Horrific experience.
Horrific experience.
I'm Co-Owner of a mental health business. I publish my email in order for our clients to message me. Recently, I've been snowed under with spam. I asked one company where they got my data from ,and they said from this outfit - Integra Data Solutions.
After multiple emails asking them to acknowledge my SAR and asking for a list of companies they have shared my data with, I received this from James Neale:
"Just to clarify one point: "legitimate interests" is the name of a lawful basis in data protection law. It refers to the basis on which a business may process B2B contact details, and for that basis the law does not require prior permission. It is not a claim about what personally interests you, and I'm sorry if that wasn't clear.
I don't think it would be useful for either of us to keep debating the legal position, so let me be practical. You are fully suppressed, your data will not be shared again.
If you remain unhappy, you are entitled to raise it with the Information Commissioner's Office at ico.org.uk, who will consider it independently. We are confident we have acted correctly and within the one-month period throughout"
This is a clear attempt at deflection.
I really don't think businesses should be allowed to operate in this way. I asked James:
"If you're going to share my data, don't you think you should first ask for my permission?"
and "Who are you to know what's of legitimate interest to me? How could you even claim to know that?"
He declined to respond.
I will be pursuing this and I will update my review when I have an outcome.