Privacy Policy
Owned and operated by Vinna Global FZ-LLC, licensed by the Ras Al Khaimah Economic Zone (RAKEZ), United Arab Emirates.
Last updated: 30 September 2026
This policy explains what personal data Fynds.ae ("Fynds", "we", "us") collects, why, how long we keep it, who we share it with, and your rights. Vinna Global FZ-LLC is the controller of your personal data. We process it in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and, where it applies to children, UAE Federal Decree-Law No. 26 of 2025 on Child Digital Safety.
Questions or requests: hello@fynds.ae.
1. What we collect, and when
When you browse. You can compare prices without an account. When you click through to a retailer, we record the product, store and price shown, your browser's user-agent string and language setting, your approximate country, and a one-way scrambled (hashed) version of your IP address. We use this to count genuine clicks and to detect automated and fraudulent clicks. We never store the IP address itself for these clicks. Our hosting provider records standard technical logs (see section 9). With your consent, Google Analytics measures how the site is used (see section 8).
When you create an account. We collect your email address and password (stored in hashed form by our authentication provider). If you sign in with Google, we receive your email address and the name on your Google account. We also record which version of our Terms and Privacy Policy you accepted, when, and the wording you agreed to. You can optionally add a phone number in your account settings.
When you use wishlists. See section 2.
When you set a price alert. You give us your email address, the product and your target price. You do not need an account. See section 3.
When you contact us. We collect the name, email address, subject and message you send us through the contact form.
When you add reviews or report a price. We store the review or report and link it to your account if you are signed in.
When you search. We log search queries to improve search results. If you are signed in, a search may be associated with your account.
2. Wishlists
Your lists. We store the wishlists you create and their contents: items, notes, quantities, priorities, target prices, budgets, event details, descriptions and cover images.
Using wishlists without an account. If you create a wishlist without an account, we store a random identifier in a cookie called fynds_guest (valid for one year) that links your browser to your lists. If you later sign in, those lists move into your account.
Sharing. Wishlists are private by default. If you share a list, anyone with the link can see its contents.
Collaborators. If you invite someone to edit a list, we store the email address the invitation is addressed to and a secure invite token. We do not send the invitation ourselves. You share the link.
Comments. If you comment on a shared list, we store the comment and link it to your account. Other people who can view the list see the comment attributed to "Someone". We never show your email address, or any part of it, as your name. The list owner may receive an email notification about new comments.
Gift claims. If you mark an item on someone's shared list as bought or reserved, you do not need an account. We store a random identifier in a cookie called fynds_gift so you can change your claim later. You may optionally enter your name. Depending on the list owner's settings, the owner may see that name. Collaborators and other visitors never see it.
Items from other websites. If you save an item from another website, we fetch and store publicly available information from that page (its address, title, image and price). We also record when people click through to those websites (whether the click came from an account or a guest list, whether the list was shared, device type and approximate country, without IP address). We use this information, at the level of the website rather than the individual, to understand which retailers our users are interested in and to approach those retailers about partnerships.
3. Emails
Price alerts. If you set a price alert, you consent at that point to one email when the price drops. After the alert is sent, it is marked as triggered and never processed again. We remove your email address from triggered alerts within 90 days.
Account emails. If you have an account, we send service emails such as a welcome email, security and account emails, notifications about comments on your wishlists (at most one per list every 15 minutes), and confirmation when you delete your account.
Marketing emails. We only send deal and price-drop newsletters if you separately ticked the marketing box. When you give that consent, we record the exact wording you agreed to, the time, where you gave it, and your IP address, so we can prove the consent was given. You can unsubscribe at any time using the link in any email. When you do, we stop immediately and keep a record of your opt-out so we continue to respect it.
We never sell or share your email address with retailers.
4. Why we use your data (legal basis)
- To provide the service you ask for: accounts, wishlists, sharing, alerts, account emails and responding to messages.
- With your consent: analytics cookies and marketing emails.
- To keep Fynds secure and prevent fraud: bot protection, blocking automated and fraudulent clicks, and technical logs.
- To comply with the law and to establish or defend legal claims, including keeping records of consent.
5. Children
To create an account you must be at least 13. Users aged 13 to 17 may only create an account with the consent of a parent or legal guardian. We do not knowingly collect personal data from children under 13, including through price alerts or gift-claim names. If you believe a child under 13 has given us personal data, email hello@fynds.ae and we will delete it. We do not use children's data for targeted advertising or commercial profiling.
6. Cookies and similar technologies
| Name | Type | Purpose | Duration | Needs consent |
|---|---|---|---|---|
sb-* |
Cookie | Keeps you signed in | Session / as set by our authentication provider | No, essential |
fynds_guest |
Cookie | Links your browser to wishlists made without an account | 1 year | No, essential for the feature |
fynds_gift |
Cookie | Lets you change a gift claim you made | Until it expires or you clear it | No, essential for the feature |
cookie_consent_v2 |
Local storage | Remembers your cookie choices | Until cleared | No, essential |
fynds_recent |
Local storage | Recently viewed products, stored only on your device and never sent to us | Until cleared | No |
fynds_signup_prompt_shown |
Session storage | Avoids showing the sign-up prompt twice | Until the tab closes | No |
_ga, _ga_* |
Cookie | Google Analytics usage measurement | Up to 2 years | Yes |
Your choices. On your first visit we ask for your cookie choices. All non-essential options are off until you switch them on. You can change your choices at any time using the "Cookie settings" link in the footer.
If you withdraw analytics consent, Google Analytics stops setting and reading its cookies from that point on. Analytics cookies already stored on your device remain until they expire or until you clear this site's data in your browser settings.
Before you choose, Google Analytics may receive cookieless signals (such as a page view without an identifier) under Google Consent Mode. No analytics cookies are set until you consent.
Affiliate cookies. When you click through to a retailer, the retailer or affiliate network may set its own cookies on its website to track your purchase. Those cookies are governed by their privacy policies.
7. Advertising
Google AdSense is verified on our domain, but we do not currently show any advertising and no advertising cookies are set. If we start showing ads, we will update this policy first, and personalised ads will depend on your consent.
8. Analytics
Google Analytics helps us understand which pages are used and where visitors come from. It sets cookies only with your consent. Reports are aggregated and we do not use them to identify you.
Vercel Web Analytics measures page views and site performance. It does not use cookies and does not identify individual visitors. It runs for all visitors.
9. IP addresses and technical data
- Our hosting provider records standard server logs (IP address, browser, operating system, referring page) for security and performance, and keeps them for a limited period set by the provider.
- When you click through to a retailer, we store a hashed version of your IP address with the click, as described in section 1.
- When our bot protection blocks a suspicious request to a retailer link, we store a one-way scrambled (hashed) version of the IP address, never the IP itself, for up to 90 days.
- Cloudflare Turnstile processes your IP address when checking that you are human on sign-in, sign-up, password reset and the contact form.
- We store your IP address as part of a marketing consent record, as described in section 3, for as long as we keep that record.
We do not link technical data to your identity except where described above.
10. Who we share data with
We use the following service providers (processors) to run Fynds. They may only use your data to provide their service to us.
| Provider | Service | Location of processing |
|---|---|---|
| Supabase | Database and authentication | Outside the UAE |
| Vercel | Hosting and server functions; Vercel Web Analytics | India (Mumbai) for server functions; global content delivery network |
| Resend | Sending emails | United States |
| Cloudflare | Turnstile bot protection | Global |
| Google Analytics; Google sign-in; AdSense domain verification | United States / global |
Affiliate networks we work with include Admitad (Mitgo), TradeTracker, Optimise, Impact and Partnerize. We do not send them your personal data. They receive information about clicks and purchases directly from their own tracking on retailer websites.
We may disclose data if required by law, by a court or by a competent authority, or to protect our rights, users or the public. If Fynds is reorganised or sold, data may transfer to the new operator under this policy.
We do not sell your personal data.
11. Transfers outside the UAE
Some of our providers process data outside the UAE, including in India and the United States. We only use providers that are bound by data processing terms requiring them to protect your data, and we transfer data outside the UAE only as permitted by the PDPL.
12. How long we keep data
| Data | How long |
|---|---|
| Account, wishlists, comments, reviews | Until you delete them or your account |
| Guest wishlists | Until you delete them, or ask us to delete them. The cookie linking them to your browser lasts 1 year |
| Triggered price alerts | Email address removed within 90 days of the alert being sent |
| Marketing consent records (including IP address) | For as long as needed to prove consent, or until you delete your account |
| Suppression list (email addresses that must not be emailed again) | Indefinitely, so we continue to respect unsubscribes, including after account deletion |
| Hashed IP addresses from blocked bot traffic | 90 days |
| Clicks on retailer links | We currently keep these records; you can ask us to delete any linked to you |
| Contact form messages | We currently keep these records; you can ask us to delete yours |
| Records of emails we have sent | We currently keep these records; you can ask us to delete yours |
| Google Analytics data | 14 months |
13. Deleting your account
You can delete your account yourself at any time from your account settings. Before you confirm, we show you what will be deleted. When you delete your account:
- we delete your wishlists that nobody else collaborates on, including their items, notes, comments and activity; your collaborator memberships; your product reviews; your price alerts; your marketing and messaging preferences; your profile; and your login;
- wishlists you shared with accepted collaborators can be handed over to a collaborator you choose, so they are not lost for others;
- comments you made on other people's wishlists stay, but are no longer linked to you and show no name;
- names that gift-givers entered on your lists are deleted with the list.
We keep a limited set of records after deletion: messages you sent through our contact form, records of emails we sent you, and, if you unsubscribed, your email address on our suppression list so we never email you again, for the periods in section 12. Invitations to collaborate that were addressed to your email but never accepted are not removed automatically; email hello@fynds.ae and we will remove them.
14. Your rights
Under the PDPL you have the right to:
- get information about the personal data we hold about you and receive a copy of it;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to certain processing;
- withdraw consent at any time, without affecting processing that took place before.
You can delete your account and change your email preferences yourself. For everything else, including a copy of your data, email hello@fynds.ae. We handle these requests manually and aim to respond within 5 business days. We may need to verify your identity first. If you are not satisfied with our response, you can complain to the UAE Data Office.
15. Security
We protect your data with access controls, encryption in transit, database access restrictions, bot protection and rate limiting. No online service can be completely secure. If a breach affects your personal data, we will notify you and the relevant authority where the law requires it.
16. Changes to this policy
We may update this policy when our services or the law change. We will show the date of the latest version at the top. If a change is material, for example to how we use account or email data, we will notify account holders by email or on the site before it takes effect.
17. Contact
Vinna Global FZ-LLC, licensed by the Ras Al Khaimah Economic Zone (RAKEZ), United Arab Emirates.
Email: hello@fynds.ae