ICO Registration
ZA282620
Registered with the Information Commissioner's Office. Registration number ZA282620.
Verify on the ICO register →
/ Compliance
ICO ZA282620
Compliance is the spec.
3 Dotz Limited operates as an ICO-registered UK consumer data business. Compliance isn't a sales line — it's the operational floor everything else sits on.
Registrations & framework
The registrations we hold, the rules we work under.
UK GDPR
Lawful basis, first.
All processing of personal data is conducted under UK GDPR. Lawful basis established before contact; consent records held and auditable.
PECR
Electronic marketing conduct.
Privacy and Electronic Communications Regulations govern electronic marketing conduct. Consent captured pre-contact for email, mobile and automated calls where required.
MPS / TPS / CTPS
Screened every campaign.
Every campaign screened against Mailing Preference Service, Telephone Preference Service, and Corporate TPS pre-deployment. Suppression evidence held with each campaign audit.
Buyer suppression
Stop files, layered on.
Buyer stop files accepted via secure Citrix ShareFile transfer before deployment. Net deployable volume confirmed on brief.
Source integrity
Consumer Connect.
Consumer Connect draws on the UK's leading licensed consumer data sources. Every underlying source is used under licence and rebuilt quarterly.
Positioning
What we don't do.
We don't market on compliance — it's the operating floor. We don't hold FCA authorisations because we don't advise on regulated products. We supply leads. The contract ends there. Regulated conduct with the consumer (advice, sales, contracts) belongs to the buyer, and we choose buyers who understand that.
Data conduct principles
How we handle the data.
01
Purpose
Purpose-limited processing.
Data cut from Consumer Connect is used only for the purpose declared on brief. No secondary use, no resale beyond the licensed buyer.
02
Sensitive data
Sensitive-data conduct.
Where audiences may include vulnerable consumers, briefing calls flag it and Aggy will decline campaigns that don't sit comfortably against the vulnerable-consumer conduct expected of the sector.
03
Suppression
Suppression before deployment.
Every campaign is suppression-screened before records are delivered. Buyer stop files layered on top. Net deployable volume is what the buyer contracts for.
04
Audit
Audit trail.
Consent records, screening evidence, and campaign parameters held against every campaign. Available on request to the buyer or the ICO.
DPA & contract
Controller to controller.
Every buyer engagement is contracted with a Data Processing Agreement — Aggy is the data controller for Consumer Connect; the buyer is the controller for their own campaign use of the records supplied. DPAs are exchanged pre-first-order.
Compliance
Questions on our compliance approach?
Aggy handles compliance questions directly — from lawful basis to suppression evidence to the DPA. Ask before you brief.