Supplier Application Form

Which Service/Data type are you looking to supply?

Telephone Survey Data

Online Data

Data/Leads Broker

Are you a registered UK or Mainland Europe company?

As a UK or Mainland European company we will require various documents, links and company details to be able to process your ‘Supplier’ application. Below details some of the main documents we require.

Data Security Process and Procedure
Data Breach Policy
Privacy Policy and Terms and Conditions
Complaints Policy
Data Retention/ Data Management Policy
Legitimate Interest Assessment

These documents maybe submitted as individual documents or as one single document. We may also require various information such as your ICO number and renewal date? DMA membership numbers? ISO details? Payment information such as bank details and various points of contact such as Account Manager, Compliance Manager and Accounts Team.

As a UK or Mainland European company we will require various documents, links and company details to be able to process your 'Supplier' application. Below details some of the main documents we require.

Data Security Process and Procedure
Data Breach Policy
Privacy Policy and Terms and Conditions
Complaints Policy
Data Retention/ Data Management Policy
Legitimate Interest Assessment

Company registration certificate with governing body
Photos of your call centre
Model Clause Document (CLICK TO DOWNLOAD OUT TEMPLATE)
Agreement to Import (CLICK TO DOWNLOAD OUT TEMPLATE)

The first six documents mentioned above maybe submitted as individual documents or as one single document. We may also require various information such as your ICO number and renewal date? DMA membership numbers? ISO details? Payment information such as bank details and various points of contact such as Account Manager, Compliance Manager and Accounts Team.

PROCEED

Information about your company:

Choose Leads Reference

Company Name

Company Registration Number

Registered Company Address

If registered address is different to trading address, please detail

Company Website

Account Manager Name

Account Manger Email Address

Account Manager Phone Number

Skype ID

Compliance Manager Name

Compliance Manager Email Address

Compliance Manager Phone Number

Accounts Department Contact

Accounts Department Email Address

ICO Registration Number

ICO Renewal Date

If your company is based outside of the UK who is your UK representative? Please detail name, phone number, email and address.

Do you have a DMA Membership?

Yes

Do you have ISO Certifications?

Yes

Details of ISO Certifications

Does your company have other Trade body memberships?

Has your company been investigated by the ICO (Information Commissioner’s Office) in the last 5 years? If yes, please detail.

PROCEED

Have any of your directors or senior managers ever:

Been the subject of a formal investigation under powers in the Companies Act 1985?

Yes

Been disqualified from acting as a director/ officer of a company?

Yes

Been the subject of any criminal proceedings?

Yes

Been declared bankrupt?

Yes

If yes to any of the above, please detail

PROCEED

Please provide bank details for payment of orders:

Payees Name

Account Details

PROCEED

Data Protection:

Does your company comply with the privacy & Electronic Communication (PECR)?

Yes

Does your company comply with the Data Protection Act 2018?

Yes

Does your company comply with the General Data Protection Regulation?

Yes

How do you ensure there is an adequate level of protection that is given to the data?

How does your company transfer data securely?

Do you transfer your data outside the EU?

Yes

If so, is the data subject aware that their data is being transferred outside the EU?

Yes

Can this be seen in your policies/or script?

Yes

PROCEED

Subject Access Requests and Complaints:

Does your company have an internal Subject Access Request/complaints policy?

Yes

Who is responsible for Subject Access Requests in your company? Please supply Name, Position and Email address.

How can a data subject exercise their rights? And Do these rights align with the GDPR?

How are data subject requests handled?

Does your company maintain a Subject Access Request log?

Yes

What is the data retention of your Subject Access request?

What information will be provided for a Subject Access Request?

In what timeframe can you provide a response to the Subject Access Request?

PROCEED

TPS Screening:

Does your company have TPS screening in place?

Yes

Do you hold a TPS license?

Yes

If no, who supplies your TPS screening?

Do you call TPS registered numbers when you have valid consent to do so?

Yes

Has your company had any TPS complaints in the last 12 months? If yes, please detail.

PROCEED

Telephone Data Providers & Services:

What is the name of your Telephone survey(s)?

How is the data you dial sourced?

Do you conduct your own checks on your supplier before engaging with them? Please detail these checks.

How many agents are there dialling out?

Please describe how the data collected is opted in and has the consent to be contact by your survey?

Please provide a copy of your script, that includes the opening lines, third party opt in and closing lines. (PDF file with max size of 20MB)

Are the sponsors or sector listed at the end your survey?

Yes

Is there an option to opt out of the calls at the end of the survey?

Yes

What is the opt out phone number?

When buying data Choose Leads requires the customer to have reached the end of the call, can you ensure this happens?

Yes

Is your call centre UK based?

Yes

If no, do you have consent under the Data Protection Act, and have the ICO been made aware that the data is being transferred outside of the UK?

Yes

What are your call centres hours of operation? (in GMT+)

What days of the week do you survey?

What is your displayed CLI number(s)? Please detail all numbers.

Do you regularly rotate the CLI number(s)? If so, how often?

Are all your staff now trained on the principles of the GDPR?

Yes

Are your staff trained to deal with the following? Vulnerable consumers and Treating consumers fairly.

Yes

How do you monitor your staff competency?

Is there a license period for how long the data can be dialled?

Are all your calls recorded?

Yes

If yes, please provide 2 random call recordings from the last month.

How long does your company keep the call recordings for?

As part of our due diligence we require a minimum of 5 recordings for each campaign every month. Do you consent to this?

Yes

Call recordings will also be requested by our clients, we expect these to be returned within 48 hours. Do you consent to this?

Yes

PROCEED

Online Data Providers & Services:

What is the name of your site(s)?

How often do you change the name of your sites(s)?

What are the unique URL’s for your sites?

What type of traffic sources do you use to drive consumers to your website?

How do you qualify that the traffic sources are of an accurate quality?

How often are these sources audited?

What safeguards are in place to ensure that BOTs aren’t involved with registering consumers on your site – please give examples of the checks you have in place or software used for these checks?

If a dispute was raised in regard to validity of a registration would you be prepared to share the server log for a data subject? (IP address/time on site/etc)

Yes

If yes, how long are these server logs available from date of registration?

What is the qualifying criteria for an existing competition entrant or site registration to gain a new updated opt in date? For example. If a data subject registers on your site on the 1st of January, and then returns to site 3 months later at what point would you update or revise the previous opt in?

Do you have a license period for how long the data can be dialled?

PROCEED

Data Brokers & Services:

If supplying online data – please detail the URL’s of any sites.

If supplying telephone data, please details the Telephone Survey names and CLIs.

Please detail the internal quality checks that are undertaken before supply.

Please outline how your data is sent securely.

How long do you keep call recordings/opt ins on file?

Are you able to provide the opt in details with the delivery of the data?

Yes

As part of due diligence, we require a minimum of 5 recordings for each campaign each month. Do you consent to this?

Yes

Call recordings/Opt ins may also be requested by our clients, we expect these to be returned within 48 hours. Do you consent to this?

Yes

Do you have a license period for how long the data can be dialled?

PROCEED

Documents & Submissions

Data Security Process and Procedure - URL

Data Security Process and Procedure (PDF file with max size of 20MB)

Data Breach Policy - URL

Data Breach Policy (PDF file with max size of 20MB)

Complaints Policy - URL

Complaints Policy (PDF file with max size of 20MB)

Data Retention/ Data Management Policy - URL

Data Retention/ Data Management Policy (PDF file with max size of 20MB)

Legitimate Interest Assessment - URL

Legitimate Interest Assessment (PDF file with max size of 20MB)

As a non UK/European company please also provide:

Company registration certificate with governing body - URL

Company registration certificate with governing body (PDF file with max size of 20MB)

Photos of your call centre - URL

Photos of your call centre (PDF file with max size of 20MB)

Model Clause Document - URL

Model Clause Document (PDF file with max size of 20MB)

Agreement to Import - URL

Agreement to Import (PDF file with max size of 20MB)

PROCEED

Notes

Notes from Supplier

PROCEED

Signature - Please Complete

Name

Position

Date

27 Jan 2026