Data handling principles
Trust before technology.
Pre-launch overview · Last updated 16 August 2026
Client-approved data only
Touch Base does not build campaigns from scraped cold lists. Proposed campaigns use data supplied or explicitly approved by the client and are assessed individually before launch.
Campaign assessment
The assessment considers the source and age of the data, the original collection context, the proposed lawful basis and purpose, the intended message, sender identity, opt-out process and any client-specific requirements.
Purpose and access
Campaign data should be used only for the agreed engagement, accessed only by authorised people and systems, and limited to what is necessary for that purpose.
Transparency and choice
Messages should clearly identify the business being represented and provide a straightforward way to opt out. Suppression requests should be respected throughout the campaign.
Retention and deletion
Retention and deletion arrangements are agreed for each engagement. Campaign data should not be kept longer than required for the agreed purpose, reporting and applicable obligations.
Responsibility
These principles do not replace a client’s own legal obligations. Roles, instructions, security requirements and data-processing terms must be confirmed before live personal data is transferred.