Privacy Policy

Last updated: June 2026

1. Introduction

SearchFundMarket (“we”, “our”, or “us”), published by Mottalib Radif, operates the searchfundmarket.com website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

2. Data Controller

The data controller is the person who determines the purposes and means of the processing of personal data. Given the nature of the platform and the scale of processing, the appointment of a Data Protection Officer (DPO) is not currently legally required under Article 37 of the GDPR. For data protection enquiries, please contact the controller using the details above.

3. Information We Collect

We collect information you provide directly when creating an account or using our services:

  • Account information: name, email address, role (searcher, investor, or seller), and profile details.
  • Listing data: business information including financials, sector, country, and description.
  • Communications: messages sent through the platform, inquiries, and connection requests.
  • Usage data: pages viewed, features used, and technical information such as browser type and IP address.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health data, or data concerning sexual orientation.

4. How We Use Your Information

  • To provide, maintain, and improve our platform.
  • To facilitate connections between searchers, investors, and sellers.
  • To send you service-related emails (account verification, notifications, inquiries).
  • To detect and prevent fraud or abuse.
  • To comply with legal obligations.
  • To produce aggregate, anonymous usage statistics.

5. Legal Basis for Processing

Data processing is based on the following legal bases under Article 6 of the GDPR:

  • Contractual necessity(Art. 6(1)(b)) — for account creation, listing management, and facilitating connections between users.
  • Consent(Art. 6(1)(a)) — for analytics cookies, collected via the cookie consent banner.
  • Legitimate interest(Art. 6(1)(f)) — for fraud prevention, platform security, and anonymous browsing analysis.
  • Legal obligation(Art. 6(1)(c)) — for compliance with applicable laws and regulations.

6. Information Sharing

We do not sell your personal data. We may share information in the following circumstances:

  • Profile visibility: your public profile (name, role, bio, and professional details) is visible to other registered users.
  • Service providers: we use third-party services for email delivery, hosting, and analytics. These providers process data on our behalf under strict contractual obligations.
  • Legal requirements: we may disclose information if required by law or in response to valid legal requests.

7. Cookies

We use the following types of cookies:

  • Essential cookies: required to keep you signed in and to ensure the platform functions correctly. These cannot be disabled.
  • Analytics cookies: we use Google Analytics 4 to understand how visitors interact with our platform (pages visited, session duration, general location). Google Analytics uses cookies such as _ga and _ga_*. This data is aggregated and anonymous.

When you first visit our site, a cookie consent banner lets you choose which cookies to accept. You can change your preference at any time by clearing your browser’s local storage for this site. Analytics cookies are only loaded after you give explicit consent. We do not use advertising or tracking cookies.

User preferences (such as theme settings and consent choices) may be stored in your browser’s localStorage, which is not a cookie and is never transmitted to our servers. You can clear localStorage data at any time through your browser settings.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS/HTTPS), secure authentication, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time by contacting us. Upon account deletion, your personal data will be removed within 30 days, except where retention is required by law. Analytics cookies are retained for a maximum of 13 months. Server log files are automatically deleted after 30 days.

10. Your Rights Under GDPR (EU Users)

If you are located in the European Economic Area, you have the following rights under the GDPR:

  • Right of access (Art. 15) — obtain confirmation of whether personal data is being processed and access to that data.
  • Right to rectification (Art. 16) — obtain correction of inaccurate data.
  • Right to erasure (Art. 17) — obtain deletion of personal data (“right to be forgotten”).
  • Right to restriction (Art. 18) — restrict processing in certain cases.
  • Right to data portability (Art. 20) — receive data in a structured, commonly used, and machine-readable format.
  • Right to object (Art. 21) — object to processing on grounds relating to your particular situation.
  • Right to withdraw consent(Art. 7) — withdraw consent at any time where processing is based on consent.
  • Right to lodge a complaint(Art. 77) — lodge a complaint with a supervisory authority.

To exercise any of these rights, please reach out via our contact page or email us at contact@searchfundmarket.com. We undertake to respond within 30 days.

11. Data Transfer Outside the EU

Our hosting provider (Vercel) and analytics provider (Google) are based in the United States. Data transfers to these providers are governed by EU standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework, ensuring compliance with GDPR data protection standards.

12. Third-Party Services

This website is hosted on Vercel. Vercel may collect minimal technical data as part of their edge network service. See Vercel’s privacy policy.

We do not integrate social media buttons, advertising widgets, remarketing services, or other tools that allow third parties to profile users beyond the analytics described above.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the platform or sending you an email. The current version is always available on this page with an updated revision date.

14. Contact

If you have questions about this Privacy Policy, please contact Mottalib Radif at contact@searchfundmarket.com or via our contact page.