Marketing To Individuals
If you are going to market to individuals this will involve the processing of their personal data – usually their name, email, phone number, home address etc.
GDPR requires that you always have a legal ground to process an individual’s personal data. This is going to be either that you have their consent to market to them or it is in your legitimate interests to do so. Where you rely upon legitimate interests you have to consider the impact of the marketing on the individual. It is always best to carry out a ‘Legitimate Interests Assessment’.
Where marketing is done electronically by email, or text or automated calls then there are other rules to consider. These are set out in the Privacy and Electronic (Communications) Regulations of 2003 -known as ‘PECR’. Unless the soft ‘opt-in’ applies then consent [to the GDPR standard] has to be secured before marketing can take place.
DPA/OK can advise you as to the law when it comes to marketing so that you do not get in to trouble with potential customers or the data regulator – the Information Commissioner’s Office[(‘ICO’].