GDPR & Data Protection

1. Our approach

Utex processes two categories of personal data: Utex customer accounts, and business contact details sourced for B2B outreach on a customer's behalf. Both are handled under UK GDPR. Business contact processing relies on legitimate interests for B2B marketing, balanced against the individual's rights — which is why every email includes a working unsubscribe link and why suppression is enforced automatically, not left to individual customers to manage.

2. Legal basis for B2B outreach

• Legitimate interests — contacting a business email address about a product or service relevant to that business, under PECR's soft opt-in provisions for corporate subscribers.
• Sole traders and some partnerships are treated as individual subscribers under PECR, which is why signal-pack targeting exists — to keep outreach genuinely business-relevant, and Companies House checks (for UK targets) filter out dissolved companies before they're ever contacted.

3. Your rights as a data subject

If Utex (on behalf of a customer) has your business contact details, you can:

• Unsubscribe — every email includes a working link that adds you to the permanent suppression list immediately.
• Request access to what data we hold about you.
• Request erasure of your data outside of the standard unsubscribe flow.
• Object to processing under legitimate interests at any time.

To exercise any of these, email privacy@studioutex.com with the email address in question. We aim to respond within 30 days as required by law.

4. Suppression & bounce handling

Unsubscribes and hard bounces are added to a permanent, account-wide suppression list — a contact who unsubscribes from one campaign cannot be re-added by mistake in a future search. A bounce circuit-breaker automatically pauses sending if 20% or more of the last 20 sends failed, which also protects against processing data for addresses that are no longer valid.

5. Data source

Businesses are sourced via public business listings (name, address, phone, website) for the niche and location you search. For UK search targets, matches are additionally cross-checked against Companies House, a public register maintained by the UK government, and dissolved companies are excluded automatically. Business email addresses are identified through automated discovery and verified via MX record before being added to any list.

6. International transfers

Where infrastructure providers process data outside the UK/EEA, we rely on their standard contractual clauses and adequacy safeguards.

7. Data Protection Officer / contact

For any data protection query, complaint, or rights request: contact us or email privacy@studioutex.com. UK data subjects also have the right to lodge a complaint with the Information Commissioner's Office (ICO).