Legal
What personal data we hold, where it came from, why we are allowed to hold it, and how to make us stop. Written to be read rather than survived.
Version 1.0 · 26 July 2026
DE LIMA Collective is a lead generation agency registered in England and Wales, company number 17222351. Write to support@delima.uk or call +44 24 7542 6883.
To complete before publishing
Add the registered office address. A privacy notice has to give the controller's postal address. Add the ICO registration number once it exists: most UK businesses that process personal data must pay the data protection fee and register at ico.org.uk, and a lead generation agency is not exempt.
Three different groups of people arrive at this page, and the answers are not the same for each.
The card carried the name of an accounting firm, not ours. That firm is our client. It holds one postcode district exclusively and decided a campaign should run there. We built the card and posted it on the firm's behalf, which is why our name is nowhere on it.
Your company name and number, its registered office address, its incorporation date, its SIC code, and the name of the director as it appears on the register. Nothing else. We add nothing from other sources and we buy no lists.
The public register maintained by Companies House, which is free and open to anyone. We filter it by SIC code and postcode, then take out dormant companies, holding vehicles, and addresses used by formation agents.
Legitimate interests, under Article 6(1)(f) of the UK GDPR. The data is public and commercial rather than private, it identifies you in a business role, the contact is one addressed letter, and you can object at any time and we will stop. The consent rules in PECR govern electronic marketing and do not apply to addressed post. We keep a written assessment of that balance and will send you a copy if you ask.
We print one card showing your company's own statutory deadlines, calculated from its incorporation date, and post it. Printing and posting is carried out by Stannp, a UK printer working to our instructions under contract.
If you scan the code and give us your email address, that is a separate step you chose to take. It gets you the full schedule and a reminder before each deadline. You can withdraw at any time using the link at the bottom of any reminder.
Two things to settle before publishing
First, the written legitimate interests assessment this section promises has to exist, because a data subject can ask for it. Your business plan already lists it as an open action.
Second, decide formally whether the accounting firm is the controller for these campaigns and DE LIMA the processor, or whether the two of you are joint controllers. It changes who owes this notice, who answers a subject access request, and who carries the liability, and it belongs in the client contract. Worth a solicitor's hour.
Your name, your firm, your role, your business phone number and email address, and sometimes a note of what we talked about.
Companies House, your firm's own website, and LinkedIn. All of it is information your firm publishes about itself.
Legitimate interests again. This is business to business, the details are professional rather than personal, and the subject is a service your firm might buy. Say the word and we stop.
When you do, we will not simply delete you. We keep your firm's name and number on a suppression list, because deleting you is precisely what would let you reappear the next time we pull the register.
This site sets no cookies. No analytics, no tracking pixel, no session recording, no form. We do not know you have been here.
Two exceptions, and they are honest ones. The typefaces load from Google Fonts, so Google receives your IP address when the page opens. And clicking “Book 15 minutes” takes you to Google Calendar, where Google's own terms take over.
Worth doing
Google Fonts is the only third party on the page, and it can be removed completely by downloading the three typefaces and serving them from delima.uk. German courts have fined site owners for hotlinking them, so this is not purely cosmetic. Also name the hosting provider here, because its server logs will hold visitor IP addresses.
To confirm before publishing
These four periods are proposals, not law. Read them, decide whether they describe what you will actually do, and change any that do not. A retention period you ignore is worse than a longer one you keep.
A short list of suppliers processes data on our instructions and under written contract. None of them may use it for anything of their own.
We have never sold personal data and we are not going to. It is not a business we are in.
To complete before publishing
Add the email and automation tools once they are chosen, plus the hosting provider. For each one, check whether it stores data outside the United Kingdom, and if it does, record which safeguard covers the transfer.
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, ask for it in a portable form, and object to us using it at all.
For direct marketing the right to object is absolute. There is no balancing test and no discretion on our side. You say stop, we stop.
Write to support@delima.uk. We answer inside one month, usually inside five working days, and there is no charge.
If we handle it badly, complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. You can go to them directly and you do not need to come to us first.
This is version 1.0, dated 26 July 2026. If we change it, the version and date at the top of the page change with it. If a change matters, we will say so on the campaigns it affects rather than quietly editing this page.
