Privacy Policy
Watts Marketing Limited · Company Registration No. 07250927 · 45 Whiffler Road, Norwich, NR3 2AW
Last updated 24 August 2026
Watts Marketing Limited respects an individual's right to data privacy and data protection. This policy sets out how we collect, store, use, share and protect (collectively 'process') the personal information we come into contact with through this website.
Everybody who contacts us here does so as a business: companies that want to buy appointments or marketing services from us. So this policy is written for you, and everything below describes what happens to a company's enquiry and to the people who make it. It covers this website, the forms on it, and the calls and emails that follow from them.
We handle personal data under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, for marketing by telephone, email and text and for the cookies on this site, the Privacy and Electronic Communications Regulations 2003 (PECR). If you have a written agreement with us, it may contain further information about our processing of your information.
For the purposes of data protection law, Watts Marketing Limited is the Data Controller, the company responsible for and in control of the processing of your personal data. Our contact details for anything in this policy are at the foot of the page. Some of that data is held inside systems run for us by third parties acting as our Data Processors, under written contracts that allow them to use it for nothing of their own.
This notice is here to tell you what we do; it is not a contract, and it is not a request for your permission. Where we need your consent we ask for it separately and in plain terms, and you can withdraw it at any time. Where we rely on a different lawful basis, the clause that covers that processing says which one and why.
We are not responsible for the data policies, procedures or content of any other linked website. We may make changes to this policy, and the date at the top of the page tells you when we last did.
We pledge to handle your personal data fairly and lawfully at all times, and we are committed to being transparent about what data we collect from you and how we use it.
Enquiries from businesses through this website
This clause covers you if you are a company that wants to buy appointments or marketing services from us and you have filled in a form on this website, emailed us or called us. It is the clause the notice under our enquiry form links to.
What we collect
The form asks for:
- Your name.
- The name of your company.
- Your email address and telephone number.
- The sector you sell in, how many sales representatives you run, and whether you offer finance to your own customers.
Submitted with it, without you typing anything, are:
- The page you submitted the form from.
- Your IP address and browser user-agent string, recorded with the submission as a fraud and abuse control.
- Any advertising click identifier carried in the address of the page you arrived on (for example a Google, Microsoft or Meta click ID), and the campaign parameters attached to it, so we can tell which advertising produced the enquiry.
Giving us these details is voluntary. We cannot price your area or send you a proposal without them, so there is no version of the enquiry that works without a name and a way of reaching you.
What we do with it
We telephone you on the number you gave us. That call is the whole point of the form: we use it to establish the sectors and postcodes you cover and the volume your representatives can take, and to give you a detailed price and proposal for your area. Our pricing depends on sector, volume and coverage, which is why it is not published and why the conversation happens by phone rather than on a page.
Sometimes we text or email you as well: to reach you when a call does not connect, to agree a time to speak, or to put the proposal itself in writing. Those are the three ways we will contact you about your enquiry, and there are no others.
We also keep a record of the enquiry and of what was discussed, and use it to decide whether we can supply you. Calls to and from our office may be recorded for training, quality and compliance purposes.
Our lawful basis, and why it is fair
We rely on our legitimate interests under Article 6(1)(f) of the UK GDPR: our interest in answering a business enquiry and in pursuing the commercial relationship you approached us about. Where the discussion turns into an agreement, we also rely on Article 6(1)(b), which covers steps taken at your request before entering into a contract.
We have weighed that interest against your interests and rights, and recorded the assessment. In short: the details are business contact details, given to us deliberately and for exactly this purpose; a telephone call about the proposal you asked for is the outcome any reasonable person filling in the form would expect; none of it is special category data; we do not profile you, and we never sell or share your details with anybody; and you can stop the whole thing with one sentence, at no cost and with no consequence.
Your right to object
You can object to this processing at any time and we will stop contacting you about your enquiry. You do not have to give a reason, and objecting costs you nothing.
Tell whoever calls you, reply to any email from us, write to [email protected], or call 01603 971808. Where you object to marketing specifically, we stop, and there is nothing for us to weigh up.
Calling, texting and emailing you
The call that follows your enquiry is one you asked us to make, and so is any text or email that follows it. You gave us the number and the address for exactly this conversation.
Separately from that, where we make a marketing call to a number that has not asked to hear from us, we screen it against the Telephone Preference Service and Corporate Telephone Preference Service registers first, and we do not call numbers registered there. Where we send marketing by text or email to an individual or a sole trader rather than to a company, we send it only with their consent. If you ask us not to contact you again, by any of the three, we record that and honour it.
What we use personal data for
We use personal data for:
- Answering enquiries, quoting, and agreeing terms with companies who want to buy appointments or marketing services from us.
- Selling and supplying our services, and obtaining feedback on how we performed.
- Promoting, marketing and advertising our services to other businesses.
- Sending business marketing communications where we are permitted to, and with consent where consent is required.
- Understanding how the companies we deal with, and the visitors to this website, behave and what they need.
- Improving our existing services and developing new ones.
- Complying with our legal and regulatory obligations.
- Handling contacts, queries, complaints and disputes.
- Handling legal claims and regulatory enforcement action.
- Fulfilling our obligations to the companies we supply.
Our lawful basis is one of the following, and the clauses above say which applies where: your consent; the performance of a contract with you or steps taken at your request before one; compliance with a legal obligation; or our legitimate interests in running, protecting and improving the business, where those interests do not override your own.
We never sell or share personal information collected through this site, and we do not use it for any purpose other than those stated above.
Marketing communication
We may contact you about our services by telephone, email, text and post. Where the law requires your consent, which in practice means electronic marketing to individuals and to sole traders and most partnerships, we ask for it first and only send on that basis. Where the law allows us to market to a corporate subscriber, or to an existing customer about services of the same kind they already bought from us, we rely on our legitimate interests, and we tell you how to stop in every message we send.
You can opt out at any time by emailing [email protected] with your full details and your wish to opt out, by using the unsubscribe link in any email, or by telling us on the phone. Our records are amended accordingly and we keep a note of the fact that you opted out, so that we do not contact you again by mistake.
How long we keep it
We keep personal data only as long as we need it for the purpose we collected it for, and then delete it. In practice:
- Business enquiries that do not become partnerships: 24 months from our last contact with you, so that we can pick up a conversation you may return to, and then deleted.
- Partner records: for the duration of the agreement and six years afterwards, which is the period our tax obligations and the limitation period for a contract claim require.
- Marketing opt-outs and suppression records: indefinitely. This is the one record we keep in order to protect you rather than to use you, and it is what stops us contacting you again.
- Call recordings: no longer than needed for training, quality and compliance, and for any dispute the call relates to.
Where we no longer need to identify you but the underlying numbers are still useful, we aggregate or anonymise the data instead of keeping it, and once anonymised it is no longer personal data.
We do not sell or share your data
We do not sell your personal data. We do not rent it, trade it or swap it. We do not put you on a list that another company can buy, and we do not pass your details to anybody else for their own marketing or for any other purpose of their own. There is no commercial exception hidden in that: selling or sharing your details is not something our business does.
The suppliers who hold it for us
Your data does sit inside tools that other companies run for us: our hosting and infrastructure, the system your enquiry is recorded in, our telephone and email providers, and the analytics and advertising measurement on this site. Those companies are our processors. They act only on our written instructions, they cannot use your data for anything of their own, and they cannot pass it on. Naming them is a transparency obligation we owe you, not an exception to the paragraph above.
Beyond that, the only occasions on which your data leaves us at all are these: our professional advisers (lawyers, accountants, auditors and insurers) where they need it in order to advise us, and any disclosure the law requires of us or that we need in order to establish, exercise or defend a legal claim. Nothing else, to nobody else.
Your rights under UK GDPR
The right to be informed
The right to be informed encompasses our obligation to provide ‘fair processing information’, typically through a privacy notice such as this one. It emphasises the need for transparency over how we use personal data.
The right of access
You have the right to access your personal data and supplementary information. The right of access allows you to be aware of and verify the lawfulness of the processing. We respond within one month, and we do not charge for it.
The right to rectification
You are entitled to have personal data rectified if it is inaccurate or incomplete.
The right to erasure
Also known as ‘the right to be forgotten’. The broad principle underpinning this right is to enable you to request the deletion or removal of personal data where there is no compelling or legal reason for its continued processing.
The right to restrict processing
You have a right to ‘block’ or suppress processing of your personal data. When processing is restricted, we are permitted to store the personal data but not to process it further. We can retain just enough information about you to ensure that the restriction is respected in future.
The right to data portability
This allows individuals to obtain and re-use their personal data for their own purposes across different services. It allows them to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability.
The right to object
You may object at any time to processing based on our legitimate interests, including profiling, and to direct marketing. Where you object to direct marketing we stop, without exception and without needing to weigh anything up.
The right to withdraw consent
Where we asked for your consent and relied on it, you can withdraw that consent at any time. Withdrawing it does not make what we did beforehand unlawful, and it does not affect anything we do on a different basis.
To exercise any of them, email [email protected] or write to us at the address at the foot of this page. We may need to confirm who you are before we act, so that we do not hand your data to somebody else. We answer within one month, and exercising a right costs you nothing.
These rights are applied as directed by the guidance published by the Information Commissioner's Office: the ICO's guide to individual rights.
Automated decisions and profiling
We do not make decisions about you by automated means alone where those decisions have a legal effect on you or otherwise significantly affect you. Whether we can supply your company, on what terms and at what price, is decided by a person.
Use of cookies
We do use cookies. Cookies are small files that a site or its service provider transfers to your device through your web browser, if you allow it, which let the site recognise your browser and remember certain information. They also help us understand your preferences based on previous or current site activity, and let us compile aggregate data about site traffic and interaction so we can offer better experiences and tools in future.
We use cookies and similar technologies to:
- Remember your preferences, including your own cookie choice.
- Measure the performance of our advertising and attribute an enquiry to the campaign that produced it.
- Compile aggregate data about site traffic and interactions in order to offer better site experiences and tools in future. We also use trusted third-party services that measure this on our behalf.
Only the cookies this site needs in order to work are set without asking you. Analytics and advertising storage start in a denied state and are enabled by your choice on the cookie banner. You can change your mind at any time by clearing this site's cookies and site data in your browser, which brings the banner back.
You can also choose to have your browser warn you each time a cookie is being sent, or turn off all cookies, through its settings. Every browser is a little different, so look at your browser's help menu to learn the right way to change your cookie settings. If you turn cookies off, some features that make your experience of the site more efficient may not work properly. Our Cookie Policy covers this in more detail.
Analytics and advertising
This site loads Google Tag Manager, which in turn loads our measurement and advertising tags. Those tags run under Google's consent mode: analytics storage, advertising storage, advertising personalisation and the use of your data for advertising all start denied, and are only enabled if you accept on the cookie banner.
When you arrive from an advert, the click identifier and campaign parameters in the link are stored in your browser and attached to any enquiry you go on to submit, so that we can tell which advertising worked. That identifier tells us the click; it does not tell us anything about you that you have not given us yourself.
Google's own advertising requirements are summarised in Google's Advertising Principles.
Opting out
Declining on our cookie banner is enough to stop analytics and advertising storage on this site. Beyond that, you can set your preferences for how Google advertises to you on the Google My Ad Center page, or opt out of participating vendors through the Network Advertising Initiative and the Google Analytics Opt-out Browser Add-on.
Security
We take all reasonable steps to protect your personal information. Every employee and processor with access to personal data, and everyone involved in processing it, is obliged to respect its confidentiality, and access is limited to the people and suppliers who need it to do the job described in this policy. Data is held on secure servers, connections to this site are encrypted in transit, and our processors are bound by written contracts that hold them to the same standard.
No system is perfect. If a breach of personal data occurs and it is likely to result in a risk to your rights and freedoms, we report it to the Information Commissioner's Office within 72 hours of becoming aware of it, and we tell you directly where the risk to you is high.
International transfers
We aim to keep personal data within the United Kingdom. Some of our suppliers operate outside it, so some data is transferred abroad. Using the internet to collect and process personal data necessarily involves transmitting data internationally.
Where we transfer personal data out of the UK, we only do so where the law provides a route for it: to a country covered by UK adequacy regulations, or under the International Data Transfer Agreement or the UK Addendum to the European Commission's standard contractual clauses, supported by an assessment of the risk in the destination country. You can ask us which applies to a particular transfer, and we will tell you.
Making a complaint
If you are unhappy with how we have handled your personal data, tell us first: email [email protected] and we will look into it.
You also have the right to lodge a complaint with a supervisory authority at any time. In the UK that is the Information Commissioner's Office, and going to us first is not a precondition. Further information, including contact details, is available at ico.org.uk.