Why you received an email

You received a message sent through Venturehand, a tool our customers use to contact people about their businesses. You did not sign up for anything, and you are not our customer. This page explains where your details came from and how to stop the contact — it is the notice Article 14 of the GDPR requires when someone holds your data without having got it from you.

1. Stop it now

Reply "no thanks" to the message and you will not be contacted again — not by the person who wrote to you and not by anyone else using Venturehand. We record the objection against your address across the whole Service and it does not expire.

You can also write to office@venturehand.com from any address and ask us to suppress it. You do not have to give a reason, and we will not ask for one.

2. Who contacted you, and who we are

Our customer decided to contact you. They chose the criteria, wrote or approved the message, and are the data controller for your details under the GDPR. Their name and email address are in the message you received.

We sent it on their instruction. Mountain Gem Investment EOOD (Маунтин Джем Инвестмънт ЕООД), ЕИК 208115519, 127 Ekzarh Yosif St., fl. 1, ap. 1, Sofia 1504, Bulgaria, operates the tool and the mailbox. We act as their processor: we do not choose who is contacted or why.

3. Where your details came from

One of two places, and the message itself will usually make it obvious which:

• Our customer already had them — you had dealt with them, or your details were in their own records.
• A business contact database. Where our customer asked us to find people matching a description, we searched Explee, a B2B data provider, and it returned business contact details matching it. We did not collect them from you.

The details involved are the kind that appear in a professional context: name, work email address, job title, and employer. Not private or special-category data.

4. Who else has seen it

Article 14 entitles you to know who receives your details, so here is the whole list rather than a category:

• Explee — the business contact database, where your details came from in the case above. They hold them independently of us and operate their own opt-out.
• OpenAI — writes the message. It receives your name, employer, job title and any note our customer added, so that the message can refer to them. It does not receive your email address.
• Maildoso — operates the mailbox the message was sent from. It receives your email address and the content of the message.
• Supabase — our database and hosting, where the record is stored.

Each acts on our instruction and may not use your details for anything else. If you object, the suppression we record stops future contact through us; it does not remove you from Explee's database, which is theirs.

5. Why this is allowed, and how to disagree

Our customer relies on legitimate interest under Article 6(1)(f) — reaching a business contact about something relevant to their work. That basis exists only for as long as it is not outweighed by your interests, and you have an absolute right to object under Article 21(2). If you object, the contact stops. That is what replying "no thanks" does.

Some countries treat email to individuals differently from email to businesses and require consent first. If you believe you were contacted in a market where that applies, tell us — it is something we want to know about.

6. Your other rights

You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be erased. Write to office@venturehand.com and we will answer within 30 days. Because our customer is the controller, we may need to pass the request to them, and we will tell you when we do.

One thing an erasure request does not do: if we erase your address entirely, we can no longer recognise it, and nothing stops a future search returning it again. So we keep a suppression record — your address and nothing else — for the specific purpose of never contacting you again. If you would rather we erased that too, say so and we will, and you should know it removes the protection.

Suppressing your address here does not remove you from the underlying databases. Explee operates its own opt-out, and your professional details may be listed by other providers we have no relationship with.

7. If you are not satisfied

You can complain to your local data protection authority. Ours is the Commission for Personal Data Protection (Комисия за защита на личните данни) in Bulgaria. You may also complain to the authority where you live or work.