LEGALHow we use your data for B2B outreach

The full notice referenced from every cold-outreach email we send.

B2B Cold-Outreach Privacy Notice: content for tableport.io/legal/b2b-notice

This is the source-of-truth content for the layered Article 14 notice page linked from every cold-outreach email. The footer in the email points here; this page must satisfy every UK GDPR Art 14 disclosure element on its own.

The marketing site renders this page from this Markdown source so legal

  • engineering edit one file.

Who we are

TablePort LTD (the "Controller"), Company No. 13723140, registered in England and Wales. ICO registration: C1943928

Contact for data-protection matters: [email protected]

Why you received our email

You received our email because your restaurant appeared in our research via publicly available business listings, primarily Google Maps, Companies House, the FSA food-hygiene register, and your restaurant's public website and Instagram account.

We use this information solely to identify UK restaurant operators who may benefit from TablePort, our restaurant management platform.

Lawful basis

We rely on legitimate interests (UK GDPR Article 6(1)(f)) for our B2B cold-outreach programme. Our full Legitimate Interests Assessment is available on request to [email protected].

We send to corporate subscribers within the meaning of PECR Rule 22 (UK Limited companies and LLPs); we do not send unsolicited marketing emails to sole traders or partnerships without prior consent.

What data we hold

  • The restaurant's business name, registered company number, and public business address
  • A business email address for the restaurant or a member of its decision-making team, sourced from the restaurant's public website, social media, or Companies House
  • The name and role of the people who run the business: serving directors and LLP designated members from the Companies House register, and owners, general managers or head chefs named on the venue's own website. We do not collect home addresses, dates of birth or nationality, and we do not collect staff names for businesses that are not registered companies
  • Public business signals: Google rating, opening date, cuisine type, area, Instagram handle
  • Our outreach activity log: which touches we have sent, when, and whether you have engaged or unsubscribed
  • The replies you send us, so that we can answer them

We do not hold special-category data, personal email addresses, or any data unrelated to identifying restaurant suppliers' fit.

Who we share it with

We do not sell or share your data with third parties for their marketing purposes.

We use the following processors strictly to operate the outreach programme:

  • Microsoft 365 (Microsoft Ireland Operations Ltd) sends our emails from tableport.co and stores the mailbox. Microsoft Data Protection Addendum; UK and EU data transfers under the UK Addendum and SCCs where applicable.
  • Twenty CRM (self-hosted on Railway, USA) records outreach state. Transfers under SCCs + UK Addendum.
  • Outscraper (USA) looks up publicly available business information, such as Google Maps listings, on our behalf and does not keep the results. Outscraper DPA; transfers under SCCs + UK Addendum.
  • AI model providers (Anthropic, OpenAI, Google, Cursor, Factory AI, and OpenRouter-routed providers) assist us, under our direction, in drafting outreach emails and triaging your replies. They process the business name, role and message content described above only to answer that request, under their standard business-terms data-processing agreements, not to train their models on it. Transfers under each provider's SCCs where applicable.

How long we keep it

In our outreach system, we keep the content of our emails to you for 12 months from our last contact (last outreach email or your last reply, whichever is later), and a minimal send log (your address, dates and whether the email was delivered) for 24 months, for compliance records.

Your replies are kept in our outreach system for 12 months from when we receive them. Our research notes on your business (including the names and roles described above) are kept for 24 months from our last contact. Evidence about companies we never contact is deleted within 30 days of collection.

Copies of our emails and your replies in our Microsoft 365 mailbox are kept for no longer than 24 months.

If you opt out, or reply that TablePort is not a fit, we keep your email address, your company's email domain and that fact indefinitely, so that we never contact you or your colleagues again.

If our email to you bounces, we keep only your email address and the fact that it bounced, indefinitely, so that we do not write to it again.

Everything else is deleted on the schedule above.

Your rights

You have the right to:

  • Object to our processing at any time (UK GDPR Article 21). For direct marketing, this right is absolute: we will stop immediately on request via the unsubscribe link in any email or by writing to [email protected].
  • Access your data and receive a copy.
  • Rectify inaccurate data.
  • Erase your data (UK GDPR Article 17).
  • Restrict processing while we investigate a dispute.
  • Data portability for any data you have provided to us.

Email [email protected] to exercise any of these rights. We will respond within one calendar month.

Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

We would, however, appreciate the chance to address your concern first: please email [email protected].

Updates to this notice

We will update this notice if we materially change how we process outreach data. The current version date is shown below.

Last updated: 2026-09-28