Prospect privacy notice
Last updated: 2 July 2026 · This notice covers our business outreach. For the notice covering the QR-code site and our machines, see the main privacy policy.
If we've emailed your venue about hosting a Sidobox smart fridge, this page explains what information we hold about you, where it came from, and how to make us stop.
The short version
We found your business contact details in public listings or on your own website. We'll send at most one introduction and one follow-up. Every email has a one-click unsubscribe — use it (or reply "unsubscribe") and we'll never email you again.
Who we are
WooSee Limited, trading as Sidobox. Company no. 14364528, registered in England and Wales. Registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. ICO registration ZB532687. Contact: info@sidobox.uk.
What we hold and where it came from
For each prospective venue we hold:
- Business details — venue name, address, phone number, website — from public business listings (Google Places) and your own website.
- A work contact — usually a name and a business email address — taken from your website's public contact or team pages.
- A record of what we sent you and when, so we don't contact you more than twice.
We collect nothing else: no browsing data, no purchased marketing lists, no sensitive ("special category") information.
Why, and our lawful basis
We process this information for one purpose: a one-off business-to-business introduction of our vending service to venues we genuinely believe could benefit from it. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)). We've documented a legitimate interests assessment — email us and we'll share it.
We write to business addresses only (corporate subscribers under PECR). We screen out personal mailbox addresses, we cap contact at one introduction plus one follow-up, and we honour every opt-out permanently.
Who else sees it
- Amazon Web Services (London region) — hosts our systems and delivers our email.
- Anthropic — an AI writing service we use to draft the first version of our outreach emails; the venue's name, type, address and your first name may be processed for that purpose. Anthropic may process data in the United States under the UK International Data Transfer Addendum and equivalent safeguards.
We never sell or share your details for anyone else's marketing.
How long we keep it
If you don't respond, we delete your contact details and our outreach records within 12 months of our last message. If you unsubscribe, we keep just your email address on our suppression list indefinitely — that's the record that stops us ever emailing you again. If you become a Sidobox host, your details move under the host agreement instead.
Your rights
You can object to this processing at any time (Article 21) — the unsubscribe link in any email, or a one-line reply, is all it takes and it is always honoured. You also have the rights of access, rectification, erasure and restriction: email info@sidobox.uk.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office: ico.org.uk · 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.