We hold the names and contact details of individuals acting in their capacity as representatives of their organisations, across the business.

Where the interaction relates to suppliers, contacts, building management, IT services, etc. the legal basis is article 6(1)(c) of the GDPR for any legal obligation or article 6(1)(f) because the processing is within our legitimate interest as a business.

Where the interaction relates to a partnership, or support of one of our services or campaigns the legal basis is article 6(1)(f) of the GDPR because processing is within our legitimate interest as a business.