If we wrote to you first
Where we got your address.
You did not give it to us, so you are owed an explanation without having to ask for one. This is that explanation, in short. The full version is the privacy notice, and nothing here is a summary that leaves the awkward part out.
The three routes
One of these three, and we know which.
We found your business on Google Maps, in a listing anybody can look at, because it did not appear to have a website of its own. Then we needed a way to write to you. Your address reached us in one of three ways, and we record which one against every single business we contact.
It was on your listing
Published on the Google Maps entry for your business, or on a page linked from it.
It was published elsewhere
Somewhere else on the open web. A service called Hunter.io found it and told us the page it was published on.
It was worked out
Nobody published it. Hunter.io knows the pattern the other addresses at your domain follow, produced a likely address, and checked with your mail server that an address in that form exists. We say this plainly because it is the one people find surprising, and we never describe an address arrived at that way as your published business contact, because it is not one.
Ask which one applies to you and we will tell you. Email privacy@slashturn.com and we will send you what we hold, including the source. It is free and we answer within one month.
The rest of it
What we hold
What the listing said: business name, category, address, phone number, opening hours, rating. Your email address and where it came from. Then the messages between us, when they were sent, and where you have got to in the process.
What allows us to
Our legitimate interests, which is one of the six lawful bases in the UK GDPR. The privacy notice sets out exactly which interests we are relying on and the balancing we did, rather than naming the basis and stopping there.
How long we keep it
A business we found but never wrote to: 90 days. A business we wrote to that never replied: 12 months from the last message. Correspondence with somebody who did not buy: the same. There is one permanent record and it is described below.
Who else sees it
Our own suppliers, and nobody else. We do not sell your details, we do not share them for anyone else's marketing, and you are not on a list that gets passed around. The privacy notice names every supplier.
How to stop
Three ways, all of them immediate.
Use the unsubscribe link at the foot of any email we sent you. Or reply to the message and say stop. Or email privacy@slashturn.com. Any one of them is enough. You do not need to give a reason and you do not need to be polite about it.
We act on it straight away rather than within the ten days the law allows. Your address goes on a suppression list, every message we send is checked against that list before it goes anywhere, and nothing gets through it in any campaign.
The permanent record
The suppression list is the one thing we keep forever.
That sounds like the opposite of deleting your data, so here is why it is not. The moment we delete the record that you said no, we lose the only thing stopping us finding your business on Google Maps next year and writing to you again. Keeping it is how the objection is honoured.
We keep it as small as it can be. After 12 months the record is reduced to a scrambled version of your address that cannot be turned back, plus the date and the reason. That is still enough for our system to ask whether an address is suppressed before every send. It is no longer enough for a person to read your address off the list.
You can also complain to the Information Commissioner's Office at ico.org.uk, and you can do that without telling us first. We would rather you told us, so we can fix it.