Last updated 11 October 2026

​

1. Who we are

This website and the services it describes are provided by David Thomas, trading as MSP Sale Readiness, a sole trader based in Exeter, England ("we", "us", "our"). We are the controller of the personal data described in this policy. You can contact us about anything in it at david@mspsalereadiness.co.uk.

​

2. The personal data we collect

We collect personal data in five ways.

 

When you contact us through the website or by email, we collect

• your name

• your email address and, if you choose to give it, your phone number

• any other information you include in your message

 

When you complete our readiness self assessment, we collect

• your first name, surname and email address

• your answers to the assessment questions and the scores calculated from them

• whether you have asked to receive occasional emails from us

 

When we introduce our services to professional advisers, such as accountants, solicitors and corporate finance advisers, we collect

• your name, job title and firm

• your business email address and business phone number

• your public LinkedIn profile

• public information about your firm's services that shows why an introduction may be relevant

 

When we introduce our services to the owners and directors of businesses that may be preparing for a sale, we collect

• your name, role and company

• your business email address, business phone number and business postal address

• your public LinkedIn profile

• public information about the business, such as how long it has been trading, its size and its ownership

• whether a director is aged 55 or over, worked out from the information Companies House publishes. We use this only to decide who to contact first, and never mention it when we contact you

 

We take these details from your firm's or company's public website, Companies House, LinkedIn, professional directories and the trade press. We do not buy or rent contact lists.

 

When you become a client, we collect

• contact details for you and the members of your team who work with us

• the business information you share with us during an engagement, including information entered into our client portal or placed in a data room

 

We do not run advertising or online booking systems. We only send occasional emails about getting sale ready to people who have asked for them, by ticking the box on our readiness self assessment.

​

3. How we use your personal data

We use your personal data only to

• respond to enquiries and correspond with you about our services

• send you the results of the readiness self assessment you completed, and follow up with you about them

• send you occasional emails about getting sale ready, but only if you have asked for them

• look at assessment answers across all respondents, so we can understand which areas owners find hardest and improve what we write about

• introduce our services to professional advisers whose clients may benefit from them, and to the owners and directors of businesses that may be preparing for a sale, by individual email, letter, LinkedIn message or phone call

• keep a record of anyone who has asked us not to contact them, so that we never do

• prepare quotes and proposals, and deliver consultancy services to clients

• keep records of our correspondence and work

• meet our legal, tax and accounting obligations

 

Every introduction is researched, written and sent by us personally. We send an introduction and no more than two short follow ups, then we stop, unless you reply. We do not use automated email sequences or tracking.

 

Your assessment scores are calculated automatically from your answers, but we do not use them, or any other data, to make decisions about you that have legal or similarly significant effects. We do not sell, rent or trade your personal data.

​

4. Our legal basis for using your data

Legitimate interests (Article 6(1)(f) UK GDPR). We rely on this to respond to enquiries, to send you the assessment results you asked for and follow up on them, to introduce a business service to advisers and business owners in their professional capacity, and to keep our record of people who have asked not to be contacted. We have carried out a legitimate interests assessment, and you can ask us for a copy.

• We only contact you at your business email address, business phone number or business postal address.

• We only email limited companies, limited liability partnerships and other corporate bodies without asking first. Sole traders and traditional partnerships are not emailed unless they have agreed to it.

• Before any phone call, we check the number against the Telephone Preference Service and the Corporate Telephone Preference Service, and we do not call numbers registered with them.

• Every email, letter and message explains how to opt out.

 

Consent (Article 6(1)(a) UK GDPR). We rely on this to send you occasional emails about getting sale ready, if you ticked the box on our readiness self assessment. You can withdraw your consent at any time, as described in section 5.

 

Contract (Article 6(1)(b) UK GDPR). We rely on this to take steps at your request before an engagement, and to deliver services to clients.

Legal obligation (Article 6(1)(c) UK GDPR). We rely on this to keep business and tax records.

​

5. Your right to object to marketing

You can ask us to stop contacting you at any time, by replying to any email, letter or message we send you, by telling us on the phone, or by writing to david@mspsalereadiness.co.uk. A simple "no thanks" is enough, and you do not need to give a reason. We will stop straight away, by every channel. We will keep a short note of your name, firm and the contact details we held for you only so that we make sure we do not contact you again. If you asked to receive occasional emails through our readiness self assessment, you can also unsubscribe using the link at the bottom of any of those emails.

​

6. How we store and protect your data

This website and our client portal are built and hosted on Wix.com. Information you send through the website, including your readiness self assessment, or enter into the portal is processed and stored on Wix's platform, which acts as our data processor. Our email is provided by Microsoft 365. Client documents are held in a secure data room agreed with each client. The business contact details we research, and our record of people who have asked not to be contacted, are kept in our own business records.

 

Some of these providers may store data outside the UK. Where they do, the transfer is protected by appropriate safeguards, such as UK approved contract terms.

We keep access to your data limited to the people who need it, and we use strong passwords and two step sign in on the accounts that hold it.

​

7. How long we keep your data

• Enquiries that do not lead to work, up to two years after our last contact.

• Readiness self assessment results that do not lead to work, up to two years after you complete the assessment, or until you ask us to delete them.

• Client records, up to six years after the engagement ends, to meet legal and accounting requirements.

• Business contact details of advisers and business owners, for as long as they remain relevant. We review them every year and delete them if there has been no contact or reply for two years, or sooner if you ask.

• Our note of people who have asked not to be contacted, for as long as we carry out marketing, because that note is what stops further contact.

 

8. Who we share your data with

We only share your personal data with

• Wix.com and our email and office software providers, which help us run the business

• a client's own advisers, such as their accountant or solicitor, when the client asks us to work with them

• our own accountant or professional advisers

• regulators, courts or law enforcement, when the law requires it

 

9. Cookies

This website uses the essential cookies that Wix needs to make the site work, and Wix's built in statistics to count visits and see which pages are read. We do not use advertising or social media tracking cookies.

 

Our readiness self assessment loads its fonts from Google Fonts and, if you download your results as a PDF, a PDF tool from Cloudflare's cdnjs service. To deliver these files, those services receive your device's internet address. The assessment itself does not set cookies.

 

10. Your rights

Under UK GDPR and the Data Protection Act 2018 you have the right to

• ask for a copy of the personal data we hold about you

• ask us to correct anything that is wrong or incomplete

• ask us to delete your data

• ask us to restrict how we use it

• object to how we use it, including the right to object to marketing described in section 5

• withdraw your consent to occasional emails at any time

• ask for your data in a format you can pass to someone else

 

To make a request, email david@mspsalereadiness.co.uk. There is no charge, and we will normally respond within one month.

 

11. How to complain

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. Email david@mspsalereadiness.co.uk. We will acknowledge your complaint within 30 days and respond in full without undue delay.

 

You also have the right to complain to the Information Commissioner's Office.

• Website ico.org.uk

• Helpline 0303 123 1113

 

12. Children's data

This website and our services are aimed at business owners and their advisers. They are not intended for children.

 

13. Changes to this policy

We may update this policy from time to time, for example if the way we collect or use data changes. The date at the top shows when it was last updated.