Privacy Notice
Version 1.0 — published September 2026.
Protect Margin is a trading style of Corporate Carbon Ltd, an independent franchise partner of Auditel (UK) Ltd. This notice explains what personal information we collect about finance directors and other business contacts, why we collect it, how we use it and what rights you have. We have written it in plain English because we think that is what a privacy notice is for.
1. Who we are
Corporate Carbon Ltd is the data controller for the personal information described in this notice. Registered in England and Wales, company number 13724257. Registered office: Kintyre House, 70 High Street, Fareham, PO16 7BB. ICO registration number: ZB288183.
If you have any questions about this notice or how we handle your information, contact Nikola Butler at [email protected] or write to us at the address above.
2. The information we hold and where it comes from
We only process business contact information, meaning details about you in your professional capacity. We do not knowingly process information about consumers, sole traders acting in a personal capacity, or anyone under 18.
Information we obtain from public and licensed business sources
For our prospecting activity we compile contact details of finance directors, chief financial officers and similar senior finance roles at UK businesses of roughly 50 to 500 employees. This information is obtained from LinkedIn Sales Navigator, from business data providers that supply professional email addresses (currently Evaboot and Apollo), and from company websites. It comprises: your name, job title, employer, business email address, business location, and the URL of your public LinkedIn profile. We also record the size and sector of your employer.
Information you give us
If you complete the Margin Protection Score, download our guide, book a Margin Review call, reply to one of our emails or contact us in any other way, we hold what you provide: typically your name, business email, company, the answers you give in the scorecard and the score it generates, your stated areas of interest, and the content of any correspondence.
Information generated by our systems
Our email software records whether an email we sent to you was delivered, whether a link in it was clicked, and whether you replied. We do not use open-tracking pixels in prospecting emails. Our website uses cookies as described in section 9.
3. Why we use your information and our lawful basis
UK data protection law requires us to have a lawful basis for each use of your information. Ours are set out below.
| What we do | Why | Lawful basis |
|---|---|---|
| Send you a short series of business-to-business emails introducing our procurement service | To offer a service that is relevant to your role — managing indirect supplier costs — to businesses of a size where a dedicated procurement function is unusual | Legitimate interests (Article 6(1)(f) UK GDPR). We have completed and recorded a legitimate interests assessment. You can object at any time — see section 7. |
| Provide the Margin Protection Score, your results report and the FD's guide | You asked for them | Performance of steps at your request prior to a contract (Article 6(1)(b)), and legitimate interests |
| Arrange and hold a Margin Review call and follow up on it | You asked for it | As above |
| Send follow-up information after you have engaged with us (scored, downloaded, replied or booked) | To continue a conversation you started | Legitimate interests; you can stop these at any time |
| Keep a record of who has asked not to be contacted | So that we honour that request | Legal obligation and legitimate interests |
| Check prospects against Auditel's existing client records | To avoid contacting businesses that already work with an Auditel partner | Legitimate interests (ours, Auditel's and yours) |
Where we rely on legitimate interests we have considered whether our use of your information is proportionate, whether you would reasonably expect it, and whether it could cause you harm. We have concluded that occasional, relevant, easily-stopped business email to senior finance professionals about a service within their remit meets that test. Our assessment is available on request.
4. Who we share your information with
We do not sell your information and we do not share it with anyone for their own marketing. We share it only with:
- Auditel (UK) Ltd and, where you engage a service, the relevant Auditel category specialist, under the terms of our franchise agreement;
- the software suppliers that process it on our instructions (our 'processors'): Instantly.ai (email sending), ScoreApp (the scorecard), Get Leverage Online / HighLevel (our contact database and follow-up emails), Calendly (call bookings), Evaboot and Apollo (contact data), Google Workspace and GoDaddy (email hosting and website), and email verification services;
- professional advisers, insurers and regulators where required by law.
5. International transfers
Some of our processors store information outside the UK, principally in the United States and the European Economic Area. Where that happens we rely on the UK's adequacy regulations, the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework, as applicable to each supplier. Details are available on request.
6. How long we keep it
- Prospecting contacts who never respond: deleted no later than 12 months after the last email we send.
- Contacts who engage (score, download, reply or book): retained while we have an active conversation and for 24 months after our last contact, then deleted unless a client relationship has started.
- Do-not-contact records: retained indefinitely, holding the minimum information needed to make sure we do not contact you again.
- Client records: retained for the duration of the engagement and six years afterwards for legal and accounting purposes.
7. Your rights
You have the right to ask us for a copy of the information we hold about you, to have it corrected or deleted, to restrict how we use it, to receive it in a portable format, and — importantly for prospecting — to object to our use of it. If you object to receiving our emails we will stop, without needing a reason from you, and we will keep your details only on our do-not-contact list.
The quickest way to stop our emails is to reply to any of them with 'no thanks' or 'unsubscribe'. You can also email [email protected]. We aim to act on objections within two working days and on other requests within one month.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would ask that you give us the chance to put things right first.
8. Security
Your information is held in the systems listed in section 4, each of which is protected by access controls and encryption in transit and at rest. Access within Corporate Carbon Ltd is limited to David Wilshin and Nikola Butler, who work on the Protect Margin campaign.
9. Cookies and the website
protectmargin.com and protectmargin.co.uk use only the cookies necessary for the site and its forms to work. We do not use analytics cookies. The scorecard is hosted by ScoreApp and its own cookie notice applies when you use it.
10. Changes to this notice
We will publish any changes here and update the version number at the top. Material changes to how we use prospecting data will be reflected in our emails.
Corporate Carbon Ltd · Protect Margin
[email protected]