Privacy notice — website & prospect data
OSP Advisory Ltd · Last updated: 1 April 2026
1. Who we are
OSP Advisory Ltd (“we”, “us”, “our”) is the data controller responsible for personal data processed through this website and in connection with our prospect intelligence services.
- Data Protection Lead: Raymond O’Sullivan
- Email: privacy@ospadvisory.uk
- Postal: 16 Ability Plaza, Arbutus Street, London E8 4DT
- ICO registration number: ZC116315
2. What this notice covers
This notice explains how we process personal data in two contexts:
- Website visitors — when you visit our website, contact us, or sign up for our services
- Prospect data — when we process publicly available Companies House data to score and rank UK companies
If you are an existing client of OSP Advisory, please also refer to our Client Privacy Notice, which covers the processing of your data in connection with our services.
3. Website visitors
Data we collect
| Category | Examples | How collected |
|---|---|---|
| Usage data | Pages visited, time on site, referral source, browser type, device type, IP address | Automatically via cookies and analytics |
| Contact data | Name, email address, phone number, company name | When you contact us or sign up |
| Communication data | Content of messages, enquiries, and correspondence | When you contact us |
How we use it
| Purpose | Legal basis |
|---|---|
| Operating and improving our website | Legitimate interest |
| Responding to your enquiries | Legitimate interest; performance of contract (if you become a client) |
| Sending you marketing communications (if you opt in) | Consent |
| Analytics and understanding website usage | Legitimate interest |
Cookies
We use essential cookies to operate our website and, with your consent, additional cookies as set out in our Cookie Policy.
4. Prospect data — Companies House scoring
What we do
We collect and analyse publicly available data from Companies House (and other public registers) about UK companies. We use proprietary scoring methods to rank companies based on factors including accounts filing patterns, financial indicators derivable from public filings, company age, sector and size, director appointment patterns, and confirmation statement filing patterns.
We use these scores to:
- identify companies that may benefit from our bookkeeping and advisory services (for our own business development); and
- provide scored prospect data to subscribing accountancy firms through our Prospect Intelligence data licensing service.
What personal data is involved
Companies House data includes the names of company directors. Directors’ names, combined with the company they are associated with, constitute personal data. We process director names, service addresses (not residential addresses), appointment and resignation dates, and nationality and month/year of birth as published by Companies House.
We do not process directors’ residential addresses, personal financial data, or any data from non-public sources about directors personally.
Legal basis
Our legal basis for processing directors’ personal data for scoring and sharing purposes is legitimate interest (Article 6(1)(f) UK GDPR). Directors’ names and service addresses are already publicly available on Companies House, and directors have a reasonable expectation that their publicly filed information will be accessed by third parties. Our scoring relates to companies, not to directors personally, and we provide an opt-out mechanism (below).
Who we share prospect data with
We share scored prospect data with subscribing accountancy firms through our Prospect Intelligence service. These firms are independent data controllers. Our data licensing agreements require subscribers to comply with data protection law and email marketing regulations (PECR), apply our suppression/opt-out list, and delete data on termination of their subscription.
Your right to opt out
If you are a company director and you do not want your name to appear in our scored datasets, you can opt out. Contact us at privacy@ospadvisory.uk with the subject line “Prospect Data Opt-Out”, including your full name and the company number(s) you are associated with.
We will remove your name from our scored datasets within 14 days, add you to our suppression list to prevent re-inclusion, and notify our data licensing subscribers to apply the suppression. Opting out of our scored datasets does not remove your data from Companies House itself.
5. Marketing communications
We may send marketing communications to corporate email addresses where we have a legitimate interest in doing so and the communication relates to our services. If you are a sole trader or individual, we will only send you marketing communications with your consent. Every marketing email we send identifies OSP Advisory Ltd as the sender, includes our contact details and postal address, and contains an unsubscribe link that works immediately.
6. Data retention
| Data type | Retention period |
|---|---|
| Website analytics | 26 months |
| Contact form submissions | 24 months (or until you become a client, at which point the Client Privacy Notice applies) |
| Prospect scoring data | Refreshed monthly; historical scores retained for 12 months for model improvement |
| Suppression/opt-out list | Indefinitely (to ensure we continue to honour opt-outs) |
7. International transfers
Our website and prospect data systems may use service providers based outside the UK. We ensure appropriate safeguards are in place for any international transfers.
8. Your rights
You have the rights of access, rectification, erasure, restriction, portability, and objection. Particularly relevant to prospect data:
- Right to object: you can object to our processing of your personal data for prospect scoring purposes. In practice, we will honour all objections by adding you to our suppression list.
- Right to erasure: you can request that we delete your personal data from our scored datasets. We will comply unless we have a legal obligation to retain it.
To exercise any of these rights, contact us at privacy@ospadvisory.uk. We will respond within one month. In complex cases or where we receive multiple requests, we may extend this by a further two months, but we will inform you within the first month. We do not charge a fee for exercising your rights, unless a request is manifestly unfounded or excessive.
9. Complaints
You have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk · 0303 123 1113.
10. Changes
We may update this notice from time to time. Material changes will be posted on this page with an updated date.