Legal
Privacy notice
How we handle personal data, as controller and as processor.
This is demo content
SoftOpen is a fictional company created for product demonstrations. This notice is written to be plausible, not to be relied upon. Do not use it as a template for a real privacy notice.
Last updated: 4 August 2026
Who we are
SoftOpen UK Limited, trading as SoftOpen, registered in England and Wales, with its registered office at 2nd Floor, Ducie House, 37 Ducie Street, Manchester M1 2JW. For anything in this notice, contact hello@softopen.co.uk.
Two different roles
We handle personal data in two distinct capacities, and the distinction matters for your rights.
As controller, for the contact details of people at organisations we work with or are talking to — names, work email addresses, job titles, and the substance of our correspondence.
As processor, for personal data held inside platforms we deploy or operate on your behalf. That data is yours. We process it only on your documented instructions, under the data processing agreement signed at order. We do not use it for any purpose of our own, and we never use it to train anything.
What we collect as controller
- Contact details you give us through this website, by email or by phone
- Records of our correspondence and meetings with you
- Contractual and billing information for clients
- Server logs from this website, retained for 30 days
This website sets no analytics or advertising cookies. There is no tracking pixel and no third-party script. The contact form on this site is a demonstration and transmits nothing.
Why we hold it, and for how long
For enquiries and client relationships, our lawful basis is legitimate interests — responding to you and running the relationship — or performance of a contract once one exists. Where we send anything that is not a direct reply, we rely on consent, and we do not add enquirers to a marketing list.
Enquiry records are kept for two years from last contact. Client records are kept for the contract term plus seven years, which is the period our professional and tax obligations require.
Who else sees it
Our sub-processors are listed on the security page, with their purpose and region. We give 30 days’ notice before adding one that would touch customer data. We do not sell personal data, and we do not share it with anyone for their own purposes.
Where it is held
In the UK and EU. Managed hosting runs in UK South or West Europe, and customer data does not leave the selected region. We do not offer hosting in other regions.
Your rights
You have the right to access, correct, erase, restrict and object to our processing, and to data portability. Where you are a client’s customer or employee and the data sits in a platform we operate for them, that request should go to them as controller — we will support them in answering it.
Email hello@softopen.co.uk. We respond within one month. If you are unhappy with the outcome you may complain to the Information Commissioner’s Office.
Changes
We will update this notice when our processing changes, and material changes are notified to clients directly rather than only posted here.