Privacy
We handle personal data about four groups of people. Find yours.
Last updated 16 September 2026
Who we are. The Partnership Report is the trading name of Morten Tilley, a sole trader in the UK. Galleys Wood, Honeypot Lane, Limpsfield, Surrey TN8 6QH. hello@thepartnershipreport.com. We are registered with the Information Commissioner’s Office, number ZC241482. We are not required to appoint a Data Protection Officer and have not appointed one; questions about this notice come to the email address above.
Whichever group you are in, we hold business information about you in your working role and nothing more: no health, political, religious or similar data, and nothing about anyone under 18.
What we hold. What you typed into the request form: your name, the team or agency you’re asking for, your email, what you race, and anything else you chose to tell us. Our hosting provider also sees the technical data any website sees, including your IP address.
Why, and on what basis. To send you the sample and to talk to you about whether the report is right for you. In legal terms, that’s taking steps at your request before a contract, plus our legitimate interest in answering people who write to us.
How long. While we’re talking, and for 24 months after our last exchange. Longer if you become a client — see section 2.
What we hold. The names, roles and email addresses of the people we deal with at your organisation; the Order Form and agreement; our correspondence; invoices and payment records; the Declared List you give us; any Objections and the evidence behind them; and your notifications of signed deals. Card payments are taken by Stripe: you enter your card details on Stripe’s page, Stripe holds them, and we see only that a payment succeeded or failed, the last four digits, and the billing name and address.
Why, and on what basis. To deliver the report, to bill you, and to run the commission mechanism in the agreement. That’s performance of a contract, the record-keeping the law requires of a business, and our legitimate interest in keeping the records that make the agreement work.
What we need from you. The details on the Order Form — who you are, where to invoice, and who we’re delivering to — are needed to enter into the agreement and to bill you. Without them we can’t take you on as a client. Nothing else is compulsory.
How long. For the life of the agreement, then six years — or, if a Sourced Deal is running, six years after it ends.
This is the one to read if you’ve received an approach that mentioned us, or you’ve found this page because you want to know where your details came from.
What we do. We research companies that we think are in the market for a sports partnership, and for each one we identify the person whose role is to evaluate that kind of proposal — usually a head of brand, partnerships, marketing or the commercial director. We deliver the company, the reason we think it’s a fit, and that person’s name, job title and LinkedIn profile to one client at a time. For some clients we also give a work email address, which we either find on a public page or infer from the company’s published address format, and we tell the client which.
What we hold about you. Your name, job title, employer, LinkedIn profile address, and a work email address. Sometimes a fact about your role that was announced publicly — “appointed CMO in July”. Nothing else: no personal contact details, and nothing about your private life.
Where it came from. Public sources only: web search, your public LinkedIn profile, press releases, your company’s website, news articles. We do not buy data, use email-finding tools, or scrape.
How we use AI. We use an AI system to help us research companies and find the person whose job it is to evaluate a partnership. It assists the research; a person decides what goes into each report. We don’t use it to score, rank or make decisions about you as an individual, and nothing about you is decided by a machine alone.
Why, and on what basis. Our legitimate interest, and our client’s, in making relevant, researched business proposals to the person whose job it is to receive them. We’ve assessed this against your interests — you can ask for the assessment — and concluded that a senior commercial person with a public professional profile reasonably expects to be approached at work about partnerships, that the data involved is limited to your role, and that the worst realistic outcome is an approach you’d rather not have had. Which you can stop; see below.
Who receives it. The one client that report was written for. Clients agree not to publish it, sell it, or pass it to anyone else. If a client contacts you, they’re responsible for that contact and for any data they hold about you afterwards — they are a separate controller, and their own privacy notice applies.
Where we send the approach ourselves. For some clients we write and send the first email on their behalf. When we do, we and the client have agreed who does what: we identify ourselves and the client we’re writing for, we provide this notice, and we handle your reply and any request you make about your data. You can ask us for a copy of that arrangement.
Why we haven’t written to you directly. The law asks us to tell you we hold your data within a month, unless doing so individually would be disproportionate, in which case we can tell you publicly instead. Writing to every person in every report to tell them they may be written to would itself be an unsolicited email. So this page is our notice. Where we send the approach ourselves, that email identifies us and links here.
How long. Reports are kept for as long as our agreement with the client can give rise to a commission claim — up to 24 months after the report, and for some years after that where a deal was signed. We also keep a research register of the companies and contacts we’ve identified, so that we don’t approach the same person twice and so that anyone who has asked not to be contacted stays uncontacted. We review it once a year, remove companies that are no longer relevant, and re-check any contact older than six months before using it again. The register is for our own research only: it is never sold, licensed or pooled into a list for anyone else.
You can object, and we’ll stop. Email hello@thepartnershipreport.com with your name and employer. We’ll add you to our suppression list, which is checked before every report is delivered, tell any client who has received your details in the last 24 months that you’ve objected, and confirm to you within one month. This is your right under Article 21, and where the purpose is direct marketing it’s absolute — we won’t argue.
What we hold. Your name, role, work email and work phone number, and our correspondence with you.
Where it came from. Usually from you, or from a colleague who put us in touch. Occasionally from your organisation’s website or your public LinkedIn profile, where we needed to find the right person to talk to.
Why, and on what basis. To work with your organisation: to run the contract we have with it, or the service it provides to us. That’s our legitimate interest in running the business, and where there’s a contract, performing it.
How long. For as long as the relationship lasts, and six years after for anything that appears on an invoice.
We use a small number of service providers, who process data on our instructions and not for themselves:
Beyond those, we may share data with our professional advisers — our accountant, solicitor and insurer — where they need it to advise us, and with a regulator, court or other authority where the law requires it.
Most of these providers are US companies. Data goes to them under the UK’s approved safeguards — the UK extension to the EU-US Data Privacy Framework where they’re certified, and the UK’s International Data Transfer Addendum otherwise. You can ask us for a copy of the safeguards that apply to any of these transfers.
We never sell personal data and never share it for anyone else’s marketing.
None. No analytics either.
Whichever group you’re in, you can ask us for a copy of what we hold, ask us to correct it or delete it, ask us to restrict what we do with it, object to our processing it, and ask for it in a portable format. Email hello@thepartnershipreport.com. We’ll answer within one month. We don’t charge, and we won’t ask you to prove who you are beyond what’s needed to be sure we’re talking to the right person.
If you think we’ve got something wrong, tell us first: hello@thepartnershipreport.com, or by post to the address above. We’ll acknowledge within one month and tell you what we’ve done about it. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113, at any time.
This notice was last updated on 16 September 2026. The previous version, dated 2 September 2026, covered the request form only. We’ll change the date here whenever the notice changes.
The Partnership Report is a trading name of Morten Tilley. Galleys Wood, Honeypot Lane, Limpsfield, Surrey TN8 6QH.