How we handle data in our sales emails
OpenKrill sometimes writes to a company about a fault in its own public mail records. This page says what we keep about that company, why, for how long, and how to stop us.
What we keep
- The company name, its web domain, and the contact address the company publishes on its own website, such as info@ or sales@.
- The public DNS records of that domain that we checked, with the date.
- Our emails to that address, and any reply.
We don't write to named people, buy lists or guess addresses.
Why we may do this
We rely on legitimate interests (UK GDPR Article 6(1)(f)). We write once, with one follow-up, to a company about a fault in its own public mail records, and the company has a clear interest in knowing about that. We only write to UK limited companies, which the Privacy and Electronic Communications Regulations (PECR) allow without prior consent.
How long we keep it
- If you don't reply: we delete it 6 months after our first email.
- If you reply "stop": we keep only the domain, on a do-not-contact list, for 5 years from your "stop" so we never write again. Then we delete it.
- If you become a client: for as long as the work and the law on business records need.
Who else sees it
Our email provider stores the emails we send and receive, as our processor. We do not sell or share the data with anyone else. The data may be stored or read outside the UK; write to support@openkrill.app to ask where, and under which safeguard.
Your rights
You can ask to see, correct or delete what we hold, or object to our emails, by writing to support@openkrill.app or by replying "stop" to any of our emails. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.