Privacy notice

Last updated: October 2026

Who we are

OpenSoon is a trading name of Ruslan Balzhyk, a sole trader based in Bulgaria. OpenSoon is not a company. "We" and "us" in this notice mean that person. We are the controller of the personal data described below. Contact: hello@getopensoon.com.

Because we are established in the EU, the EU General Data Protection Regulation (GDPR) applies to our processing. Because we offer our service to people in the UK, and our data can include personal data about UK sole traders and partnerships, the UK GDPR and the Data Protection Act 2018 apply as well.

1. If you visit our website, request a sample or subscribe

What we collect

• Your work email address, company name, the region and segment you choose, and the plan you pick.
• How you found us: campaign (UTM) parameters, the page you first landed on and the referring site. Your browser keeps these in its local storage and sends them to us only if you submit a form. We don't use advertising or analytics cookies.
• For subscribers: billing details, what you've received, and when you cancel.
• Technical logs kept by our hosting providers (IP address, browser, pages requested, time). Vercel's request logs include the address of a subscriber's private weekly page and are kept under Vercel's own retention policy.
• Private weekly pages: we store only a one-way hash of each private link, never the link itself, and we don't record individual page views or downloads in our database. To stop people guessing links, our server logs the IP address behind an invalid link attempt, and after repeated failures it blocks that IP for up to an hour (held in memory only). These pages set no cookies or browser storage.

Why, and our lawful basis

• To send the sample you asked for and follow up about it: legitimate interests.
• To set up, deliver and invoice your subscription: contract.
• To keep accounting records: legal obligation.
• To understand which campaigns bring in customers, and to keep the service secure: legitimate interests.

Our emails

We may email business contacts about OpenSoon. Every email includes a link to unsubscribe, and you can also use our unsubscribe page. Once you unsubscribe we keep only your email address, on a suppression list, so we don't contact you again.

2. If your business appears in our data

Our data describes food and drink premises in the UK and the businesses that run them. Most of it isn't personal data: it's about premises and companies. Where a venue is run by a sole trader or a partnership, its trading name and address can count as personal data, and this section explains what we do with it.

Where it comes from

• The Food Standards Agency food hygiene register (FHRS, and FHIS in Scotland).
• Companies House and The Gazette, for the company behind the venue and any insolvency notices.
• The business's own public website and social pages.
• Area-level data (crime levels, postcode locations), which is not about any individual.

Full details and licences are on our data sources page.

What we hold

Business name, premises address, business type, register dates and hygiene stage, the matched company (if any), and business contact points the venue publishes itself: role-based email addresses (such as info@ or bookings@), landlines and social pages. We don't collect owners' or directors' names, personal mobile numbers or named personal email addresses.

Why, and our lawful basis

We supply this data to businesses that sell to new or closing venues, such as payment, energy, insurance and food suppliers. Our lawful basis is legitimate interests: ours in running the service, and our customers' in finding businesses that may need what they sell. We limit the data to business-level information to keep the impact on you low. Our files mark sole traders and partnerships as "no email without consent", and our terms require customers to follow direct marketing law, including screening phone numbers against the TPS and CTPS.

How long we keep it

We keep a venue's record while it trades and for 24 months after it closes, so customers can see recent closures. Records of what we delivered are kept for 6 years, for accounting purposes.

Objecting

You can object at any time. Email hello@getopensoon.com with the business name and address. We'll stop including it in future deliveries and keep a minimal note so it isn't added again.

Who we share data with

• Customers, who receive the business-level venue data described in section 2. We never pass on details of our website visitors or customers.
• Vercel, which hosts our website.
• The provider of our server, where the data is processed and stored.
• Our email provider, to send samples, weekly files and summaries.
• A payment provider, if you pay online.
• Professional advisers and authorities, where the law requires it.

International transfers

We work from the EU and our customers are mainly in the UK. The EU and the UK recognise each other's data protection as adequate, so data can move between them. Some of our providers are based in, or use sub-processors in, the United States. Where that happens we rely on the EU–US Data Privacy Framework and its UK extension, or on standard contractual clauses (and the UK addendum to them).

How long we keep your details

• Sample requests that don't lead to a subscription: 24 months from your last contact with us.
• Subscriber and invoicing records: 6 years after the end of the tax year they relate to.
• Suppression list entries: for as long as we market by email, so we keep honouring your opt-out.
• Server logs: up to 90 days, unless we need them to investigate misuse.

Your rights

You can ask for a copy of your data, and ask us to correct or delete it, restrict how we use it, or transfer it to you in a machine-readable form. You can object to processing based on legitimate interests, and you can always object to direct marketing. Email hello@getopensoon.com. We'll reply within one month.

If you're unhappy with how we handle your data, please tell us first. You also have the right to complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk, 0303 123 1113); in the EU, the authority in the country where you live or work, or the authority in Bulgaria, where we are based.

Changes to this notice

If we change how we use personal data, we'll update this page and its date. If the change affects subscribers, we'll also tell them by email.