Privacy & Cookies

Privacy & Cookies Notice

Effective date: 1 September 2026

Who we are
Open for Business (“we” or “us”) is a UK charity, operating as Open for Business Limited (our registered company and charity numbers are shown in the footer of this page). We respect your privacy and are committed to protecting your personal data in line with UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. The information we collect

We may collect and store:

  • Your contact details (e.g. name, email address, phone number) when you sign up for updates, newsletters, or events.

  • Information you share in surveys, feedback forms, or correspondence with us.

  • Technical data from your visit to our website (via cookies or similar technologies) such as IP address, browser type, and pages viewed.

2. How we use your information

We use your data to:

  • Send you updates, reports, research, and opportunities to get involved in our work.

  • Manage our relationship with you, including responding to your questions or feedback.

  • Improve our website and communications.

  • Understand which of our communications and website content are of interest to you – for example using email open-tracking and website analytics – so we can keep our contact lists relevant and improve what we send you. This may involve building a profile of your interests; you can object to this at any time (see Section 7).

  • Fulfil legal obligations or protect our rights.

We only send you marketing communications if you have given consent, if you have previously supported or shown interest in our work (the “soft opt-in”), or where we otherwise have a legitimate interest (and your rights are not overridden). You can unsubscribe or opt out at any time, free of charge.

3. Lawful basis for processing

We process your data under one or more of the following legal grounds:

  • Consent – when you have actively agreed we can contact you.

  • Legitimate interests – for example, when we send relevant updates to people who have an existing relationship with us, including under the charity “soft opt-in” for electronic marketing to people who have supported or shown interest in our work.

  • Legal obligation – when we are required by law to keep records.

4. Sharing your data

We do not sell your personal data.
We may share your information with trusted third-party providers (e.g. email newsletter and CRM platforms, website hosting or analytics providers, and accounting or invoicing platforms) but only so they can deliver services on our behalf. All such providers are contractually bound to keep your information secure and use it only for the agreed purpose. We do not take donations or other payments through this website: where organisations choose to support our work, this is arranged separately by invoice, not through an online payment page. If that changes, this notice will be updated to name the payment provider(s) involved.


Some of our providers may process your data outside the UK. Where this happens, we take reasonable steps to ensure your data continues to be protected to a UK standard, for example because the destination country has an adequacy decision, or through approved safeguards such as a UK International Data Transfer Agreement or Standard Contractual Clauses with the UK Addendum.

5. Cookies

We use cookies and similar technologies to make our website work and to understand how it’s used. Cookies that are strictly necessary for the website to function do not require your consent. For all other (non-essential) cookies, such as analytics or marketing cookies, we ask for your consent through the cookie banner when you first visit the website, and you can change your choice at any time via Cookie Preferences, which can be found at the bottom left of any webpage's footer. Cookies used solely for first-party statistical purposes to improve our website may instead be used on an opt-out basis, provided we give you a clear and easy way to opt out, as permitted by law since 5 February 2026.

Cookie Preferences opens our Manage Cookies panel, where you can turn each category of non-essential cookies on or off. The categories are Necessary (always on), Performance and Analytics, and Advertising, and the purpose of each is explained in the panel. If you would like details of the individual cookies we set, what each one does and how long it lasts, please contact us at info@open-for-business.org and we will provide them. See below for a list of all Cookies we use.

Necessary 11 cookies

Essential for the site to work and stay secure. These are always on and cannot be switched off.

Cookie nameWho sets itWhat it doesHow long it lasts
crumbSquarespace (our website platform)Helps protect the site against a type of security attack when you submit formsUntil you close your browser
SS_SESSION_IDSquarespaceKeeps you securely connected to the site while you browseUntil you close your browser
__cf_bmHubSpot (via Cloudflare)Helps tell real visitors apart from automated bots to keep our forms secureAbout 30 minutes
__hs_cookie_cat_prefHubSpotRemembers the cookie choices you've made so we don't ask againAbout 5 days
cmapi_cookie_privacySquarespaceRemembers your cookie consent choicesAbout 4 months
cmapi_gtm_blSquarespaceWorks alongside our cookie consent tool to block cookies you haven't agreed toAbout 4 months
notice_gdpr_prefsSquarespaceRemembers your cookie consent choicesAbout 4 months
notice_preferencesSquarespaceRemembers your cookie consent choicesAbout 4 months
optout_domains_pcSquarespaceRemembers which types of cookies you've opted out ofAbout 4 months
ss_marketingCookiesAllowedSquarespaceRecords whether you've allowed advertising cookiesAbout 1 month
ss_performanceCookiesAllowedSquarespaceRecords whether you've allowed performance and analytics cookiesAbout 1 month

Performance and Analytics 14 cookies

Help us understand how the site is used so we can improve it. These are only set if you agree to them.

Cookie nameWho sets itWhat it doesHow long it lasts
__hsscHubSpotHelps us understand how visitors move through the site during a single visitAbout 30 minutes
__hssrcHubSpotHelps us tell whether you've started a new browser sessionUntil you close your browser
__hstcHubSpotHelps us understand overall visitor traffic and how people found our siteAbout 6 months
hubspotutkHubSpotRecognises you as a returning visitor so we can understand engagement with our site over timeAbout 6 months
_gaGoogle AnalyticsHelps us understand how many people visit our site and how they use itAbout 11 months
_ga_7FMLBV68ECGoogle AnalyticsHelps us understand how many people visit our site and how they use itAbout 11 months
_ga_BQ5SXHD11CGoogle AnalyticsHelps us understand how many people visit our site and how they use itAbout 11 months
_ga_BZN6L0194RGoogle AnalyticsHelps us understand how many people visit our site and how they use itAbout 11 months
_ga_RVF114EX32Google AnalyticsHelps us understand how many people visit our site and how they use itAbout 11 months
SS_ANALYTICS_IDSquarespaceHelps us understand overall visitor numbers and site usageAbout 13 months
SS_MIDSquarespaceIdentifies your visit so we can understand site usageAbout 13 months
ss_cvrSquarespaceHelps us understand what led you to visit our siteAbout 13 months
ss_cvtSquarespaceRecords the time of your visit for analytics purposesSame day
ss_lastidSquarespaceHelps us recognise repeat visits to our siteUntil you close your browser

Advertising 3 cookies

Help us measure whether our advertising is effective and show more relevant adverts. These are only set if you agree to them.

Cookie nameWho sets itWhat it doesHow long it lasts
_gcl_auGoogleHelps us measure whether our Google advertising is effectiveAbout 3 months
IDEGoogle (DoubleClick)Used to show you more relevant adverts and measure how effective they areAbout 3.5 months
IR_PIImpact (affiliate marketing partner)Tracks referrals from partner sites for marketing purposesAbout 10 months

Durations are approximate and are set by the provider named in each row. Squarespace is our website platform; HubSpot powers our forms and newsletter; Google Analytics helps us measure how the site is used; Google and Impact help us measure our advertising.

Last checked on 15 Sept 2026


6. How long we keep your data

We keep personal data only for as long as necessary to fulfil the purpose we collected it for, including any legal, accounting, or reporting requirements. In most cases, this will not exceed 5 years after your last interaction with us.

7. Your rights

You have the right to:

  • Access the personal data we hold about you.

  • Have inaccurate or incomplete data corrected.

  • Ask us to delete your personal data.

  • Restrict or object to our processing of your data.

  • Object to any profiling of your data, where we do not have compelling legitimate grounds which override your interests, rights and freedoms.

  • Withdraw consent at any time (where processing is based on consent).

  • Request a copy of your data in a portable format.

  • Complain to the UK Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data.

8. Contact us

If you have questions or wish to exercise your rights, please contact:
Data Protection Lead
Open for Business
16 Lincoln’s Inn Fields
London WC2A 3ED
Email: info@open-for-business.org

You also have the right to complain directly to us about how we have handled your personal data. Please send any complaint to complaints@open-for-business.org. We will acknowledge your complaint within 30 days and keep you updated on our progress. If we cannot resolve your concern, you can also contact the ICO here or by calling 0303 123 1113.