Privacy policy
Last updated: 25 September 2026
Who is responsible for your information
I am Lorena Seco de Herrera Ortega, a sole trader trading as Open Thread. I am the data controller for personal information used to manage this website, respond to enquiries and administer my client relationships.
Business address: 151 Ladywell Road, London, SE13 7HZ, United Kingdom. For privacy questions or requests, email lorena@openthreadmarketing.com or write to me at this address.
Information I collect
When you use the contact form, I receive your name, email address and message. If you contact me directly or discuss a project, I may also receive your role, business contact details, organisation, project requirements and related correspondence. Please share only what is relevant and avoid sending sensitive personal information or customer datasets through the form.
For client engagements, I use the business contact, contractual, invoice and payment-record information needed to arrange, deliver and administer the work. Information usually comes directly from you, or from a colleague or client who introduces you or involves you in a project.
The website is hosted by Framer. Hosting and form services may process technical information, such as connection and request data, to deliver the website, transmit enquiries and protect against spam and misuse. The analytics used on the site are described below.
Why I use information and the lawful basis
Enquiries and business correspondence: I use your details to answer questions, discuss your needs and manage our correspondence. My legitimate interests are responding to people who contact Open Thread and developing relevant business relationships. If you are personally entering a contract with me, processing necessary to take steps at your request before that contract, or to perform it, is based on contract instead.
Client work and administration: I use relevant information to organise and deliver agreed services, communicate with client teams and manage invoices. The basis is contract where you are the contracting individual, and legitimate interests in delivering and administering business services where you represent an organisation.
Legal records: I retain information needed for tax, accounting and other applicable legal requirements on the basis of legal obligation. Where needed to resolve a dispute or protect legal rights, I rely on legitimate interests in establishing, exercising or defending claims.
Website security: technical information used to maintain a functioning website, deliver messages and prevent abuse is processed for legitimate interests in protecting the website and its users. When relying on legitimate interests, I consider whether the use is necessary and whether your rights and interests outweigh it.
You do not need to provide personal information simply to browse the website. Contact details and relevant project information are needed to respond to an enquiry or deliver agreed services; without them I may be unable to do so. Sending an enquiry does not subscribe you to a newsletter. Open Thread does not currently offer a newsletter signup.
Framer analytics and cookies
Open Thread uses Framer’s built-in analytics to understand overall website activity, such as page views, visitor counts and referral sources. It does not use Google Analytics or advertising tracking. Framer states that its built-in analytics do not use cookies or persistent identifiers, and the statistics provided to site owners are anonymised.
Framer calculates daily unique visitors using a hash of the IP address and browser user agent with a secret that rotates and is deleted daily. This is separate from the contact details you choose to submit in the form. Framer’s analytics do not require an analytics cookie consent banner. If additional tracking tools are introduced, I will update this notice and put any required consent arrangements in place before using them.
Who receives information
Framer provides website hosting and form technology. Email and business IT providers help me receive correspondence and deliver agreed work. Where necessary, relevant information may also be shared with professional advisers, such as an accountant or legal adviser, and with authorities where disclosure is legally required.
If agreed project delivery requires other support providers, only information needed for that work will be shared, subject to appropriate confidentiality and data protection arrangements. I do not sell personal information or provide contact-form details to third parties for their own marketing.
Processing outside the UK
Some service providers, including Framer and its subprocessors, may process information outside the UK. Applicable safeguards must cover these transfers, such as UK adequacy regulations or approved contractual safeguards, including the UK International Data Transfer Agreement or UK Addendum where required. Framer’s data processing addendum explains its transfer arrangements. Contact me for more information about safeguards relevant to your information.
How long information is kept
Enquiries and correspondence are kept while a discussion is active and for the period reasonably needed to complete follow-up or resolve questions arising from it. I review whether there is an ongoing need based on the last meaningful contact, any agreed next steps and whether a complaint or dispute remains open. Information is deleted when that need ends, unless another obligation requires retention.
Client and project records are kept for the engagement and for as long as needed afterwards to meet agreed obligations, provide relevant handover or support, and address potential claims within applicable legal time limits. Records needed for self-employed tax reporting are normally kept for at least five years after the 31 January filing deadline for the relevant tax year, or longer where a legal requirement or open enquiry requires it. This does not mean every project file is retained for the same period.
Information held solely on a client’s behalf is returned or deleted under the agreed data processing terms, subject to legal obligations.
Client customer and community data
This policy covers information for which Open Thread decides the purposes and means of processing. In some projects I may handle customer, community member or research participant information on a client’s instructions as a processor. In that case the client’s privacy notice and our data processing agreement govern that activity. If your request concerns that information, please contact the relevant client; I will assist them as required.
Your rights
Depending on the circumstances, you can ask to access or correct your information, have it erased, restrict its use, object to processing based on legitimate interests, or receive information in a portable format where that right applies. These rights are subject to legal conditions and exceptions. Where processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing.
To make a request, email lorena@openthreadmarketing.com. I may need proportionate information to confirm your identity. I will respond within the applicable legal time limit, normally one month, and explain any lawful extension. Open Thread does not use your information for solely automated decisions that produce legal or similarly significant effects.
You can complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk/make-a-complaint/. You are welcome to contact me first, but you do not have to do so before contacting the regulator.
Keeping this policy up to date
I will update this policy when the website, services or relevant data practices change. The date at the top shows when it was last updated. Where required, I will tell you about material changes directly.
Last updated: 25 September 2026
Who is responsible for your information
I am Lorena Seco de Herrera Ortega, a sole trader trading as Open Thread. I am the data controller for personal information used to manage this website, respond to enquiries and administer my client relationships.
Business address: 151 Ladywell Road, London, SE13 7HZ, United Kingdom. For privacy questions or requests, email lorena@openthreadmarketing.com or write to me at this address.
Information I collect
When you use the contact form, I receive your name, email address and message. If you contact me directly or discuss a project, I may also receive your role, business contact details, organisation, project requirements and related correspondence. Please share only what is relevant and avoid sending sensitive personal information or customer datasets through the form.
For client engagements, I use the business contact, contractual, invoice and payment-record information needed to arrange, deliver and administer the work. Information usually comes directly from you, or from a colleague or client who introduces you or involves you in a project.
The website is hosted by Framer. Hosting and form services may process technical information, such as connection and request data, to deliver the website, transmit enquiries and protect against spam and misuse. The analytics used on the site are described below.
Why I use information and the lawful basis
Enquiries and business correspondence: I use your details to answer questions, discuss your needs and manage our correspondence. My legitimate interests are responding to people who contact Open Thread and developing relevant business relationships. If you are personally entering a contract with me, processing necessary to take steps at your request before that contract, or to perform it, is based on contract instead.
Client work and administration: I use relevant information to organise and deliver agreed services, communicate with client teams and manage invoices. The basis is contract where you are the contracting individual, and legitimate interests in delivering and administering business services where you represent an organisation.
Legal records: I retain information needed for tax, accounting and other applicable legal requirements on the basis of legal obligation. Where needed to resolve a dispute or protect legal rights, I rely on legitimate interests in establishing, exercising or defending claims.
Website security: technical information used to maintain a functioning website, deliver messages and prevent abuse is processed for legitimate interests in protecting the website and its users. When relying on legitimate interests, I consider whether the use is necessary and whether your rights and interests outweigh it.
You do not need to provide personal information simply to browse the website. Contact details and relevant project information are needed to respond to an enquiry or deliver agreed services; without them I may be unable to do so. Sending an enquiry does not subscribe you to a newsletter. Open Thread does not currently offer a newsletter signup.
Framer analytics and cookies
Open Thread uses Framer’s built-in analytics to understand overall website activity, such as page views, visitor counts and referral sources. It does not use Google Analytics or advertising tracking. Framer states that its built-in analytics do not use cookies or persistent identifiers, and the statistics provided to site owners are anonymised.
Framer calculates daily unique visitors using a hash of the IP address and browser user agent with a secret that rotates and is deleted daily. This is separate from the contact details you choose to submit in the form. Framer’s analytics do not require an analytics cookie consent banner. If additional tracking tools are introduced, I will update this notice and put any required consent arrangements in place before using them.
Who receives information
Framer provides website hosting and form technology. Email and business IT providers help me receive correspondence and deliver agreed work. Where necessary, relevant information may also be shared with professional advisers, such as an accountant or legal adviser, and with authorities where disclosure is legally required.
If agreed project delivery requires other support providers, only information needed for that work will be shared, subject to appropriate confidentiality and data protection arrangements. I do not sell personal information or provide contact-form details to third parties for their own marketing.
Processing outside the UK
Some service providers, including Framer and its subprocessors, may process information outside the UK. Applicable safeguards must cover these transfers, such as UK adequacy regulations or approved contractual safeguards, including the UK International Data Transfer Agreement or UK Addendum where required. Framer’s data processing addendum explains its transfer arrangements. Contact me for more information about safeguards relevant to your information.
How long information is kept
Enquiries and correspondence are kept while a discussion is active and for the period reasonably needed to complete follow-up or resolve questions arising from it. I review whether there is an ongoing need based on the last meaningful contact, any agreed next steps and whether a complaint or dispute remains open. Information is deleted when that need ends, unless another obligation requires retention.
Client and project records are kept for the engagement and for as long as needed afterwards to meet agreed obligations, provide relevant handover or support, and address potential claims within applicable legal time limits. Records needed for self-employed tax reporting are normally kept for at least five years after the 31 January filing deadline for the relevant tax year, or longer where a legal requirement or open enquiry requires it. This does not mean every project file is retained for the same period.
Information held solely on a client’s behalf is returned or deleted under the agreed data processing terms, subject to legal obligations.
Client customer and community data
This policy covers information for which Open Thread decides the purposes and means of processing. In some projects I may handle customer, community member or research participant information on a client’s instructions as a processor. In that case the client’s privacy notice and our data processing agreement govern that activity. If your request concerns that information, please contact the relevant client; I will assist them as required.
Your rights
Depending on the circumstances, you can ask to access or correct your information, have it erased, restrict its use, object to processing based on legitimate interests, or receive information in a portable format where that right applies. These rights are subject to legal conditions and exceptions. Where processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing.
To make a request, email lorena@openthreadmarketing.com. I may need proportionate information to confirm your identity. I will respond within the applicable legal time limit, normally one month, and explain any lawful extension. Open Thread does not use your information for solely automated decisions that produce legal or similarly significant effects.
You can complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk/make-a-complaint/. You are welcome to contact me first, but you do not have to do so before contacting the regulator.
Keeping this policy up to date
I will update this policy when the website, services or relevant data practices change. The date at the top shows when it was last updated. Where required, I will tell you about material changes directly.
Have a customer challenge you’re trying to solve?
Whether you know what you need or are still working out where to start, I’d be happy to hear what you’re thinking about.
Have a customer challenge you’re trying to solve?
Whether you know what you need or are still working out where to start, I’d be happy to hear what you’re thinking about.
Have a customer challenge you’re trying to solve?
Whether you know what you need or are still working out where to start, I’d be happy to hear what you’re thinking about.