Who We Are

AF&U is operated by FindFetch, based in Lebanon. We do business as AF&U in France. For GDPR purposes, FindFetch acts as the data controller for any personal data we collect from you. Contact us at: info@afandu.com

What We Collect

Information you provide: When you contact us or use our chatbot, we collect your name, email address, company name, and any messages you send (typos and existential crises included).

Automatic data collection: When you visit our site, we may collect technical information like your IP address, browser type, device information, pages visited, and how you interact with our site — but only if you consent to non-essential cookies.

How We Use Your Data

We use your information to:

• Respond to your inquiries and provide our services (legal basis: contract performance or legitimate interest)
• Improve our website and understand what's working (legal basis: consent for analytics cookies)
• Send marketing communications if you've opted in (legal basis: consent)
• Comply with legal obligations (legal basis: legal requirement)

We don't sell, lease, or let your data go clubbing without supervision.

Cookies & Tracking Technologies

We use cookies and similar technologies. Here's the breakdown:

Essential cookies: Required for the site to function. These run automatically and can't be disabled.
Analytics cookies: Help us understand site performance (we may use Google Analytics). Requires your consent.
Marketing/Advertising cookies: Used for Meta Pixel and other ad tracking when running campaigns. Requires your consent.

You can manage your cookie preferences via the banner that appears when you first visit, or contact us to update your choices.

Third-Party Services & Data Sharing

We work with third-party service providers who may process your data:

• Squarespace: Our website host (tracks anonymous activity for analytics/security) — their privacy policy
• Meta (Facebook/Instagram): When we run ads targeting you, Meta Pixel may collect your browsing behavior if you've consented to marketing cookies
• Google Analytics: For website analytics, if you consent
• n8n (Hostinger): Powers our chatbot functionality

We only share data necessary for these services to function, and we ensure they have appropriate safeguards in place.

International Data Transfers

Since we're based in Lebanon and you may be in the EU/EEA, your data may be transferred outside the European Economic Area. When this happens, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the EU Commission
• Relying on service providers with adequate data protection frameworks
• Ensuring third parties (like Meta, Google) use approved transfer mechanisms

Data Retention

We keep your personal data only as long as necessary:

• Contact form / chatbot inquiries: Up to 2 years after our last interaction
• Analytics data: Typically 14-26 months (depends on settings)
• Marketing data: Until you withdraw consent or we no longer need it
• Legal obligations: As required by law

After these periods, we securely delete or anonymize your data.

Your Rights Under GDPR

If you're in the EU, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Data portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests or for marketing
• Withdraw consent: Withdraw your cookie consent at any time
• Lodge a complaint: Contact your local data protection authority if you're unhappy

To exercise any of these rights, email us at info@afandu.com. We'll erase your data cleaner than your high school blog.

Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, alteration, or destruction. However, no internet transmission is 100% secure — we do our best, but can't guarantee absolute security.

Children's Privacy

Our services are not directed at anyone under 16. We don't knowingly collect data from children. If we discover we've collected data from a child, we'll delete it immediately.

Changes to This Policy

We may update this policy occasionally. If we make significant changes, we'll notify you via email or a prominent notice on our site.