Privacy Policy
At Open Org, we believe privacy should be simple, respectful, and transparent. This page explains what data we collect via openorg.fyi, why we collect it, and what we do with it.
1. Who we are
We are Open Org Group Ltd, acompany incorporated and registered in England and Wales.
Company Number: 15030370
Email: hello@openorg.fyi
Website: www.openorg.fyi
2. What data we collect and why
Analytics
We use two analytics tools tounderstand how people use our website:
• Google Analytics 4 (GA4): collects anonymised usage data including pages visited, time on site, and approximate location. GA4 uses cookies. You can opt out using the cookie controls on our site.
• Simple Analytics: a privacy-first analytics tool thatdoes not use cookies or collect personal data. It processes only aggregated, anonymous traffic data.
Advertising pixels
We run advertising on LinkedIn, Meta (Facebook/Instagram), and Google. These platforms may set tracking pixels on our site to measure the effectiveness of our ads and to show you relevant adverts elsewhere online. This processing is conditional on your consent, which we ask for via our cookie banner.
Email marketing
If you sign up to hear from us,we use Mailchimp and Loops to manage our mailing list and send you updates about OpenOrg. You can unsubscribe at any time using the link in any email we send.
We do not share your email address with third parties for their own marketing purposes.
Contact enquiries
If you email us athello@openorg.fyi, we will receive your email address and whatever you include in your message. We will only use this to reply or help with your request. We do not share this with anyone outside Open Org, and we will not add you to a mailing list without asking.
Events (via Luma)
Open Org runs regular virtual and in-person events. We use Luma as our event registration platform. When you register for an event, Luma collects personal data on our behalf, including your name, email address, and any other information you provide at sign-up.
We use your data to:
• Send you confirmation emails, reminders, and joining details for the event you have registered for
• Follow up after the event with related resources, upcoming events, or services relevant to your role
• Manage our event mailing list via the Luma platform
Some events are co-hosted or sponsored by third parties. Where this is the case, we will share your registration details (name, email address, and job information) with those co-hosts and sponsors for the purpose of administering the event and providing relevant follow-up communications. We disclose this in the event description and ask for your consent at the point of registration via a checkbox. Each co-host orsponsor is a separate data controller and processes your data in accordance with their own privacy policy, a link to which will be provided in the event description.
We process your event registration data on the basis of your consent, given at the point of sign-up. Where we send follow-up communications after an event, we rely on our legitimate interest in keeping attendees informed of related content, events,and services. You can opt out at any time using the unsubscribe link in any email we send.
3. Third-party processors
We use the following third-partyservices to operate this website and our communications. Each acts as a data processor on our behalf:
• Google Analytics: website analytics
• Simple Analytics: privacy-first analytics
• Mailchimp: email marketing
• Loops: email automation
• LinkedIn, Meta, Google: advertising platforms
• Luma: event registration and management
4. International transfers
Our website infrastructure is hosted within the EU. Some of our third-party processors (including Google,Meta, LinkedIn, and Mailchimp) are US-based and may transfer data outside theUK/EU. Where this occurs, we rely on the UK International Data TransferAgreements (UK IDTA) or equivalent Standard Contractual Clauses to ensure your data remains protected.
5. How long we keep your data
• Contact enquiries: we retain these for as long asnecessary to respond to your enquiry and for a reasonable period afterwards.
• Email marketing: we retain your details until you unsubscribe or ask us to remove you.
• Event registrations: we retain your details for as long as you remain subscribed to event communications, or until you ask us to remove you. Luma may retain data in accordance with their own retention policy, available at lu.ma/privacy.
• Analytics data: retained in line with the default retention periods of our analytics providers.
6. Data security
We take reasonable steps toprotect any data you choose to share with us. We use secure systems, strong passwords, and limited access controls.
7. Your rights
Under UK GDPR, you have theright to:
• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict how we process your data
• Data portability
• Withdraw consent at any time (where processing is basedon consent)
To exercise any of these rights, email us at hello@openorg.fyi. We will respond within one month, but typically do so within 3 days.
8. Complaints
If you are unhappy with how we handle your data, you have the right to complain to the InformationCommissioner's Office (ICO): ico.org.uk/make-a-complaint
We would appreciate the chance to address your concerns first, so please do contact us before escalating.
9. Changes to this policy
We will update this page if anything changes. If it is a significant change, we will let you know.
