Privacy Policy

Opening is a UK business-to-business service. We read the Food Standards Agency’s public food hygiene register every 10 minutes, identify food businesses that have newly registered with their local council, and deliver those as sales leads to suppliers through a web dashboard and an email digest. For data protection purposes, Opening is the controller of the personal data described below.

• Your name, email address, company name and business segment(s).
• Optional phone number and website.
• Companies House details for your company (number, status, incorporation date, registered address) if you choose to link one when you sign up or edit your profile.
• Your council/territory preferences and email digest settings.
• Lead status and notes you record against businesses in your feed.
• Feedback wall posts and comments. These are structurally anonymous: the database grants make the author column unreadable to every client, including us, so we cannot tell who wrote a post or comment.
• Payment details are handled entirely by Stripe. Opening never receives or stores card numbers; we store only your subscription plan and status.

We use this to give you access, scope your feed to the councils you care about, send the digests you asked for, take payment, and provide support.

Records about food businesses come entirely from two official public sources: the Food Standards Agency’s food hygiene register (Crown copyright, openly licensed) and, where a match is linked, the Companies House public register. Nothing is scraped from private sources, and we do not buy contact lists.

Where those records contain personal data (for example a sole trader whose business name is their own name), we process it under UK GDPR Article 6(1)(f), legitimate interests: identifying newly registered food businesses so that our subscribers, who are their prospective suppliers, can approach them for ordinary business-to-business purposes. We have weighed this against the interests of those businesses; the data is already published by an official body, and the use is limited to B2B contact.

If you are a business that appears in our feed and you object to that processing, you can ask us to remove you and we will suppress your record. Write to hello@openingdirect.com.

Opening sets only essential cookies and local storage needed to keep you signed in and to keep your session secure. There is no advertising tracking, no third-party ad cookies, and no analytics or behavioural tracking product wired into the site.

• Supabase (Postgres database and authentication), with row-level security applied.
• Stripe, for subscriptions and payments.
• Resend, for transactional and digest email delivery.

We do not sell personal data, and we do not share your account information with other subscribers.

Account data is held in a Postgres database with row-level security policies so that each account can only read its own rows; access is over encrypted connections. We keep your account data for as long as your account exists. Register data from the FSA is kept as a rolling record so we can tell what is genuinely new. Records we are required to keep for tax or accounting purposes (invoices held by Stripe) are retained for the statutory period.

You can access and correct your details at any time from your profile page. Deletion is self-service: the “Delete account” action on that page removes your profile, preferences, lead notes and account immediately, and cancels any active subscription. You also have the right to object to processing, to request a copy of your data, and to complain to the Information Commissioner’s Office.

Questions about any of this: hello@openingdirect.com.