Data Rights
⚠ Please read this before making a request – it may save you time:
We are an advertising intermediary, not a retailer or a bank. Because of the way we operate, there is a possibility that a formal data request to us will
return no records whatsoever. This is simply the nature of our business. The six points below explain why. Click each one to read more.
We work with data partners and audience platforms to identify and reach potential customers on behalf of our clients. In some cases, that data is processed by the data partner — not by us directly. If you received something and want to know who holds your data, the data partner or our client is more likely to be the right organisation to contact.
In many campaigns, we drive traffic directly to a client’s web-form without capturing any personal data ourselves. If you clicked a link, filled in a form, or made a purchase, that information went to our client — not to us. A data request to us in this situation would return nothing. If this sounds like your experience, please contact the company whose web-form you engaged with.
Our company name, branding, and contact details are in the public domain and can be replicated by third parties without our knowledge or consent. If you received a communication that concerned you, it may not have come from us at all. We would encourage you to contact us directly before submitting a formal data request, so we can help establish whether the communication was genuinely ours. This could save you significant time.
We have seen instances where competitors or bad actors have forwarded our legitimate marketing to known suppression and blacklist services in order to damage our reputation. If you believe you received something from us that you did not opt in to, it is possible your details were submitted to a complaints service without your knowledge, and without any direct relationship between you and us. If you are in any doubt, please get in touch before making a formal request.
The UK is no longer subject to EU law, including the EU GDPR. Your rights in relation to any data we hold are governed by the UK GDPR and the Data Protection Act 2018. If you are based in the EU and received communications from us, your rights under EU law may apply to EU-based data controllers only. Requests made under EU GDPR or citing EU jurisdiction may not be applicable.
We sometimes work with platforms, tools, and partners based outside the EU. Where personal data is processed by those platforms, it is handled under the terms of those platforms. A formal UK GDPR request may cover only data we process ourselves as a UK data controller. It does not compel non-EU based third-party platforms to respond, and data held independently by those platforms falls outside the scope of what we can retrieve or action on your behalf.
Not sure which option is right for you? In most cases, Option 1 is the quickest and easiest place to start — and in many instances it may be all you need.
Do Not Contact
Tell us to stop contacting you — by email, text, post, or phone
If you simply want us to stop sending you marketing messages or communications, this is the right choice. You do not need to close your account, delete your data, or go through a lengthy process. Just tell us which channels to switch off and we will action it straight away. Your account and any services you use with us remain completely unaffected.
How it works
- Send us an email request. Tell us your name, contact details, and which channels you want switched off (email, SMS, post, phone — or all of them).
- We action it immediately. Your preferences are updated on the same or next working day.
- Done. No further action needed. You can change your preferences again at any time.
| What you get | Timescale | Complexity |
|---|---|---|
| No more unwanted contact | Same or next working day | Simple — just an email |
You can choose to stop all contact, or keep essential account communications and stop marketing only. Either way, your account stays open and your data stays safe.
Send a Do Not Contact request email →
Delete My Data
Ask us to permanently erase the personal data we hold about you
If you want us to delete your personal data entirely — not just stop contacting you — this is the right to use. This is a more involved process than Option 1 and may not result in full deletion in all cases. For example, if your account has an outstanding balance, or if we are legally required to keep certain records, we may only be able to carry out a partial erasure.
How it works
- Fill in the request form. Tell us what data you want deleted and the reason for your request.
- Verify your identity. We send a one-time code to your registered mobile to confirm it is really you.
- We assess your request. We review what data we hold, whether any legal obligations prevent full deletion, and whether your account is in good standing.
- We action and confirm. We delete what we lawfully can and write to you within one calendar month confirming what has been erased, what has been retained, and the legal reason for any retention.
| What you get | Timescale | Complexity |
|---|---|---|
| Confirmation of what was deleted and what was kept | Up to one calendar month | Moderate — more detail required |
Important: if you only want to stop receiving marketing, Option 1 is simpler and faster. Choose this option if you specifically want your data removed from our systems.
Download the RTBF form here. When complete email in the request with the supporting documentation.
See My Data
Request a copy of all the personal data we hold about you
A Data Subject Access Request (DSAR) lets you see exactly what personal data we hold about you. This is your right under Article 15 of the UK GDPR. It is the most detailed of the three options. It does not delete your data or stop us contacting you — it simply gives you visibility. You may then decide to follow up with Option 1 or Option 2.
How it works
- Fill in the request form. Tell us who you are and what data you are looking for — you can request everything we hold, or specific records.
- Provide identity documents. Because we are disclosing personal data, we require photo ID and proof of address to verify your identity.
- We locate and compile your data. We search our systems and gather all personal data we hold relating to you.
- We send you your data. We provide a full copy of your data in a readable format, along with details of our processing purposes, retention periods, and any third parties we share with. This is delivered within one calendar month.
| What you get | Timescale | Complexity |
|---|---|---|
| Full copy of your personal data | Up to one calendar month | Detailed — ID documents required |
A DSAR is a good starting point if you are unsure what data we hold before deciding whether to request deletion. However, it does not by itself change, delete, or restrict any of your data.
Download the DSAR form here. When complete email in the request with the supporting documentation.
Quick comparison
| Option 1 Do Not Contact |
Option 2 Delete My Data |
Option 3 See My Data |
|
|---|---|---|---|
| Stops unwanted contact | Yes — immediately | Yes, as a side effect | No |
| Deletes your data | No | Yes (where lawful) | No |
| Shows you your data | No | No | Yes |
| ID documents needed | No | No — SMS code only | Yes — photo ID + proof of address |
| Time to complete | Same working day | Up to one month | Up to one month |
| Effort required | Very low | Moderate | Moderate |
| Account stays open | Yes | Account may close | Yes |
Not sure where to start?
If you just want fewer messages from us, go straight to Option 1 — Do Not Contact. It takes less than five minutes, requires no documents, and your account will not be affected in any way.
If you are unsure which option applies to your situation, contact our Data Protection Officer at [EMAIL] and we will point you in the right direction.