Privacy Policy

1. Introduction

SearchFundMarket (“we”, “our”, or “us”), published by Radif Partners, operates the searchfundmarket.com website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

2. Data Controller

• Controller: Radif Partners
• Website: searchfundmarket.com
• Email: contact@searchfundmarket.com

The data controller is the person who determines the purposes and means of the processing of personal data. Given the nature of the platform and the scale of processing, the appointment of a Data Protection Officer (DPO) is not currently legally required under Article 37 of the GDPR. For data protection enquiries, please contact the controller using the details above.

3. Information We Collect

Reading the ETA guides, running the deal calculators, downloading templates and browsing the directory need no account. While you browse, audience is measured with Google Analytics (see section 7). Beyond that, we only hold information you choose to give us when you create an account, publish a listing or write to us:

• Account information: name, email address, role (searcher, investor, or seller), and profile details.
• Listing data: business information including financials, sector, country, and description.
• Communications: messages sent through the platform, inquiries, and connection requests.
• Stability data: an anonymous, technical measurement of how pages behave (errors, loading times, clicks that do nothing, scrolling), taken with Microsoft Clarity running without cookies, with page content and form fields masked. It is not linked to your account or to your other page views.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health data, or data concerning sexual orientation.

4. How We Use Your Information

• To provide, maintain, and improve our platform.
• To facilitate connections between searchers, investors, and sellers.
• To send you service-related emails (account verification, notifications, inquiries).
• To detect and prevent fraud or abuse.
• To comply with legal obligations.
• To check, anonymously, that pages, calculators and forms work (stability measurement).

5. Legal Basis for Processing

Data processing is based on the following legal bases under Article 6 of the GDPR:

• Contractual necessity(Art. 6(1)(b)) — for account creation, listing management, and facilitating connections between users.
• Legitimate interest(Art. 6(1)(f)) — for fraud prevention, platform security, and the anonymous stability measurement described in section 7.
• Legal obligation(Art. 6(1)(c)) — for compliance with applicable laws and regulations.

6. Information Sharing

We do not sell your personal data. We may share information in the following circumstances:

• Profile visibility: your public profile (name, role, bio, and professional details) is visible to other registered users.
• Service providers: we use third-party services for email delivery, hosting and the stability measurement. These providers process data on our behalf under strict contractual obligations.
• Legal requirements: we may disclose information if required by law or in response to valid legal requests.

7. Cookies

Audience measurement with Google Analytics. The site uses Google Analytics 4 to count visits and see which pages are useful: pages viewed, referring page, visit length, device and browser type, approximate country and city. To do so Google Analytics sets two cookies on your device: _ga, which tells visitors apart with a random identifier, and _ga_G76GPGKS5K, which keeps the state of the visit. Their lifetime is set to 13 months at most (390 days) and is not extended on each visit; Google's default is 2 years.

The IP address is anonymised: Google Analytics 4 neither logs nor stores it, and only uses it at collection time to derive an approximate country and city. The page address sent to Google Analytics is stripped of its parameters. The site shows no advertising: ad storage, ad user data, ad personalisation and Google signals are switched off, and measurement data is shared with no advertiser. Purpose: audience measurement. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as processor under Article 28 GDPR. Data may be transferred to Google LLC in the United States under the EU–U.S. Data Privacy Framework and the European Commission's standard contractual clauses. Retention at Google: 14 months for visit-level and identifier-level data, then deletion; only anonymous totals remain.

To object without writing to us: block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on. The site works the same way. There is no advertising cookie and no social media cookie, and no banner.

Microsoft Clarity runs in its cookie-free mode, so none of its cookies (_clck, _clsk, MUID, CLID) is ever written.

Other cookies appear only if you decide to sign in to an account. The sign-in system (NextAuth) then sets the strictly necessary cookies that make it work: a protection token against forged requests, the page to return to after the email link, and the session token that keeps you signed in. They carry no advertising or tracking identifier, are never shared, and disappear when you sign out or when the session expires.

Stability measurement. To spot broken pages, a calculator that fails or a form that does not submit, we use Microsoft Clarity without cookies. Each page view receives its own identifier, so two pages of the same visit are never linked, and the whole page content, including listings, messages and every field you fill in, is masked by the code before anything leaves your browser. The data is processed by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; recordings are kept for 30 days and aggregated statistics for 13 months. Legal basis: our legitimate interest in keeping the platform working (Art. 6(1)(f) GDPR). To opt out, block the domain clarity.ms in your browser or write to us. We use no other measurement tool than Google Analytics and Clarity, and no advertising.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS/HTTPS), secure authentication, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time by contacting us. Upon account deletion, your personal data will be removed within 30 days, except where retention is required by law. Google Analytics data is kept for 14 months. Stability measurements are kept for 30 days (recordings) and 13 months (aggregated statistics), with no link to any account. Server log files are automatically deleted after 30 days.

10. Your Rights Under GDPR (EU Users)

If you are located in the European Economic Area, you have the following rights under the GDPR:

• Right of access (Art. 15) — obtain confirmation of whether personal data is being processed and access to that data.
• Right to rectification (Art. 16) — obtain correction of inaccurate data.
• Right to erasure (Art. 17) — obtain deletion of personal data (“right to be forgotten”).
• Right to restriction (Art. 18) — restrict processing in certain cases.
• Right to data portability (Art. 20) — receive data in a structured, commonly used, and machine-readable format.
• Right to object (Art. 21) — object to processing on grounds relating to your particular situation.
• Right to lodge a complaint(Art. 77) — lodge a complaint with a supervisory authority, in France the CNIL (3 place de Fontenoy, 75007 Paris, cnil.fr), or the authority of your own country.

To exercise any of these rights, please reach out via our contact page or email us at contact@searchfundmarket.com. We undertake to respond within 30 days.

11. Data Transfer Outside the EU

Our hosting provider (Vercel) is based in the United States; Google, which runs Google Analytics from Ireland, may transfer data to Google LLC there, and Microsoft, which runs the stability measurement from Ireland, may process data there too. Data transfers to these providers are governed by EU standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework, ensuring compliance with GDPR data protection standards.

12. Third-Party Services

This website is hosted on Vercel. Vercel may collect minimal technical data as part of their edge network service. See Vercel’s privacy policy.

We do not integrate social media buttons, advertising widgets, remarketing services, or any other tool that would let a third party profile visitors.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the platform or sending you an email. The current version is always available on this page with an updated revision date.

14. Contact

If you have questions about this Privacy Policy, please contact Radif Partners at contact@searchfundmarket.com or via our contact page.