Privacy Policy

Who we are

Founder Department (founderdepartment.com) is operated by Springwater, UAB (“SpringWater”, “we”, “us”), a company registered in Lithuania. We are the data controller for the personal data described in this policy.

• Company code: 307996105
• VAT number: LT100020661719
• Registered office: Švitrigailos g. 34, LT-03230 Vilnius, Lithuania
• Contact: hi@founderdepartment.com

This section also serves as the site’s legal notice.

What we collect, and why

Your email address

When you ask to see the full deal data, you enter your email address and we send you a confirmation link. Your email is only stored once you click that link. We store it together with which listing you unlocked from and the date and time. We keep this information so that we can contact you about Founder Department — for example with updates about the project, a future newsletter, or other relevant messages. We do not use it for automated decision-making or profiling.

Legal basis: your consent (Article 6(1)(a) GDPR), which you give by confirming the link. You can withdraw it at any time (see “Your rights” below).

Your IP address

When you submit the form, we read your IP address to limit how often the form can be used from one place (a few submissions per ten minutes), and it may appear in our server’s standard access logs. It is used only to keep the site available and to prevent abuse. It is not stored alongside your email and is not used to identify or track you.

Legal basis: our legitimate interests (Article 6(1)(f) GDPR) in protecting the site.

Cookies

After you confirm your email we set a single cookie, deals_unlocked, so that you do not have to enter your email again on that device. It lasts one year, contains no personal data, and is not used for analytics or advertising. We use no other cookies and no analytics, advertising, or tracking tools on this site.

Who we share it with

We do not sell your personal data and we do not share it with anyone for their own marketing. We do use a small number of service providers who process data on our instructions:

• Google (Google Ireland Limited / Google LLC) — the confirmed email list is stored in Google Sheets. Google may process data on servers outside the European Economic Area; those transfers are covered by Google’s data processing terms and the European Commission’s Standard Contractual Clauses.
• Hostinger (Hostinger International Ltd) — provides our website hosting and sends the confirmation emails on our behalf.

We may also disclose personal data if required to do so by law.

How long we keep it

We keep your email address and the associated details until you withdraw your consent or ask us to remove you, after which we delete them without undue delay. We also review the list from time to time and remove entries we no longer have a reason to keep. If Founder Department is discontinued, the list is deleted.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to our processing;
• receive your data in a portable format;
• withdraw your consent at any time — this does not affect processing we carried out before you withdrew it.

To exercise any of these, email hi@founderdepartment.com. You also have the right to lodge a complaint with a data protection authority — in Lithuania this is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt), or the authority in your country of residence.

Security

The site is served over HTTPS. Access to the email list is limited to the people who operate Founder Department. No method of transmission or storage is completely secure, but we take reasonable steps to protect the data we hold.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it last changed. Significant changes will be reflected here before they take effect.