Privacy Policy

Last updated: 27 August 2026

Found in Character respects the privacy of visitors, prospective clients and clients and is committed to handling personal information responsibly and transparently.

This Privacy Policy explains what personal information may be collected through this website, why it is used, how long it may be retained, the service providers involved and the rights available to you.

1. Who is responsible for your information

This website is operated by Found in Character, a founder-led hospitality brand narrative and guest-journey studio founded and led by Harry Michael.

For the purposes of applicable data-protection law, the person or legal entity operating Found in Character is the data controller for personal information collected directly through this website and through studio enquiries.

Contact: [PROFESSIONAL EMAIL TO BE ADDED BEFORE LAUNCH]
Location: Cyprus

If the legal structure or registered business details of Found in Character change, this policy will be updated accordingly.

2. Information we collect

Information you provide through the enquiry form

When you submit an enquiry, we may collect:

  • Your full name

  • Professional role

  • Work email address

  • Property or business name

  • Property website

  • Property location

  • Property type

  • Approximate number of rooms, suites or villas

  • The service you are considering

  • Project priorities

  • Information you provide about your current situation or requirements

  • Important dates or project timing

  • Information about who is responsible for implementation

  • Your role in the decision-making process

  • Preferred discussion language

  • How you heard about Found in Character, where provided voluntarily

The enquiry form does not request passwords, payment-card information, analytics credentials, file uploads or identifiable guest information.

Information collected automatically

When you visit this website, certain technical information may be processed automatically through Squarespace and any analytics tools enabled on the website. This may include:

  • Browser, device and network information

  • IP address

  • Pages viewed

  • Referring pages or websites

  • Dates and times of visits

  • Interactions with pages, buttons and links

  • Cookie and consent preferences

The information actually collected will depend on the website settings and the consent choices available to you.

Information collected during a client relationship

If an enquiry develops into a client engagement, additional business and project information may be collected as necessary to prepare proposals, enter into an agreement, issue invoices, provide the agreed services and manage the client relationship.

Project-specific collection and access requirements will be explained separately where relevant.

3. Why we use your information

We may process personal information for the following purposes:

Responding to enquiries and taking steps before a contract

Information submitted through the enquiry form is used to:

  • Review your enquiry

  • Assess whether the studio and requested service are a suitable fit

  • Recommend an appropriate service or next step

  • Respond to questions

  • Arrange relevant discussions

  • Prepare a proposal or scope where appropriate

Where you are considering engaging Found in Character, this processing may be necessary in order to take steps at your request before entering into a contract.

Providing contracted services

If you become a client, information may be processed where necessary to:

  • Administer the engagement

  • Communicate about the project

  • Deliver the agreed services

  • Manage approvals and project responsibilities

  • Issue and maintain invoices and payment records

  • Meet contractual obligations

Operating and protecting the website and business

Certain information may be processed where necessary for legitimate business interests, including:

  • Maintaining the security and functionality of the website

  • Preventing misuse or fraud

  • Maintaining appropriate business records

  • Understanding how the website is being used

  • Improving the clarity and usability of the website and enquiry journey

  • Establishing, exercising or defending legal claims

Where legitimate interests are relied upon, they are considered against the rights and interests of the individuals concerned.

Meeting legal obligations

Information may also be retained or processed where required to comply with applicable legal, accounting, tax or regulatory obligations.

Marketing

Submitting an enquiry does not automatically subscribe you to marketing communications.

Found in Character will not add enquiry contacts to a marketing mailing list solely because they submitted an enquiry.

If marketing communications are introduced in the future, any required consent or other appropriate legal basis will be addressed separately.

4. Cookies and analytics

This website is hosted by Squarespace.

Squarespace uses certain necessary technologies to operate and securely deliver websites. Depending on the configuration of this website, analytics and performance cookies may also be used to understand website traffic and visitor activity.

Non-essential analytics or performance technologies will be managed through the website's cookie-consent controls where required.

Visitors can use the available cookie controls to accept, decline or adjust non-essential cookies.

The website may collect aggregated information such as page visits, traffic sources and interactions in order to understand how the site is used. This information is used for website operation and improvement rather than to make automated decisions about individual visitors.

If additional analytics, advertising or tracking technologies are introduced in the future, this policy and the website's consent mechanism will be updated before those technologies are used where required.

5. Service providers and sharing

Personal information is not sold.

Information may be processed by service providers where this is reasonably necessary to operate the website, communicate with prospective clients, administer engagements or meet legal and financial obligations.

These providers may include:

  • Squarespace — website hosting, website functionality, forms and website analytics where enabled

  • Email provider — business email and correspondence [PROVIDER TO BE CONFIRMED]

  • Payment or invoicing provider — invoicing and payment administration where applicable [PROVIDER TO BE CONFIRMED]

  • Professional advisers such as accountants, legal advisers or other advisers where reasonably necessary

  • Relevant authorities where disclosure is legally required

Where an external specialist becomes involved in a client project, information will only be shared where appropriate to the engagement and in accordance with the applicable contractual and confidentiality arrangements.

Found in Character does not represent independent specialists as employees of the studio where they are not employees.

6. International transfers

Some technology providers used to operate this website or business may process information outside Cyprus or the European Economic Area.

Where personal information is transferred outside the European Economic Area, appropriate safeguards required under applicable data-protection law will be relied upon where necessary, such as an applicable adequacy decision or approved contractual safeguards.

Further information about relevant safeguards can be requested using the contact details in this policy.

7. How long information is kept

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, including applicable legal, accounting and contractual requirements.

As a working retention standard:

  • Enquiries that do not become clients: normally retained for up to 24 months after the last meaningful contact, unless there is a legitimate reason to retain them for longer or deletion is requested earlier where applicable.

  • Client and project correspondence: normally retained for the duration of the engagement and for up to 6 years afterwards where reasonably necessary for contractual, legal or business-record purposes.

  • Invoices and accounting records: retained for the period required by applicable tax and accounting law.

  • Analytics information: retained according to the settings and retention periods of the relevant analytics provider and website configuration.

Information may be retained for longer where necessary to establish, exercise or defend a legal claim or where required by law.

When information is no longer required, it will be deleted, anonymised or securely disposed of where reasonably practicable.

8. Your data-protection rights

Subject to applicable law and the circumstances of the processing, you may have the right to:

  • Request access to personal information held about you

  • Request correction of inaccurate or incomplete information

  • Request deletion of your personal information

  • Request restriction of certain processing

  • Object to processing based on legitimate interests

  • Receive certain information in a portable format

  • Withdraw consent where processing is based on consent

Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.

Some rights are subject to legal conditions and exceptions, and Found in Character may need to verify your identity before fulfilling a request.

To exercise a data-protection right, contact:

[PROFESSIONAL EMAIL TO BE ADDED BEFORE LAUNCH]

9. Complaints

If you have concerns about how your personal information is handled, please contact Found in Character first so that the matter can be addressed.

You also have the right to lodge a complaint with the competent data-protection supervisory authority.

For individuals in Cyprus, the supervisory authority is the Office of the Commissioner for Personal Data Protection.

10. Security

Reasonable organisational and technical measures are used to protect personal information from unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Visitors should not submit passwords, payment-card information, identity documents or unnecessary sensitive personal information through the website enquiry form.

11. Third-party websites

This website may contain links to third-party websites, including hotel websites, portfolio references or external service providers.

Found in Character is not responsible for the privacy practices or content of third-party websites. Visitors should review the applicable privacy information provided by those organisations.

12. Changes to this policy

This Privacy Policy may be updated when the website, studio's services, technology providers, legal structure or applicable requirements change.

The current version will be published on this page, and the Last updated date will be revised when material changes are made.

Where a change materially affects information already provided directly to Found in Character, additional notice will be given where required.