Last updated: 28 September 2026

This Privacy Policy explains how I Want That Ltd, trading as TPS Services ("TPS Services", "we", "us" or "our"), collects, uses, shares and protects personal information. It also explains the rights available to individuals under UK data protection law.

1. Who we are

I Want That Ltd is registered in England and Wales under company number 07314202. TPS Services is a trading style of I Want That Ltd.

I Want That Ltd trading as TPS Services
Registered office: Kemp House, 152–160 City Road, London, EC1V 2NX
Telephone: 0343 005 9576
Email: info{@}tpsservices.co.uk

TPS Services provides services that enable organisations to screen and suppress telephone data against the Telephone Preference Service (TPS), Corporate Telephone Preference Service (CTPS) and, where applicable, Fax Preference Service (FPS) registers. We also provide telephone validation, data cleansing, API and related data-management services.

Our Data Protection Contact is Richard Kane. Questions about this policy or our use of personal information may be submitted through our Contact Us page, by telephone on 0343 005 9302, by email to info{@}tpsservices.co.uk, or by writing to the registered office above.

2. When we are a controller and when we are a processor

TPS Services acts as a controller when we decide why and how personal information is used. This includes personal information relating to our customers, prospective customers, website visitors, account holders, suppliers and business contacts.

When a customer supplies data to us for screening, validation, suppression, cleansing or another service, the customer will normally be the controller and TPS Services will act as its processor. In that situation, we process the supplied data only on the customer's documented instructions, as necessary to provide the requested service, and in accordance with our agreement with that customer.

This Privacy Policy principally describes the processing for which TPS Services is the controller. Our contracts and data-processing terms provide further information about processing carried out on behalf of customers.

3. Personal information we collect

Depending on how you interact with us, we may collect and use:

  • your name, job title, organisation and business contact details;
  • your postal address, email address and telephone number;
  • account details, login information and account preferences;
  • billing, payment, purchase and transaction information;
  • communications with us, including support requests and correspondence;
  • marketing preferences and records of consent, objections and opt-outs;
  • IP address, browser, device and website usage information;
  • API requests, service activity, security logs and audit records; and
  • personal information contained in data supplied by customers for processing.

We usually obtain personal information directly from you or from the organisation for which you work. We may also receive information from a TPS Services customer, a service provider, publicly available business sources, or automatically when you use our website and services.

4. How and why we use personal information

Activity Purpose Lawful basis
Account registration and administration To create, maintain and secure your account and provide account-related information Contract; legitimate interests
Providing services To process orders and provide screening, validation, suppression, API and related services Contract; legitimate interests
Customer support and service communications To answer enquiries, resolve problems and notify customers of important operational or contractual matters Contract; legitimate interests
Billing, accounting and record keeping To take payment, issue invoices, maintain financial records and meet tax and legal obligations Contract; legal obligation; legitimate interests
Security, fraud prevention and service monitoring To protect our website, systems, customers and services, investigate misuse and maintain audit records Legitimate interests; legal obligation
Email and other electronic marketing To provide relevant news, guidance and information about our services Consent or legitimate interests, as applicable, and subject to the Privacy and Electronic Communications Regulations (PECR)
Postal marketing To send relevant information about our services Legitimate interests
Analytics and service improvement To understand use of our services and improve functionality, performance and customer experience Legitimate interests; consent where required for cookies or similar technologies
Legal and regulatory matters To establish, exercise or defend legal claims and respond to lawful requests Legal obligation; legitimate interests

5. Our legitimate interests

Where we rely on legitimate interests, those interests may include administering and improving our business and services, securing our systems, preventing fraud and misuse, maintaining appropriate business records, communicating with customers and business contacts, promoting relevant services, and establishing or defending legal rights.

Before relying on legitimate interests, we consider whether the processing is necessary and balance our interests against the rights, freedoms and reasonable expectations of the individuals concerned. You may object to processing based on legitimate interests as explained below.

6. Marketing

We may send information about TPS Services and our services where permitted by data protection law and PECR. Depending on the recipient and the circumstances, we may rely on consent, the existing-customer soft opt-in, or legitimate interests where electronic marketing rules permit this.

We will provide a straightforward way to opt out of electronic marketing in each marketing message. You can also change your preferences or object to direct marketing at any time by contacting us. Withdrawing consent or opting out will not affect the lawfulness of processing carried out before your request was received.

Your right to object to direct marketing: You have an absolute right to object to the use of your personal information for direct marketing. If you object, we will stop using your information for that purpose.

7. Sharing personal information

Where necessary for the purposes described in this policy, we may share information with:

  • hosting, infrastructure, backup and IT-support providers;
  • email, communications and customer-support providers;
  • payment processors, banks, accountants, auditors and professional advisers;
  • providers involved in TPS, CTPS, validation, screening and related services;
  • regulators, courts, law-enforcement bodies and public authorities where required or permitted by law;
  • a purchaser, investor or adviser in connection with a proposed sale, merger or reorganisation of our business; and
  • other parties where you have asked us to share information or have given valid consent.

Service providers acting as our processors are required to protect personal information, use it only for the agreed purposes and act in accordance with our instructions and applicable law.

8. International transfers

Some service providers may process personal information outside the United Kingdom. Before making a restricted transfer, we will ensure that an appropriate legal mechanism is in place. This may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the European Commission's standard contractual clauses, or another safeguard permitted by UK data protection law. We will also carry out any assessment required by law and apply supplementary safeguards where appropriate.

You may contact our Data Protection Contact for further information about the safeguards used for a particular transfer.

9. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, comply with legal and tax requirements, resolve disputes and enforce agreements. Relevant considerations include the nature and sensitivity of the information, legal limitation periods, contractual requirements and the risks associated with continued retention.

Type of information Retention approach
Account and contractual records For the life of the account or customer relationship and afterwards for as long as reasonably required for legal, regulatory and contractual purposes
Invoices, transaction and accounting records Normally for six years from the end of the financial year to which the records relate, or longer where legally required
Customer-supplied screening or cleansing data For the period needed to provide the service and thereafter only as required by the customer's documented instructions, our agreement with the customer, or applicable law
Service, API, security and audit logs For as long as reasonably necessary to operate and secure the service, investigate misuse, resolve disputes and meet contractual or legal obligations
Marketing information While we have a valid reason to send marketing and until you opt out, withdraw consent or we determine that the information is no longer required
Suppression records We may retain the minimum information necessary to record and respect an objection or opt-out

When information is no longer required, we will securely delete or anonymise it. Backup copies may remain for a limited period until overwritten in the normal course of our backup cycle.

10. Security

We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Access is restricted to people and service providers who need the information for authorised purposes. No method of transmission or storage is completely secure, but we regularly review our safeguards and respond to suspected personal-data breaches in accordance with applicable law.

11. Your data protection rights

Depending on the circumstances and the lawful basis being used, you may have the right to:

  • be informed about how your personal information is used;
  • request access to your personal information;
  • ask us to correct inaccurate or incomplete information;
  • ask us to erase information where the right to erasure applies;
  • ask us to restrict processing in certain circumstances;
  • receive information you provided to us in a portable format where the right to data portability applies;
  • object to processing based on legitimate interests;
  • object at any time to processing for direct marketing;
  • withdraw consent at any time where processing is based on consent; and
  • raise concerns about solely automated decisions that have legal or similarly significant effects.

These rights are not all absolute and exemptions may apply. To exercise a right, contact our Data Protection Contact using the details in section 1. We may ask for information reasonably necessary to confirm your identity, but we will not request formal identification where your identity can be verified by less intrusive means.

We will respond without undue delay and normally within one month. Where permitted by law, we may extend that period by up to two further months if a request is complex or if you have made several requests. If an extension is necessary, we will explain why.

12. Automated decision-making

TPS Services does not currently carry out solely automated decision-making about individuals that produces legal or similarly significant effects. Screening and validation results supplied to customers do not determine how a customer must act, and customers remain responsible for their own decisions and compliance obligations.

13. Information you must provide

Certain information is required to create and administer an account, provide purchased services, process payment, issue invoices and meet legal obligations. If required information is not supplied, we may be unable to create an account, enter into a contract or provide the requested service. We will identify mandatory information when it is collected.

14. Cookies

Our website uses cookies and similar technologies. Please see our Cookie Policy for information about the technologies we use, their purposes and the choices available to you.

15. Children's information

Our services are intended for organisations and business users and are not directed at children. We do not knowingly collect personal information directly from children for account registration or marketing purposes.

16. Third-party websites

Our website may contain links to websites operated by other organisations. We are not responsible for the privacy practices of those websites. You should review the privacy information provided by the relevant operator before submitting personal information.

17. Complaints

If you have concerns about our handling of personal information, please contact our Data Protection Contact first so that we have an opportunity to investigate and respond.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. Information about making a complaint is available at ico.org.uk/make-a-complaint.

18. Changes to this policy

We may update this Privacy Policy to reflect changes to our services, suppliers, processing activities or legal obligations. The latest version will be published on this page and the "Last updated" date will be revised. Where a change is significant, we will take reasonable steps to bring it to the attention of affected individuals.