GDPR & PECR Compliance

Regent Pipeline (a trading name of DC Regent Group) acts as a controller for the personal data processed to deliver B2B client acquisition services, including account research, multi-channel outreach, and pipeline reporting.

This page sets out how we meet the UK GDPR and the Privacy and Electronic Communications Regulations (PECR). PECR sits alongside the GDPR and governs electronic marketing — the email, telephone, and cookie-based activity we deploy on behalf of our clients.

For prospects and recipients of outreach we process business contact data: name, job title, business email address, direct dial, and employer details, together with interaction data such as opens, replies, and meeting outcomes.

For clients and website users we process identity and contact details, engagement records, and technical data such as device, browser, and usage patterns collected through our website and analytics tools.

We rely on the following lawful bases under Article 6 of the UK GDPR: legitimate interests for B2B outreach and account research, consent where we rely on it for certain direct marketing or non-essential cookies, performance of a contract for client services, and legal obligation for compliance and record-keeping.

Where we rely on legitimate interests, we carry out a balancing test to ensure our interests do not override the rights and freedoms of the individuals concerned.

Unsolicited marketing emails to individuals are only sent with consent or where the soft opt-in exemption applies. For corporate recipients we rely on the legitimate interests of B2B marketing, sending to the published business contact details of organisations we reasonably believe are relevant to our clients' services.

Every marketing email identifies the sender, includes a valid business address, and provides a working unsubscribe mechanism. Suppression lists are applied immediately on opt-out or objection and honoured across all future campaigns.

We honour the Telephone Preference Service (TPS) and Corporate Telephone Preference Service (CTPS) for outbound calling, and screen all call lists against these registers before dialling.

The same PECR principles apply to SMS and any other electronic messaging channel: sender identification, an opt-out route, and screening against relevant preference registers.

PECR requires consent for non-essential cookies and similar tracking technologies. Essential cookies that keep the website functional are used without consent; analytics and marketing cookies are set only after you accept them through our cookie banner.

You can change or withdraw your cookie choices at any time through your browser settings or our consent preferences, though some features may not work without essential cookies.

We do not sell personal data. We share limited data with trusted service providers that support our operations — hosting, email delivery, analytics, CRM, and customer support tools — each bound by a data processing agreement.

Where a provider acts on our behalf, transfers are made under appropriate safeguards, including UK-approved standard contractual clauses for any international processing.

Prospect and outreach data is retained only for as long as it is relevant to active campaigns and then for a further review period, after which it is deleted or anonymised.

Client and transactional records are retained for the period required by tax, accounting, and anti-money laundering obligations.

Under the UK GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, to data portability, and not to be subject to solely automated decisions that produce legal or similarly significant effects.

You may exercise any of these rights by emailing operations@dcrgp.com. We will respond within one month of receiving a verified request. You may also opt out of marketing at any time using the unsubscribe link in our messages.

We apply industry-standard security controls, including encryption in transit and at rest, access controls, and secure infrastructure practices, to protect personal data from unauthorised access, loss, or misuse.

Access to campaign data is restricted to staff and contractors with a legitimate need, and our operational architecture is deployed via isolated container protocols to limit exposure.

If you believe we have processed your data in breach of the UK GDPR or PECR, please contact us first and we will do our best to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority, at ico.org.uk.

This policy takes effect on the date published on this page. We review and update it as our processing activities or the law change.

Material changes will be announced on this page, and continued use of the website or services after updates are posted constitutes acceptance of the revised policy.