It applies to all data that the company holds relating to all users that have some interaction with the company website and channels even if that information technically falls outside of the Data Protection Act 1998. This can include:
- Names of users
- Postal addresses
- Email addresses
- Telephone or cell phone numbers
- Company names
- Roles in the company