Privacy Policy

This policy explains how Open On Limited (“OpenOn”, “we”, “us”) collects and uses personal data when you visit weopenon.co or contact us through it. We keep what we collect to a minimum and use it only for the purposes described here.

Who we are

Open On Limited is the data controller for personal data collected through this website. We are a company registered in England and Wales (company number 17207118), with our registered office at 1 Brookmans Avenue, Brookmans Park, Hatfield, Hertfordshire, AL9 7QH, United Kingdom. We are registered with the Information Commissioner’s Office (registration number ZC261057).

For any question about this policy or your data, contact us at [email protected].

What we collect

Enquiry form. If you submit our new business form, we collect the details you provide, such as your name, company, email address and message. The form is delivered to our partner inbox, where the OpenOn partners can read it.

Analytics. If you consent, we use Google Analytics to understand how the site is used. This covers pages visited, time on site, approximate location (country or city level), device and browser type, and how you arrived. This data is aggregated and used to improve the site. We do not use it to identify you.

Technical and security data. Our hosting and security providers process your IP address and basic request data as part of delivering the site and protecting it from abuse. This happens automatically and is not used to profile you.

Why we use it, and our lawful basis

• We use your enquiry form details to respond to your enquiry and any follow-up discussion. Our lawful basis is legitimate interests: replying to business enquiries, and taking steps at your request before entering a contract.
• We use analytics data to understand and improve how the site is used. Our lawful basis is your consent.
• We use your IP address and request data to deliver the site securely and prevent abuse. Our lawful basis is legitimate interests: keeping the site available and secure.
• We do not sell your personal data, use it for automated decision-making, or add it to marketing lists without your permission.

Cookies

We use cookies and similar storage that are strictly necessary to run and secure the site. We use analytics cookies only if you accept them through our cookie banner. You can change your choice at any time via Cookie settings in the site footer.

Necessary

• cookie-consent is stored in your browser’s local storage by OpenOn and remembers your cookie choice. It is kept until you change your choice or clear your browser’s site data.
• hero_intro_seen is set by OpenOn and remembers that the homepage intro animation has already played, so it is not shown again. It lasts 1 year.
• __cf_bm and cf_clearance are set by Cloudflare to distinguish people from bots and protect the site. They last between 30 minutes and 1 year.

Analytics (set only with your consent)

• _ga and _ga_ followed by an identifier are set by Google Analytics to distinguish visitors and sessions. They last up to 2 years.

Who we share it with

We use a small number of service providers to run the site and our business. They process data on our behalf and only under our instructions:

• DigitalOcean hosts the website.
• Cloudflare provides content delivery and security.
• Sanity manages our website content.
• Resend delivers enquiry form submissions to our inbox.
• Google Workspace hosts our email, including the inbox where enquiries are received.
• Google Analytics measures site usage, with your consent.

We may also disclose data where required by law, or in connection with a sale, merger or restructuring of our business. In that case, your data would remain protected under terms at least as strong as this policy.

International transfers

OpenOn’s partners work across the UK, the EU and the US, and some of our service providers are based in the US. Where personal data leaves the UK, we rely on one of the following safeguards:

• The EU: UK adequacy regulations.
• US recipients certified under the UK Extension to the EU–US Data Privacy Framework: the UK–US Data Bridge.
• Other recipients: the ICO’s International Data Transfer Agreement or Addendum.

How long we keep it

Enquiries are kept for up to two years after our last contact with you. If an enquiry leads to a working relationship, we keep the relevant records for as long as the relationship and our legal obligations require.

Analytics data is retained for 14 months.

Security and delivery logs are held by our providers for short periods, in line with their own retention policies.

Your rights

Under UK data protection law, you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• have your data erased
• restrict or object to our processing
• receive your data in a portable format
• withdraw consent at any time, where we rely on it

To exercise any of these rights, email [email protected]. We will respond within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to resolve it with you first.

Visitors in the United States

We collect only the categories of personal information described above, from the sources described above, and share them only with the service providers listed. We do not sell or share personal information for cross-context behavioural advertising.

California residents can request details of the personal information we hold about them by contacting [email protected].

Do Not Track

Our site does not respond to Do Not Track browser signals. Analytics cookies are set only if you actively consent through our cookie banner.

Children

This website is intended for businesses. It is not directed at anyone under 18, and we do not knowingly collect their data.

Changes to this policy

We may update this policy as our website or services change. The date at the top shows when it was last revised.