Privacy policy

OpenAisle is a trading name of Red Consortium Ltd
Company number: 16495425
Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

This policy was last updated on 23 October 2026.

1. Who we are

OpenAisle is a trading name of Red Consortium Ltd (company number 16495425), a company registered in England and Wales. Our registered office is at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

For the purposes of data protection law, Red Consortium Ltd is the data controller. This means we are responsible for deciding how we hold and use personal data about you.

If you have any questions about this privacy policy or how we handle your personal data, please contact us at hello@getopenaisle.com.

2. What data we collect

We may collect and process the following personal data about you:

Information you provide directly

• Name and job title
• Email address and telephone number
• Company name and business address
• Your store's web address, e-commerce platform and approximate number of products
• Details about your store and its set-up, as provided via our snapshot form, email correspondence or calls

Information we access when delivering our services

If you engage us for an audit, set-up or monitoring, you may give us access to systems such as your store's admin area, Google Merchant Center, Cloudflare or server logs. These may contain personal data about your own customers or website visitors. Where we handle that data, we do so only on your instructions and on your behalf, under written terms agreed with you, and only as far as needed to deliver the service.

Information collected automatically

• IP address and approximate geographic location
• Browser type, device type and operating system
• Pages visited, time spent on pages and navigation patterns on our website
• Referring website or source

This information is collected through Google Analytics 4 and cookies. See section 8 for more detail on cookies.

3. How we use your data

We use your personal data for the following purposes:

• To prepare and send your free snapshot, and to respond to your enquiry
• To provide you with information about our services
• To prepare proposals and deliver our audits, set-ups and monitoring services
• To manage our business relationship with you, including invoicing and account administration
• To comply with our legal and regulatory obligations
• To improve our website, services and user experience
• To send you relevant updates about our services or changes in AI shopping that may affect your store, where you have consented to receive these or where we have a legitimate interest in doing so

4. Legal basis for processing

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we rely on the following legal bases to process your personal data:

• Consent: where you have requested a snapshot or opted in to receive communications from us. You may withdraw your consent at any time by contacting us at hello@getopenaisle.com.
• Contractual necessity: where processing is necessary to perform a contract with you or to take pre-contractual steps at your request, such as preparing a proposal.
• Legitimate interests: where processing is necessary for our legitimate business interests, such as improving our services, managing our client relationships and ensuring the security of our website. We ensure that our legitimate interests do not override your rights and freedoms.
• Legal obligation: where we are required to process your data to comply with applicable law, such as tax and accounting obligations.

5. Who we share your data with

We may share your personal data with the following categories of recipients where necessary to deliver our services or comply with legal requirements:

• Contractors: vetted technical contractors who help us carry out snapshots, audits and set-ups, bound by confidentiality and data protection terms.
• Professional advisors: our accounting, tax and legal advisors, where needed.
• Service providers: third-party providers who assist with our business operations, including our website hosting provider, email service provider, form processing service (Tally) and analytics platform (Google Analytics).
• Regulatory authorities: government agencies, tax authorities or law enforcement bodies where required by law or regulation.

We do not sell, rent or trade your personal data to any third party for marketing purposes.

6. International data transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom, including Poland (where we operate from), other countries within the European Economic Area, and countries where our contractors are based.

Where we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements. Transfers within the EEA are covered by adequacy regulations. For any transfers to countries without an adequacy decision, we put appropriate safeguards in place, such as the UK International Data Transfer Agreement or standard contractual clauses with the UK Addendum.

Some of our third-party service providers (such as Google) may process data in the United States or other jurisdictions. These providers operate under their own data protection frameworks and contractual commitments.

7. How long we keep your data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention periods are:

• Snapshot and enquiry data: up to 24 months from your last interaction with us, unless you become a client.
• Client data: for the duration of our business relationship and for a minimum of 6 years thereafter, to comply with legal, regulatory and accounting obligations.
• Data accessed in your store's systems: only for as long as needed to deliver the service, then deleted or returned to you as agreed in our terms.
• Website analytics data: retained in accordance with Google Analytics' data retention settings. We currently retain analytics data for 14 months.

When personal data is no longer required, we will securely delete or anonymise it.

8. Cookies

Our website uses cookies and similar technologies to improve your experience and to help us understand how our website is used.

Essential cookies

These are necessary for the website to function and cannot be switched off. They are usually set in response to actions you take, such as setting your privacy preferences or filling in forms.

Analytics cookies

We use Google Analytics 4 to collect information about how visitors use our website. This helps us improve the site and our services. Google Analytics uses cookies to collect information such as how often users visit the site, what pages they visit, and what other sites they used before coming to our site. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Form cookies

Our snapshot form is provided by Tally. Tally may set cookies to enable the form to function correctly and to prevent spam submissions.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

9. Your rights

Under UK data protection law, you have the following rights in relation to your personal data:

• Right of access: you can request a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct any inaccurate or incomplete personal data.
• Right to erasure: you can ask us to delete your personal data in certain circumstances.
• Right to restrict processing: you can ask us to restrict how we use your data in certain circumstances.
• Right to data portability: you can request that we transfer your data to another organisation or directly to you, in a structured, commonly used, machine-readable format.
• Right to object: you can object to our processing of your data where we are relying on legitimate interests as our legal basis.
• Right to withdraw consent: where we rely on your consent to process your data, you can withdraw that consent at any time.

To exercise any of these rights, please contact us at hello@getopenaisle.com. We will respond to your request within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed. The ICO can be contacted at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113.

10. Security

We take the security of your personal data seriously. We have implemented appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction. These measures include encrypted communications, access controls, and secure storage of client records and any access credentials you share with us.

While we take all reasonable precautions, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your data.

11. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of any website you visit.

12. Children's data

Our services are directed at businesses and their directors, officers and employees. We do not knowingly collect personal data from children under the age of 16. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete it.

13. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices, services or applicable law. Any updates will be posted on this page with a revised "last updated" date. We encourage you to review this policy periodically.

14. Contact us

If you have any questions about this privacy policy, wish to exercise your data protection rights, or have a concern about how we handle your personal data, please contact us:

Email: hello@getopenaisle.com

Post: OpenAisle (Red Consortium Ltd), 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom