Third-Party Data Privacy Policy

Everything DM Ltd is an established UK based marketing agency providing marketing services and insights to assist organisations in making smarter decisions to engage with customers and prospects.

Our registered office is 8 Arlington Court, Whittle Way, Stevenage, Herts, SG1 2FS and company registered number is 3244074.

Everything DM Ltd is registered as a data controller with the Information Commissioner Office (ICO) under number Z8529876.

Everything DM is committed to protecting your privacy online. Below is our Third-Party Data Privacy Policy. This reflects the requirements of Data Protection Law, including the Privacy and Electronic Communications Act (2003) and The Data Protection Act (2018) which includes the General Data Protection Regulation (GDPR) which became law on 25th May 2018.

If you have any questions or concerns about our use of your personal information, please contact us at hello@everythingdm.com.

The data we work with

Everything DM act as a data broker on behalf of customers and only sources data from carefully selected consumer and business data partners collected from original sources that meet all our due diligence criteria. These sources include self-reported consumer survey information, aggregated consumer panel data, websites that have permission to share information about visitors, public records and historical retail purchases.

Data Partners

All our data partners are leaders in the marketing services industry, members of the Direct Marketing Association (DMA) and are registered as data controllers/processors with the Information Commissioners Office (ICO). They adopt and implement best practices and diligently seek to follow all laws governing the acquisition, compilation and distribution of marketing data. These practices include careful screening of data sources, ongoing internal audits, and appropriate consumer notice and choice.

Our current Data Partners are:

Data Quality

Everything DM and our Partners employ rigorous data testing, including applying proprietary models and algorithms, in effort to maintain the most accurate data. These processes assure proper consideration is given to consumer interests, laws, industry rules, regulations and guidelines and ethical principles that impact our data usage.

Data Processing

We process data under the following lawful basis’ depending on what is appropriate for the activity being carried out:

  • Consent: the data subject has consented to receiving marketing communications via a specified communication channel for compatible product and services.
  • Legitimate Interest: there is a legitimate interest for ourselves and our clients in processing data to provide products and services to consumers through marketing campaigns. On a case by case basis a balancing test is performed to ensure that we balance the potential impact on the data subject and their rights of processing data with the interests of ourselves and our clients.
  • Legal Obligation: we may need to process data to fulfil legal requirements. Such as subject access requests (SAR) or suppressions.
  • Performance of a Contract: we may need to process personal data to fulfil a contractual obligation.

The Below examples are of typical activates Everything DM performs for its clients and the lawful basis for processing different types of data.

  • Example 1 – B2C Consent based campaign
  • We work closely with many car manufacturers to run targeted conquest postal and email campaigns to consumers who have consented to receive marketing communications and our engage program specifically to ensure that our clients get the maximum impact form these communications while ensuring the rights of the data subjects are observed at every stage.
  • Example 2 – B2B Legitimate Interests based campaign
  • We work with a leading software solutions provider to run email marketing campaigns targeting small businesses with software offerings specifically developed for their business size.

The personal information that we receive from data contributors may be shared with our clients and partners. Both Everything DM and our partners will only use your information:

  • to send you relevant marketing communications with information about the products and services we or they offer.
  • to verify and enhance customer and marketing databases.
  • to improve relevance through market research, analysis, segmentation and profiling.
  • for identity verification, credit and risk management, revenue collection, database tracing activities.
  • to unsubscribe you from marketing databases.

Marketing Campaigns

Depending on what personal information we and our clients hold about you, you may be contacted via a variety of methods. This includes via post, email, on social media, using online advertising and giving you a call on your landline or mobile phone.

We always try to ensure that the right information is matched to the right offers.

You may be contacted by either ourselves or our clients about products or services in one or more of the following sectors;

  • Automotive – car dealerships and manufacturers
  • Careers and Education – job opportunities, college course details
  • Charity – volunteering, events
  • Entertainment and Leisure – sporting events, local activities
  • FMCG – supermarkets, pharmacies
  • Finance – bank accounts, credit cards, loans, mortgages, investments, pensions and savings
  • Insurance – car warranties, home insurance, life insurance, pet insurance, private medical insurance, travel insurance, vehicle insurance
  • Legal Services – PPI claims, will writing
  • Lifestyle – health and beauty, fitness
  • Marketing and Surveys – market research, consumer surveys
  • Public Sector – local information and services
  • Publishing and Media – TV services, magazine subscriptions
  • Property – home improvements, estate agencies
  • Retail – clothing and fashion, food and drink, home furnishings, online retail
  • Telecoms – broadband and internet services, mobile phone contracts
  • Travel – airlines, holidays, hotels, travel bookings
  • Utilities – electricity and gas providers, solar power, water suppliers, energy saving solutions

We regularly cleanse data records to ensure we remove any information that is inaccurate or out of date. We utilise industry standard suppression files such as the TPS (telephone preference service), MPS (mail preference service), deceased registers and gone away suppression lists.

Consumer Data

Consumer prospect data is highly regulated with strict rules and industry best practices in place to protect the rights of the individual. However, consent is not always required to contact an individual for marketing purposes. The most recent regulations (GDPR) sets out 6 legal bases that organisations can use to process personal data. The most common used for marketing communications are consent and legitimate interests.

For Business to Consumer (B2C) postal marketing a balance tested campaign can use personal data (PD) under the legitimate interest basis. For telephone and email communications PECR applies in addition to GDPR and therefore consent is the appropriate basis for processing PD.

The common types of consumer information we hold are listed below, with examples from these general categories:

  • Demographics - age, gender, marital status, income, occupation and education
  • Behavioural and lifestyle - hobbies, sporting activities, travel preferences, high-tech equipment users and purchasing behaviour
  • Census - aggregated to provide general demographic information at a small area level
  • Property Information - property type, property value and tenure
  • Life events - consumers who have recently moved home or had a baby

Everything DM’s data partners compile their data from sources such as:

  • Government ‘Open’ data e.g. Land Registry
  • Consumer surveys
  • Research data
  • Summarised UK Census information
  • Calculations using existing data
  • Other authorised data providers

From our data sources, as well as calculations and insights from it, we also derive information pertaining to:

Individual consumers, such as:

  • Gender
  • Marital status
  • Actual and estimated age range
  • Estimated income
  • Education level
  • Household status (head of household, spouse, elderly parent, young adult)
  • Lifestyle interests (e.g. product ownership, interests and hobbies, travel, charities supported etc.)

Households, such as:

  • Property type
  • Whether a household rents or owns a home
  • The estimated value of a home
  • Length of residence
  • Number of adults
  • Telephone number
  • Presence of children
  • Estimated household income

Geographic information about individuals and households, such as:

  • Address
  • Census tract, block group, etc.
  • Postal breakdowns (postcode, postal area, etc)
  • Census estimated projections

We do not hold sensitive information about you such as:

  • Financial data
  • Credit scores
  • Health information
  • Political preferences
  • Religious preferences
  • Sexual preferences
  • Data relating to children

We do not intentionally obtain or process data relating to children. We and our data partners take all reasonable efforts to ensure that the personal data we hold only relates to individuals aged 18+ and this is reflected in any terms and conditions where data is collected.

Business Data

Business prospect data has less restrictions placed upon it when being used for marketing then consumer data. Most B2B marketing lists and subsequent marketing campaigns based on that data operate under the lawful basis of legitimate interest for the processing of PII.

The common types of business information we hold are listed below:

  • Company name
  • Contact Name and Job Function/Title
  • Business address
  • Telephone number
  • Industry type selection: Thomson Directory Classification
  • SIC (Standard Industry Code) Classification
  • Business turnover
  • Small Office Home Office (SoHo) indicator
  • Ltd/Non-Ltd indicator
  • Age of business
  • Commercial MOSAIC

Business lists can be selected using variables such as geography and then refined using selections such as company size, business activity and number of employees.

Our Approach to Privacy

Everything DM is a steward of the information it processes and brokers for its data partners. Our stewardship is anchored in a values-based approach to privacy that focuses on the protection of information in our care and the safeguarding of consumer privacy through appropriate and responsible use.

Your rights
Your Right to Optout

If you would prefer not to receive marketing communications on behalf of our clients, please contact us and we will amend your communication channel information.

If you would prefer that you do not receive targeted advertising based on data other organisations may have on you, then there are a range of opt-out choices available to you, depending on the communication channel:

Postal Marketing– You can opt out of postal marketing by registering with the Mail Preference Service (MPS) at www.mpsonline.org.uk. This is an industry wide service that is administered by the Direct Marketing Association and recognised by the Information Commissioner.

Telephone Marketing – You can opt out of all telemarketing activity by registering their details with the Telephone Preference Service (TPS) at www.tpsonline.org.uk. The TPS is like the MPS but is administered by the Information Commissioner.

Email Marketing - Unlike Postal or Telephone channels, there is no industry-wide service to opt out of email marketing. Therefore, consumers should always review privacy policies and marketing opt-in check boxes when registering for services or purchasing products online. Where unwanted email marketing is received, consumers should unsubscribe to prevent future communications.

Your right to erasure, amendment and access

For requests regarding you rights to be erased, have details amended or to make a Subject Access Request (SAR) simply contact us and we can tell you which of our partners have information on you and put you in touch directly with them.

Contact Us

If you have any queries, please don't hesitate to contact us and a member of our team will be happy to help.

Changes to this policy

From time to time we may need to make alterations to this privacy policy, so we recommend that you check this page regularly to stay up to date. You can find out the date that this policy was last updated below:


Company Information

Registered in England/Wales Number:
3244074

Registered Office address:
8 Arlington Court, Whittle Way, Arlington Business Park, Stevenage, Hertfordshire, SG1 2FS.

VAT Number:
676 8608 78

Page last updated: 19/07/2018