01 / Understand the source
How was the information collected, and what were people told about its intended use?
RESPONSIBLE DATA
Trust is built
into the brief.
Responsible marketing is not a badge applied after the event. It starts with the source, the intended use, the person’s expectations and clear responsibilities on every side.
FCA STATUS
Authorised and regulated by the Financial Conduct Authority in respect of regulated claims management activities. Firm Reference Number 835708. Check the register ↗
ICO REGISTRATION
Registered with the Information Commissioner’s Office. Registration ZA324659. Check the register ↗
UK FRAMEWORK
Campaigns are assessed against applicable UK data protection and direct marketing requirements, including UK GDPR, the Data Protection Act and PECR.
BEFORE DATA MOVES
Four questions.
Every time.
The answer depends on the exact source, purpose, channel and audience. We document the reasoning rather than relying on a blanket claim.
02 / Assess the contact
Is the channel and proposed contact appropriate for the purpose and lawful basis?
03 / Respect preferences
Which screening, suppression, objections and opt-outs must be applied and maintained?
04 / Keep roles clear
Who controls the purpose, receives the data, retains it and responds to individual rights?
SECTOR EXPERIENCE
The rules change
by sector. So do we.
Regulated industries carry expectations beyond general data protection law. We plan for them from the outset, not after the fact.
- Financial services & claims management
- FCA conduct rules, financial promotion requirements and treating-customers-fairly principles shape every campaign in this space.
- Insurance & protection
- Vulnerable customer safeguards and clear, fair product representation are built into the brief, not bolted on.
- Energy & utilities
- Switching campaigns are planned around supplier accountability and clear cooling-off information.
- Broadband & telecoms
- PECR-compliant electronic contact and clear tariff information are the baseline, not the exception.
- Home & consumer services
- Removals, home improvement and local trades still carry consumer protection obligations, and we plan for them.
SECURITY & ACCOUNTABILITY
Protect the record through its lifecycle.
Access, transfer, use, feedback and deletion are all security decisions. The delivery method and audit trail are part of the campaign design.
Access is limited to people who need it. Transfers use agreed secure channels. Suppressions and outcomes are handled as part of the workflow, not as loose files outside it.
Specific technical and contractual controls are confirmed for each engagement.
IMPORTANT CONTEXT
Compliance is campaign-specific.
Buying or receiving data does not automatically make a proposed use compliant. Each organisation must assess its own purpose, lawful basis, transparency, channel and responsibilities.
This page describes Aura’s approach; it is not legal advice or a certification. Read our privacy policy, terms & conditions and complaints procedure.
PUT RESPONSIBILITY IN THE BRIEF