Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Findify is a Swedish AI powered search and personalization platform for online stores, providing smart search, autocomplete, filtering, and product recommendations. To personalise results it tracks shopper behaviour such as searches, clicks, and purchases and assigns a visitor identifier through cookies. Because this behavioural profiling uses non essential cookies, it requires prior consent under the GDPR and the ePrivacy Directive, even though Findify is operated from the European Union.
Findify is an e commerce search and personalization platform operated by Findify AB in Sweden. Online retailers add its JavaScript to power search, autocomplete, smart collections, and product recommendations that adapt to each shopper. To do this, Findify loads in the visitor browser and observes how people search and browse, storing a visitor identifier in cookies.
Findify collects search queries, clicks, products viewed and purchased, cart actions, and technical data such as device, browser, and IP address. It assigns a persistent visitor identifier so it can build a behavioural profile and personalise results across a session and return visits. When you pass customer or order data for analytics, that is also processed.
The personalization that makes Findify useful relies on behavioural profiling with non essential cookies, so the ePrivacy Directive requires prior consent and the GDPR requires a lawful basis and transparency. Profiling that influences what each shopper sees should be explained clearly to users. Findify acts as your processor, so a data processing agreement is required.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Obtain prior, opt in consent before Findify sets its personalization cookies and starts profiling, and make consent specific and easy to withdraw. You can still offer non personalised search to visitors who decline, which keeps the core function available without tracking. Block the personalization scripts behind your consent banner.
Findify AB is based in Sweden, within the European Union, so core processing can remain in the EU and many deployments avoid a third country transfer. You should still confirm where Findify hosts data and whether any subprocessors operate outside the EU, and apply Standard Contractual Clauses and a transfer impact assessment if they do. Document the data locations in your records of processing.
To use Findify compliantly, gate its personalization cookies behind consent, offer non personalised search as a fallback, and sign a data processing agreement. Confirm the hosting region, minimise the customer data you share, and set retention limits for behavioural profiles. List Findify in your cookie policy and privacy notice and review its subprocessors periodically.
Websites using Findify must obtain user consent under GDPR regulations.
DPIA considerations
Findify builds behavioural profiles of shoppers to personalise search and recommendations, which is profiling under the GDPR and raises its risk profile. Key DPIA points: (1) persistent visitor identifiers and behavioural profiling that influence what each user sees; (2) collection of search, browsing, and purchase data that can reveal preferences and interests; (3) non essential cookies that require consent before profiling begins; (4) the hosting region and any subprocessors outside the EU, which would trigger transfer safeguards; (5) the need for a data processing agreement, retention limits, and a non personalised fallback. A DPIA is advisable for large catalogues or detailed personalisation.
Sample consent text
We use Findify to power search and personalised product recommendations. With your consent, Findify sets cookies and records your searches, clicks, and purchases to tailor results to you. Findify is operated from the European Union and acts as our processor. You can withdraw your consent at any time via our cookie settings, and search will still work without personalisation.
Third-party domains contacted
findify.ioapi.findify.iocdn.findify.ioCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| _findify_session | Functional | Session | Maintains the search session and keeps search state consistent during a visit. |
| _findify_token | Personalization | 1 year | Stores a persistent visitor identifier used to personalise search results and recommendations. |
| _findify_view | Personalization | 1 year | Records recently viewed products to power personalised recommendations. |
Findify collects user analytics data — you legally need a consent banner. Try FlowConsent free.
Findify sets a functional cookie to run a search session and analytics or personalization cookies that store a visitor identifier and record search and browsing behaviour. The personalization cookies are not strictly necessary and require consent. Basic, non personalised search can run with only functional cookies.
Yes for the personalization features, because they set non essential cookies and profile behaviour. Obtain prior, opt in consent before profiling begins, and consider offering non personalised search to visitors who decline so the core function still works.
Behavioural profiling and personalization rely on consent (Art. 6(1)(a)) together with the ePrivacy Directive. Strictly necessary search functionality can rely on legitimate interest, but the tracking that personalises results needs consent.
Not necessarily. Findify AB is based in Sweden, so core processing can stay in the EU. You should confirm the hosting region and whether any subprocessors are outside the EU, and apply Standard Contractual Clauses and a transfer impact assessment if they are.
A DPIA is advisable because Findify profiles shopper behaviour to personalise results. Assess the persistent identifiers, the search and purchase data collected, the hosting location, and your retention periods before deciding.
Block the personalization scripts behind your consent banner, offer non personalised search as a fallback, sign a data processing agreement, and confirm the hosting region. Minimise shared customer data, set retention limits, and document Findify in your cookie policy and privacy notice.
Yes. Self hosted search engines such as Typesense or Meilisearch, or EU hosted search services, can provide search with less behavioural profiling. They reduce cookies and tracking, though advanced personalisation may require more configuration.
Add a Findify entry listing its functional and personalization cookies, their purposes and durations, the fact that it profiles search behaviour, and where the data is hosted. Link to Findify''s privacy notice and review the entry when its cookies or subprocessors change.