Privacy notice
Postal marketing privacy notice
How we use public Companies House information when we contact business prospects by post.
Last updated: 1 September 2026
Your right to object to direct marketing
You can object at any time and free of charge. We will then stop using your personal information for direct marketing.
Email support@certnudge.co.uk or write to IncaStack Ltd at the registered-office address below. You do not need to create an account or give marketing consent.
We will keep only the minimum suppression information needed to make sure a later Companies House refresh does not cause us to contact you again.
Who we are
IncaStack Ltd, trading as CertNudge, is the controller of the personal information described in this notice.
IncaStack Ltd9 Devonshire Drive
Duffield, Belper
England, DE56 4DD
- Company number: 16562423
- ICO registration: ZB954023
- Email: support@certnudge.co.uk
Why we contacted you
We obtained your name, business role and correspondence details from the public Companies House register. We use public company information to identify active UK companies whose recorded business activity may make CertNudge relevant to the person responsible for their property compliance records.
These public records are only relevance signals. They do not tell us that you personally own a property, that your company has a particular residential portfolio or that you need CertNudge.
We use the information to contact you by post about CertNudge, deal with returns and objections, assess our postal campaigns and avoid contacting people who have objected.
Information we use
- Your name and public director or officer role.
- Company name, company number and current public registered office.
- Public business classification and filing information used to assess possible campaign relevance.
- Companies House as the source.
- The shared campaign key and any return or objection status.
We do not add personal email addresses, telephone numbers, social-media details, property ownership information from another source, special-category data or recipient-specific web tracking to these postal campaigns.
Our purpose and lawful basis
We rely on legitimate interests under UK data-protection law. Our interest is to market CertNudge's compliance-records service to relevant UK property-business decision-makers and assess whether postal marketing is useful.
We complete a legitimate-interests assessment covering purpose, necessity and the impact on recipients. Safeguards include bounded campaign selection, public business-context information, manual review, data minimisation, no contact-detail enrichment, no recipient-specific tracking, a clear objection route and suppression before any mailing export.
You were not required to provide this information to us and we are not relying on your consent for this postal letter.
Who receives the information
Access to the working prospect list is restricted to the CertNudge product owner. If we appoint a printing or mail-fulfilment supplier, it will receive only the name, company and delivery details needed to produce and send the letter. It must act on our written instructions, protect the information and delete its working copy after fulfilment and reconciliation.
We may also disclose information where required by law, to a regulator, or to professional advisers subject to appropriate confidentiality duties. We do not sell the prospect list.
The working prospect list is stored in the UK. We do not intend to transfer it outside the UK. If that changes, we will assess the transfer, use the safeguards required by UK data-protection law and update this notice before the transfer takes place.
How long we keep the information
| Record | Retention |
|---|---|
| Unsuccessful prospect working record | Deleted 90 days after the documented review of the campaign in which we contacted you. |
| Printing or mail-supplier working copy | Deleted promptly after fulfilment and reconciliation. |
| Postal suppression record after an objection | The minimum information is kept while we continue postal marketing and reviewed annually. |
| Campaign results without recipient information | Kept under our approved aggregate analytics and reporting period. |
Your data-protection rights
Depending on the circumstances, you may ask us for access to your personal information, to correct it, erase it or restrict its use. You can also object to processing based on legitimate interests.
Your right to object to direct marketing is absolute. If you object, we will stop using your information for direct marketing. An objection does not require us to erase the minimal suppression record needed to respect it.
To exercise a right or make a data-protection complaint, email support@certnudge.co.uk or write to our registered office. We may need enough information to identify the relevant record securely. We will acknowledge a complaint within 30 days and respond without undue delay. We normally respond to rights requests within one calendar month.
Automated decisions and tracking
We do not use this information to make solely automated decisions with legal or similarly significant effects. Any campaign URL is shared across the relevant mailing and contains no recipient identifier. Website request counts are not treated as proof that a particular person visited.
Complaining to the ICO
We would welcome the opportunity to address your concern first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data-protection regulator.
Make a data-protection complaint to the ICO or telephone 0303 123 1113.
Other CertNudge privacy information
This notice covers public-source information used for postal marketing. Our general Privacy Policy explains how we handle information when you visit the website, request a resource or create a CertNudge account.