Compliance & security

Handled with care. Explained plainly.

How we treat the data you upload, and what the preference services mean for your calls, texts and mailings.

How we handle your file

The short version: we use it for your clean, then delete it.

Used for one purpose

Your file is processed only to run the checks you selected and produce your results. We act on your instructions as a data processor.

No resale, no enrichment

We don’t keep your records in a shared database, sell or rent data, or use your lists for our own marketing.

30-day retention

Uploaded files and cleaned results are deleted automatically 30 days after processing. We keep the summary (file name, record count, checks run, cost) as your account’s audit trail.

Encrypted in transit

The whole site runs over HTTPS. Stored files sit outside the public web root, behind server access rules, and can’t be browsed directly.

Specialist screening provider

Lookups are carried out through a UK data-quality provider that queries the mobile networks and checks against the MPS. We send only the fields each check needs.

Payments kept separate

Card payments go through Stripe’s hosted checkout. Card details never reach our servers.

The rules, simply

MPS, SMS and PECR.

A plain-English overview, not legal advice. For your specific situation, see the ICO’s guidance or speak to a data protection specialist.

What is the MPS?

The Mailing Preference Service lets people ask not to receive unsolicited, addressed direct mail. Screening against it is expected practice for direct mail campaigns in the UK.

What changed in 2026?

From 5 February 2026, the Data (Use and Access) Act 2025 raised the maximum penalty for PECR breaches to the same level as UK GDPR: up to £17.5 million or 4% of global annual turnover, whichever is higher.

What are the rules for SMS marketing?

Marketing SMS to individuals generally needs their consent (or the “soft opt-in” for existing customers) and must include a simple way to opt out. Our SMS option asks you to confirm this before sending.

Is screening enough on its own?

No. Screening is one important control. You also need a lawful basis for holding and using the data, a record of consents where they apply, and a process for suppressing people who opt out with you directly.

What’s really in your list?

Upload it and see a firm price in under a minute. You only pay if you go ahead.