Privacy notice — The Opportunity Table

Who we are

This website, theopportunitytable.com, is run by [TO BE CONFIRMED: legal name of the operator], [TO BE CONFIRMED: postal address]. In this notice, “we”, “us” and “our” mean that operator.

We are the controller of the personal data described here: we decide why and how it is used.

You can contact us about anything in this notice at hello@theopportunitytable.com [TO BE CONFIRMED: contact address].

What this notice covers

At this stage the website does three things:

explains what The Opportunity Table is;
lets you send us an enquiry, from the Contact and Partnerships pages; and
lets you register your interest, from the “Take your seat” page.

There are no accounts, no sign-in, no tickets and no payments on this website yet. If we add features like these, we will update this notice before they go live.

[TO BE CONFIRMED: minimum age for registering interest.]

What we collect

When you send an enquiry

Your name and email address.
What your enquiry is about (attending a gathering, partnership, or something else).
Your message, and your organisation if you choose to give it.
The page you sent it from, the time we received it and the reference number we give it.
Notes we add while handling it, its status (for example, “replied”) and who on our side is looking after it.

When you register your interest

Your name and email address.
Any interests you choose (for example, Business or Leadership).
Whether you ticked the box to hear when gatherings and community details are announced. If you did, we also keep the exact wording you agreed to and the time you agreed.
The page you registered from, the time you registered and the status of your registration.

If an email address is already on our list, we keep the original registration and do not create a second one. To change your details or preferences, email us.

Technical information

Abuse protection. To stop the forms being flooded, we limit how many submissions can come from one network in a short time. To do this we keep a one-way, salted code (a “hash”) made from your network (IP) address, never the address itself. These records are short-lived: anything more than 24 hours old is deleted automatically as the forms are used.
Spam checks. The forms include a hidden field that people do not see and note how quickly the form was completed. Submissions that look automated are kept separately for us to review, rather than being deleted unseen.
Bot check (only if switched on). We may use a bot check on the forms, provided by our hosting provider, Cloudflare. If it is switched on, it processes technical information about your browser and device to tell people from automated traffic. [TO BE CONFIRMED: whether it is switched on at launch.]
Hosting. Like any website, our hosting provider processes technical information such as your IP address and browser details in order to deliver pages to you and keep the service secure.

We do not ask for sensitive information, such as health details. Please do not include it in your message.

How we use it, and our lawful basis

[TO BE CONFIRMED by adviser: the lawful bases below are proposals and have not yet been reviewed.]

To reply to your enquiry and handle it. Our legitimate interest in responding to people who contact us. For a partnership enquiry, this may also be a step you have asked us to take before entering into an agreement.
To keep a register of people interested in The Opportunity Table. [TO BE CONFIRMED by adviser: your consent, or our legitimate interest in knowing who would like to take part.]
To email you when gatherings and community details are announced, only if you ticked the box. Your consent. You can withdraw it at any time; this does not affect anything we did before you withdrew it.
To protect the forms from spam and abuse and keep the website secure. Our legitimate interest in running a safe and reliable service.
To keep a record of changes and exports made in our admin area. Our legitimate interest in being able to show how personal data has been handled.

We do not use your information for automated decision-making or profiling.

What we do not do

We do not send marketing emails. If you tick the box when you register, we will only email you when gatherings and community details are announced. We do not currently send any other emails to people who register.
We do not sell your personal data, and we do not share it with partners or sponsors.
We do not use analytics, advertising or social media trackers on this website. Our fonts are served from our own website.
The alerts that tell us a new enquiry or registration has arrived do not contain your name, email address or message.

Who can see your information

Us. Only people authorised by The Opportunity Table, through a password-protected admin area.
Our hosting provider, Cloudflare. It hosts the website and the database where enquiries and registrations are stored, routes our internal alert emails and, if switched on, provides the bot check. It acts on our instructions as a processor. [TO BE CONFIRMED: contracting entity.]
Our email provider. When we reply to your enquiry by email, your email address and our correspondence are handled by the service we use for email. [TO BE CONFIRMED: email service.]
Others where the law requires it. For example, professional advisers or public authorities, if we are legally required to share information.

International transfers

Our hosting provider operates a global network, so your information may be processed outside the European Economic Area, including in the United States. [TO BE CONFIRMED by adviser: where the database is located and which safeguard applies to any transfer, such as an adequacy decision or standard contractual clauses.]

How long we keep your information

Enquiries: [TO BE CONFIRMED].
Registrations of interest: until you ask us to delete them, or [TO BE CONFIRMED].
Abuse-protection records: no more than about a day (see “Technical information”).
Record of admin changes and exports: [TO BE CONFIRMED]. These records never contain the text of your message.
Log of emails we have tried to send: [TO BE CONFIRMED]. This log does not contain email addresses.

If you ask us to delete your details, we will do so unless the law requires us to keep them.

Your rights

Under data protection law (the General Data Protection Regulation), you have the right to:

access the personal data we hold about you and receive a copy;
rectification, if it is wrong or incomplete;
erasure, to have it deleted;
restriction, to limit how we use it;
object to our use of it where we rely on legitimate interests;
portability, to receive it in a structured, commonly used format; and
withdraw consent at any time, where we rely on your consent.

You also have the right to complain to the Data Protection Commission, the data protection regulator in Ireland, at www.dataprotection.ie. We would appreciate the chance to put things right first, so please contact us if you can.

How to use your rights

Email hello@theopportunitytable.com [TO BE CONFIRMED: contact address] and tell us what you would like us to do. Please write from the email address you used on our forms, so we can find your details and know the request comes from you. If we cannot be sure, we may ask for more information.

We will respond within one month, as the law requires. For complex requests the law allows us to extend this by up to two further months; if so, we will tell you why.

To stop hearing from us about announcements, email us and ask to unsubscribe. Any announcement email we send will also include a link to unsubscribe.

Keeping your information safe

The website is served over an encrypted connection (HTTPS).
The admin area where enquiries and registrations are stored is password-protected, and every change or export made there is recorded.
We do not store your IP address, and we collect only what we need to respond to you or keep your place on the list.

No system is completely secure, but we take reasonable steps to protect your information.

Changes to this notice

We will update this notice when the way we use personal data changes, for example if we introduce accounts or bookings. The date at the top shows when it was last updated.