This policy explains how The Open[n] Group handles personal data on theopenngroup.com.
Who we are
The Open[n] Group (“we”, “us”) is a brand, design and creative technology studio based in Bengaluru, India. We operate theopenngroup.com and are the controller of the personal data described in this policy. You can reach us at hello@theopenngroup.com.
What we collect
Information you give us. When you email us, submit the contact form, or start a conversation on WhatsApp, we receive your name, email address, phone number where you provide it, and whatever you choose to tell us about your project.
The newsletter. If you subscribe in the footer of any page, we record your email address, the date and time, the page you subscribed from, and a shortened form of your IP address. We keep that record because it is our evidence that you asked to hear from us.
Information collected automatically. Our host records standard technical data: IP address, browser and device type, referring page, pages viewed and time of visit. When you submit either form we also record a shortened form of your IP address to stop the forms being used to send bulk mail, and the address appears in the notification we receive. If you accept analytics, Google Analytics records the same kind of technical data (see below).
Why we use it
We use enquiry data to reply to you, scope work and keep a record of our correspondence. That is, to take steps at your request before entering a contract, and for our legitimate interest in running a studio. We use technical data for our legitimate interest in keeping the site secure, working and improving.
We do not sell personal data, and we do not use your enquiry to send marketing you did not ask for.
Cookies and analytics
This site uses Google Analytics 4 to count visits and see which pages are read. It is the only analytics we run and the only thing on the site that sets a cookie.
Nothing from Google is loaded and no analytics cookie is set unless you accept. We ask once, in the corner of the page, and we do not ask again. If you accept, Google Analytics sets two cookies on this domain, _ga and _ga_<id>, which last two years and hold a random identifier used to tell one browser from another. If you decline, nothing loads and nothing is stored beyond your answer.
Your answer is kept in your browser’s local storage rather than in a cookie, so recording it does not require the permission we are asking for. You can change your choice at any time, and clearing your browser storage resets the question.
Who else sees it
We share personal data only with the service providers who help us operate, and only as far as they need it to provide that service: our web host, Google Workspace for our email, and Google Analytics if you have accepted it. We do not sell personal data and we do not share it for advertising. We may also disclose data where the law requires it.
How long we keep it
Enquiries are kept for as long as the conversation is live and for up to twenty-four months afterwards, so we can pick up where we left off. Records connected to a signed engagement are kept for as long as tax and contract law requires. Newsletter records are kept until you unsubscribe, and for a short period after that as proof the request was honoured. Abuse-prevention counters are discarded after twenty-four hours. Analytics data is retained by Google under the settings on our property.
Where it is processed
We are based in India, and some of our providers process data outside it. Where personal data leaves its country of origin we rely on providers who offer recognised safeguards for international transfers.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to send it to you in a portable form, or object to how we are using it. Where we rely on your consent (the newsletter and analytics), you can withdraw it at any time, and withdrawing it does not affect anything we did before then. Under India’s Digital Personal Data Protection Act you may also nominate someone to exercise these rights on your behalf.
Write to hello@theopenngroup.com and we will respond within thirty days. If you believe we have handled your data badly, you are entitled to complain to your local data protection authority: in India, the Data Protection Board; in the UK, the Information Commissioner’s Office; in the EU, your national supervisory authority.
Security
The site is served over HTTPS and access to enquiry data is limited to the people in the studio who need it. No system is perfectly secure, but we take reasonable technical and organisational measures to protect what you send us.
Children
This site is intended for business audiences. We do not knowingly collect personal data from children. That means anyone under eighteen, as India’s Digital Personal Data Protection Act defines it, or under the age set by local law where that is lower. If you believe a child has sent us personal data, contact us and we will delete it.
Changes to this policy
If this policy changes we will update the page and the “last updated” date above. Material changes will be signposted on the site.
Contact
Questions about this policy, or about the data we hold: hello@theopenngroup.com.
