Privacy notice

Version 0.4 · Last updated:

This notice covers openteknologies.com, including our UK trades service Live in Seven at /uk/. Sections 1–9 are our company privacy notice. The final section adds detail for the free website check, the client portal and our country waitlists.

Who we are: Live in Seven is a trading name of OPENTEKNOLOGIES LTD, a company registered in England and Wales (company no. 14854940). Registered office: 53 Hugh Street, Castleford WF10 4DS.

  • We are the controller of the personal information described in this notice.
  • Contact for privacy questions: openteknologies@gmail.com · 07438 306305.
  • Information Commission (ICO) registration: we are not registered. On 2 November 2026 we recorded an exemption from the data protection fee under the Data Protection (Charges and Information) Regulations 2018, Schedule paragraph 2, and we have not paid a fee. This is not a registration number.

Who this notice covers:

  • visitors to our website
  • people who send us an enquiry or ask for a free mock-up
  • people at trade businesses we contact about our services, including businesses we make a mock-up for
  • our clients and their staff.

Who it doesn’t cover: enquiries that customers send through our clients’ websites. For those, the tradesperson is the controller and we act only as their processor. Their own privacy notice applies (see their website).

1. What we collect

a. Website visitors. Our hosting provider automatically records basic technical data, such as your IP address, browser type, the pages you request and the time of your visit, to keep the site secure and working.

b. Enquiries and mock-up requests. What you send through our form or by email:

  • your name and business name
  • your trade and town
  • your email address and phone number
  • your message
  • anything else you choose to tell us.

c. Business information from public sources (for mock-ups and contacting businesses):

  • What we collect: business name, trade, areas covered, and business phone, email and website. Where they’re publicly shown, also accreditations, opening hours, and public reviews and ratings. If you’re a sole trader or partner, some of this is personal information about you.
  • Sources: public sources such as Google Business Profile listings, Companies House and the business’s own website.
  • When we tell you: we give you this notice when we first contact you, or within one month of collecting your details at the latest.

d. Client onboarding and delivery:

  • Contact details: names, contact details and roles for you and your staff.
  • Questionnaire answers (business, legal and company details, services, areas, opening hours, accreditations and registration numbers, insurance, privacy choices).
  • Materials you send: your logo, photos (which may show people), and the reviews and testimonials you supply.
  • Account details: your GitHub username and your domain and account set-up details. We never ask for your passwords.
  • Records: messages, call notes and change requests.
  • For founding clients: your testimonial and case-study materials.

e. Billing:

  • name, business name and address, and invoices
  • payment records, payment references, and any Direct Debit mandate details.

Card payments are handled by our payment provider; we don’t see or store full card details.

f. Marketing preferences: whether you’ve agreed to, or opted out of, marketing from us, with the date and how you told us.

Do you have to give us your details? For an enquiry, we need your name and a way to contact you, or we can’t reply. To work for you as a client, we need the questionnaire, contact and billing details. Without them, we can’t provide the service or invoice you, because they’re needed for the contract and for our tax records.

2. Why we use it, and our lawful basis

Purpose Information Lawful basis (UK GDPR Art. 6)
Reply to your enquiry and make a mock-up you ask for b Steps at your request before a contract (6(1)(b))
Research trade businesses, make an unrequested mock-up, and contact businesses about our services c Legitimate interests (6(1)(f)): promoting our services to businesses that may need a website. We only use business contact details. Marketing emails follow PECR (see 2a)
Deliver the website, care plan and support d Contract (6(1)(b))
Invoicing, payments, accounts and tax records e Contract (6(1)(b)) and legal obligation (6(1)(c))
Publish founding-client testimonials and case studies d Contract (6(1)(b)) for founding clients, who agree to this in our terms. Consent (6(1)(a)) for other clients
Keep the website secure, prevent spam and misuse, keep business records a, b, d Legitimate interests (6(1)(f))
Marketing emails about our services b, c, f Consent (6(1)(a)) or legitimate interests (6(1)(f)), as PECR allows (2a)
Establish or defend legal claims all Legitimate interests (6(1)(f))

2a. Marketing rules (PECR):

  • Sole traders and some partnerships count as individuals under the electronic marketing rules. We email them only with consent, or as existing customers about similar services with a chance to opt out.
  • Companies (e.g. “Ltd”): we may email business addresses about relevant services.
  • Opting out: every marketing message includes an unsubscribe link, and you can object at any time.

No automated decisions. We don’t make decisions about you based solely on automated processing.

3. Who we share it with

We don’t sell your information. We share it only with:

  • Our processors (service providers who act on our instructions):
    • Website hosting: Netlify, Inc.
    • Website form and automatic emails: Resend
    • Our business email: Google (Gmail, openteknologies@gmail.com)
    • Code hosting (our working copies of client sites): GitHub, Inc.
    • Video calls (set-up calls and handovers): a video-call provider we will name when we book the call with you
    • Accounting and invoicing tools: our accountant and the tools we use to raise invoices (we can name these on request)
  • Payment providers: Stripe. Some act as independent controllers for their own legal duties, such as fraud and anti-money-laundering checks.
  • Professional advisers (accountant, solicitor, insurer), and HMRC or other authorities where the law requires it.
  • The public, but only for testimonials and case studies on our website, as described in section 2.

4. International transfers

Some providers may process data outside the UK, for example in the USA. Where they do, we rely on UK adequacy regulations (including the UK-US data bridge, where the provider is certified) or the UK International Data Transfer Agreement or Addendum. Contact us for a copy of the relevant safeguard.

5. How long we keep it

Information How long
Website technical logs Kept by our host (Netlify) for the period Netlify retains them
Enquiries that don’t go ahead 12 months after our last contact
Mock-ups, and the public details gathered for them, if you don’t buy Taken offline and deleted within 30 days of sending the link, or within 5 working days if you ask sooner (as in our terms, 2.2)
Prospect contact records (business researched or contacted) 12 months after our last contact, unless you become a client
“Do not contact” record Kept for as long as we market our services, so we can respect your opt-out. We keep only the minimum details needed
Client project records (questionnaire, materials, messages) For the contract, then 6 years for legal claims. Copies of your site files and any enquiry data are deleted within 30 days of our work ending (terms 10.5 and 11.2)
Invoices and accounting records 6 years after the end of the financial year they relate to, as tax law requires
Testimonials and case studies While they’re shown on our site. You can ask us to remove them at any time if they’re based on consent
Marketing consent and opt-out records Until you withdraw consent, plus the minimum needed to prove consent and honour opt-outs

6. Cookies and analytics

Our website doesn’t currently use analytics, advertising or tracking cookies, or similar technologies. Fonts are hosted on our own site, and maps are linked rather than embedded.

7. Your rights

You have the right to:

  • access your information
  • have it corrected
  • have it deleted
  • restrict how we use it
  • data portability, where it applies
  • withdraw consent at any time, where we rely on consent.

To use any of these rights, contact openteknologies@gmail.com. We’ll respond within one month.

Your right to object: you can object at any time to us using your information for our legitimate interests. This includes researching your business, making a mock-up, or contacting you. If you object to marketing, we will always stop.

8. Complaints

Complaints to us: if you think we’ve misused your information, please complain to us at openteknologies@gmail.com or using our online form at https://openteknologies.com/contact/. We’ll acknowledge your complaint within 30 days and tell you the outcome without undue delay.

Complaints to the regulator: you also have the right to complain to the UK data protection regulator, the Information Commission (formerly the Information Commissioner’s Office, ICO): https://ico.org.uk/make-a-complaint/ · 0303 123 1113.

9. Other points

  • Children: our services are for businesses. We don’t knowingly collect information from children.
  • Changes: we’ll update this notice when our practices change. The date below shows the latest version.

Last updated: 10 November 2026 · Version 0.4

10. Additional information for openteknologies.com

10a. Free website check

  • We use the Google Places API to find the business you type in, and Google PageSpeed Insights plus our own checks to test its website.
  • We store only the Google place ID and our own check results. We don’t store Google listing details (name, address, phone, reviews); we fetch them live when needed, as Google’s terms require. Results without a report request are deleted after 12 months.
  • If you ask for the report by email, we keep your name, email and consent (wording and time). Lawful basis: consent (6(1)(a)) for the report email; legitimate interests (6(1)(f)) for running the check you asked for.

10b. Client portal

  • Sign-in is by one-time email link. We keep your email, sign-in times and a hashed session record (deleted 30 days after expiry), project messages, files you upload (up to 5 MB each), invoices and payment records, and your booking declarations (the Terms version you accepted, whether you buy as a business, and the consumer early-start choice), with the time.
  • Card payments are taken by Stripe; we never see your full card details. Lawful basis: contract (6(1)(b)) and legal obligation (6(1)(c)) for billing records.
  • When you’re signed in we use one strictly necessary cookie to keep you signed in (see cookies). This is the only cookie we set ourselves; it is an exception to section 6.

10c. Forms and security

Our forms use Cloudflare Turnstile to check you’re not a bot (loaded only when you start using a form) and store a one-way hash of your IP address for rate limiting (deleted after 7 days).

10d. Other countries (South Africa, Nigeria, Ghana, Kenya)

We don’t offer services outside the UK yet, and we don’t collect personal information from these countries through this website. Their pages are information only. If we open a waitlist for a country later, we’ll update this notice first. Sign-ups would be consent-only, confirmed by email (double opt-in), and limited to launch news.

10e. Processors used or planned for this website (see also section 3)

ProviderWhat forLocation / safeguard
Netlify, Inc.Website hosting and server functionsUSA / global edge; transfers as in section 4
SupabaseDatabase and file storage (client portal, enquiries, waitlists)EU region (planned)
ResendAutomatic emails (enquiry replies, sign-in links, invoices)USA; transfers as in section 4
StripeCard payments (also an independent controller for fraud and AML checks)UK/EU/USA; Stripe transfer terms
Google (Places API, PageSpeed Insights)Website checkGlobal; Google Maps Platform terms
Cloudflare (Turnstile)Bot protection on formsGlobal; transfers as in section 4