights. It applies to participants, organisers and visitors. Cookies are covered in the Cookie Policy.
1. What we collect
Account data: name, email, password, language, country; for organisers, business name, company details and the onboarding declarations described in the Organiser Terms.
Booking and enquiry data: the experiences you enquire about or book, dates, amounts, booking status, cancellations and refunds.
Messages: communications sent through the Platform between participants and organisers, and with FYDS support.
Reviews and content you publish.
Payment data (once Platform payments launch): handled by Stripe, our payment processor — we receive booking amounts, payout status and the last digits/brand of your card, never full card numbers.
Technical data: IP address, device and browser information, and usage data, as described in the Cookie Policy.
What we ask you not to send us: health, dietary and accessibility information belongs directly with your organiser, through the contact route they provide — not in Platform messages or reviews. We do not want this data and do not knowingly process it; if you include it in a message, you do so at your own choice.
2. Why we use it, and the legal basis
Running the Platform — accounts, listings, enquiries, bookings, messages, reviews: performance of our contract with you.
Passing your details to the organiser you book with (section 3): performance of your contract.
Payments and refunds (when enabled): performance of contract and legal obligation (financial records).
Safety, fraud prevention and enforcing our Terms, including reviewing messages where we have reason to (for example, reports of abuse or fraud): legitimate interests in a safe, honest marketplace.
Service emails (booking confirmations, changes to terms): performance of contract.
Marketing emails: consent, or the "soft opt-in" for our own similar services where you've booked with us — every email has an unsubscribe link.
Legal compliance and defending claims: legal obligation and legitimate interests.
We do not sell personal data, and we do not use it for automated decisions with legal effects.
3. Who we share it with
Organisers. When you enquire about or book an experience, we give the organiser your name, contact details and booking information — they need it to respond to you and deliver the experience. The organiser is then an independent controller of that data: their use of it is governed by their own privacy practices and the limits in our Organiser Terms (delivery of your experience only; no marketing to you without your separate consent given to them).
Service providers (processors) acting on our instructions: platform hosting and software (Hetzner — server infrastructure; TAMARANGA — platform software provider, with server access granted for support and maintenance), email delivery (Google Workspace), maps (Google Maps — loaded only when you open a map, at which point Google receives your IP address), analytics (none at present — only aggregate statistics within the Platform's own admin panel, not shared with any third party), customer support (handled directly through the Platform — no separate third-party support tool at present), and — once payments launch — Stripe for payment processing (Stripe also acts as an independent controller for its own regulatory obligations).
Authorities and advisers where the law requires or to establish, exercise or defend legal claims.
A buyer or successor if our business is sold or reorganised, with notice to you.
4. International transfers
FYDS operates internationally, and organisers may be located outside the UK and EEA. Where personal data leaves the UK/EEA — to an organiser abroad or a service provider — we rely on UK adequacy regulations or appropriate safeguards (the UK International Data Transfer Agreement or EU Standard Contractual Clauses, as applicable). Ask us at privacy@findyourdream.space for details of the safeguard applying to a specific transfer.
5. How long we keep it
Account data: while your account is open, then up to 12 months.
Booking, enquiry, payment and refund records: 6 years from the booking (limitation periods and financial rules).
Messages: 2 years from sending, or longer where linked to a dispute.
Reviews: while the listing exists; anonymised on account deletion.
Marketing preferences: until you withdraw consent, plus a suppression record so we don't contact you again.
6. Your rights
You can ask us to: access your data; correct it; delete it; restrict or object to processing (including objecting to marketing at any time, which we always honour); and receive a portable copy. Where processing is based on consent, you can withdraw it at any time.
Write to privacy@findyourdream.space — we respond within one month. You can also complain to the UK Information Commissioner (ico.org.uk) or, if you are in the EU, to your local data protection authority. We'd appreciate the chance to resolve it first.
7. Security and children
We protect personal data with appropriate technical and organisational measures, including encryption in transit and access controls. FYDS is for adults: we do not knowingly collect data from anyone under 18, and we delete it if we learn we have.
8. Changes
We'll post updates here and, for significant changes, tell you by email or on the Platform before they take effect.