Privacy
If I've written to you, this page explains where I got your details, what I do with them, and how to make me stop. The short version: reply "stop" to any email and I won't write again.
Who I am
Exec Office is run by me, Mark Flynn, a sole trader based in Guildford, Surrey. I'm responsible for your data. You can reach me about anything on this page at [email protected].
Who I write to
Owners and directors of limited companies, at their business address. I only use companies registered at Companies House. I don't write to sole traders or partnerships, and I don't write to anyone at a personal address.
What I hold about you
Your name, your role, the company you run, its website, your business email address and, where I've found one, your LinkedIn profile. Alongside that I hold public facts about the company: its size, age, sector and filed accounts.
I don't hold anything sensitive about you, and I don't buy lists.
Where I got it
- Companies House, the public register of UK companies: your company's details, and your name and role as a director or owner.
- Your company's own website: what it does, and any contact address it publishes.
- Hunter.io, an email-finding service, where your address isn't published on your website.
- LinkedIn, where I've looked up your public profile.
What I use it for, and why I'm allowed to
To contact you about my work with owner-managed businesses, and to prepare the free market report I send you.
I rely on legitimate interests: I have a genuine business reason to contact people who run companies like yours, it's a business-to-business approach at your work address, and you can stop it at any time. I've written down how I weighed that against your interests, and I'll send it to you if you ask.
I use automated analysis of public company data to decide which companies to write to. It only decides whether you hear from me. It doesn't make any decision that affects you legally or in any similar way.
Who else handles it
These services process your data on my behalf and only on my instructions:
- Instantly, which sends my emails
- Google Workspace, which runs my mailbox
- Supabase, which stores my records
- Cloudflare, which hosts this website and your market report
- Resend, which sends me a notification if you use the form on your report
- Hunter.io, as above
Some of these services are based outside the UK. Where they are, your data is protected either by UK adequacy regulations or by contract terms approved for international transfers.
I don't sell your data or share it with anyone else.
How long I keep it
If you don't reply, I delete your details twelve months after I last contacted you. If you reply, I keep them while we're talking and for twelve months afterwards.
If you ask me to stop, I keep just your email address and company domain on a do-not-contact list, indefinitely. That's the only way I can make sure I never write to you again.
Your rights
- To stop me contacting you. This is absolute. Reply "stop", or email me, and I will.
- To see what I hold about you.
- To have it corrected.
- To have it deleted.
- To ask me to limit what I do with it.
- To object to my using it at all.
Email [email protected] and I'll respond within a month.
If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. I'd appreciate the chance to put it right first.
Last updated 16 September 2026.