Privacy policy.

Who are we?

Data OD Ltd (trading as DataOnDemand or are a UK consumer data aggregator. This means that we gather information about people from different data sources called Data Contributors. The data includes loan applications, competitions entries, newsletter subscriptions and public databases such as the Edited Electoral Roll, the Land Registry and the Energy Performance database. We combine this information to create a Single Customer view so we can provide your information to other companies who want to contact you about their products and services. These other companies are called Third Party Controllers and we share your information with them.

Our Data Collection Practices

Data OD Ltd is a leader in the marketing services industry, so we adopt and implement best practices and diligently seek to follow all laws governing the acquisition, compilation and distribution of consumer data. These practices include careful screening of data sources, ongoing internal audits, and appropriate consumer notice and choice.

Why do we process your information?

We process your information to share with Third Party Data Controllers to bring you information about Products and Services that may be of interest to you and include such things that may help you save money, borrow money, reduce debt, increase earnings, improve your credit rating, improve your health and fitness, create more value for money, get better results and create benefits for you and your family.

Why do we share your information with Third Party Controllers?

We only share your information if you have given explicit consent. This means that you have made a positive action to opt-in and agree to Third Party Controllers contacting you directly or passing on your information to a Sub Processor to contact you. A Sub Processor may be a Call Centre who are employed by a Telecoms or Utility company to inform you about Products and Services that may be of benefit to you, for example.

When you have registered, applied or made an entry on a Data Contributor’s website or app you will have been given the option to agree to third party marketing by the channel/s that you specified. Typically, you will have four options to choose from which are Telephone, SMS (Text Message), Email or Post.

You can select one or all options depending on your preferences. Your ability to process a loan application, enter a competition draw or subscribe to a newsletter is not affected if you choose to decline and opt-out of sharing your information with Third Party Controllers.

For a list of Products and Services provided or promoted by Third Party Controllers and Sub Processors go here.

How do we process your information?

Your information is processed to:

Supply to your data to Third Party Controllers

Ensure accuracy by combining data and insights from multiple Data Contributors

Restrict marketing communications for consumers registered with MPS or TPS

Update the data using Equifax’s DisConnect product to identify people who have moved home or are deceased

Remove your data from our database and Third Party Controller databases

Respond to your requests for information

Update and correct the accuracy of the data

Combine data from multiple Data Contributors and publicly available databases to make assumptions using combined data to create marketing profiles.

Provide you with marketing information about products and services that are listed in the Privacy notice on Data Contributor’s websites.

Create marketing profiles using information provided in your application i.e. Loan Purpose, Marital Status or Employment Industry, for example.

To maintain a suppression file of data that has withdrawn consent for Third Party Controllers

Enrich your information by appending information available from Government ‘Open’ data e.g. Land Registry ( or the EPC Register ( to create marketing profile

Create marketing categories derived from information you have provided including Demographics – age, gender, marital status, number of children, occupation Behavioural and lifestyle – hobbies, sporting activities, travel preferences, high-tech equipment users and purchasing behaviour, Property Information – property type, property value and tenure and Life events – consumers who have recently moved home or had a baby, Transactional – expenditure, income, Automotive – Make and Model of Vehicle

Derive information pertaining to individual customers such as Gender, Marital status, Actual and estimated age range, Estimated income, Education level, Household status (head of household, spouse, elderly parent, young adult), Lifestyle interests (e.g. product ownership, interests and hobbies, travel, charities supported etc)

Derive information pertaining to Households such as Property type, whether a household rents or owns a home, The estimated value of a home, Length of residence, Number of adults, Telephone number, Presence of children, Estimated Household income

To create Custom Audiences on Facebook and Google Platforms.

Where you have given your explicit consent to share your information with a third party controller your information may be processed by the companies listed within this Privacy Policy.

Third party controllers may contact you by email, SMS, telephone or post depending on the level of consent you have given.

How do you withdraw your consent for marketing?

Withdrawing consent is simple. You can email with your request to withdraw your consent. Please include your First Name, Surname, [Mobile, Landline or Email] and Postcode so we can identify you and remove your information from the database.

It can take up to 28 days to remove your information from all Third Party Controllers.

If you continue to receive marketing message after 28 days after your request to withdraw your consent please contact us directly.

Alternatively, you can call us on 01134 266550. Our office opening hours are Monday to Friday between 8:30am and 5:30pm.

Please be aware that a Subject Access Request can only be accepted in writing and we cannot give out personal information over the telephone without first taking the required steps to satisfy our obligations to GDPR, the ICO and the Data Protection Act.

You may withdraw your consent at any time.

More useful information to manage your marketing preferences below:

Postal Marketing – You can opt out of postal marketing by registering with the Mail Preference Service (MPS) at This is an industry wide service that is administered by the Direct Marketing Association and recognised by the Information Commissioner.

Telephone Marketing – You can opt out of all telemarketing activity by registering their details with the Telephone Preference Service (TPS) at The TPS is similar to the MPS but is administered by the Information Commissioner.

Email Marketing – Unlike Postal or Telephone channels, there is no industry-wide service to opt out of email marketing. Therefore consumers should always review privacy policies and marketing opt-in check boxes when registering for services or purchasing products online. Where unwanted email marketing is received, consumers should unsubscribe or use spam filters to prevent future communications.

Online Advertising – Marketing data is widely used to inform the advertising that is displayed when browsing online. Whilst digital marketers generally do not know the identity of the individual viewing a page, they are able to understand their likely characteristics based on their browsing behaviour or location in order to display a more relevant advert. If you would prefer not to receive targeted advertising in this way, there are a number of options available:

Cookies – are small files used by websites to recognise returning visitors and tailor content or advertising more effectively. Declining cookies when visiting websites will prevent those sites from displaying targeted advertising, whilst all modern browsers have a setting to clear cookies, which will delete all cookie data stored from previous website visits.

More information about the use of cookies for online advertising, together with further opt-out options can be found at

Mobile devices – cookies used for advertising do not generally work on mobile devices, however, advertisers can still recognise returning visitors both when browsing online and when using apps through the use of an ‘Advertising ID’. The Advertising ID is created by the mobile device, but can be reset at any time, thereby deleting all data held against it. Instructions on resetting Advertising ID’s will vary by device but can be found here for Apple devices, or here for Android devices.

What information do we aggregate?

When you register your information with our Data Contributors you may provide any of the data fields listed below. We aggregate this information and process it by combining data to create a Single Customer View.


Categories of Data Types of Data
Banking Card type, Sort code
Pension Do you have a pension, Pension income
Employment Employer name, Employment industry, Job Title, Length of employment – Years and Months
Contact Information First Name, Surname, Postcode, House Name, Street, Town/City, Country, Home Phone, Mobile Phone, Employer Phone Number, Email
Demographic Gender. Marital status, number of dependants
Property Homeowner status, Time at Address – Years and Months
Digital IP Address, Device Type
Financial Loan amount, Loan purpose, Length of loan, Monthly income, How are you paid, How often are you paid, Next pay date, Rental/mortgage payments, Other expenses, Utilities/Bills, Transport, Food, Other income, Lender Decision


In addition to the Data Fields that you may input during an application, entry or submission we may also combine data from the publicly available databases listed below at an Individual level, relating to you, or a household level, relating to your household.

Publicly Available Databases

The Land Registry

The EPC Register

Electoral Roll

Combining data

The information you give us may be combined with other information about you that is obtained from other sources. The combination is usually undertaken with a view to enhancing an existing database with more information. For example:

If you are already a customer of a third party, that third party might wish to add an e-mail address you give us to the customer records that it holds about you, and use that email address to maintain their relationship with you and/or to offer you goods and services that are similar to those you have previously purchased.

The information you give us may be compared with data available elsewhere to verify your identity or validate the information you have provided (for example in the context of anti-fraud measures).

Anonymised information about you may be combined with information about your devices (or cookies deployed on your devices) to improve the relevance of advertising material on websites you visit.

We may also use data acquired from Facebook that has been collected from websites and applications that allow you to connect with them using your Facebook profile. You can manage you privacy settings on Facebook here

Who do we share your information with?

We may share your information with any of the Third Party Controllers or Sub Processors listed in the Marketing Partners list here. Your data may also be shared with future companies promoting the Products and Services listed here.

How can you access the information we hold about you?

You must make a Subject Access Request (SAR) to access information that we hold about you.

A SAR must be made in writing in the form of an email or written letter.

In order for us to process your request it is our responsibility to identify you and be satisfied that you are the individual whom the data relates to. You cannot make a SAR on behalf of someone else unless you have the required written authority or demonstrable Power of Attorney.

The simplest way to make a SAR is to email us at or alternatively you can write to us at Data Protection Officer, Data OD Ltd, Platform, New Station Street, Leeds, LS1 4JB.

With any SAR you must include the following information –

First Name


Full Address

The channel from which you have received marketing communication e.g. Telephone Number, Email Address or Postal Address

A copy of a recent Utility bill (or similar) that verifies your address

We may charge you a fee depending on your request and that fee can be up to £10.00 per request.

When have received the information outlined above we will contact you to process your SAR.

For more information and advice on what you are entitled to then please carefully read the information from the UK Supervisory Authority here

Our security measures

We are aware of the importance of safeguarding the information under our control and endeavour to take all reasonable steps to protect it. All data collected through from our data contributors is stored on secure servers, and we have stringent security and confidentiality procedures covering the storage and disclosure of such information in accordance with the Data Protection Act 1998.

However, providing information and transacting over the internet has inherent security risks, and we cannot be held responsible for any breach of security which is outside our reasonable control or not due to our negligence or wilful default.

Changes to our Privacy Policy

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.

How to contact us

If you have any comments or queries about this privacy policy, please email us at or call us on 01134 266 550.