GDPR and Your Business Address: What Directors Need to Know

The UK General Data Protection Regulation (UK GDPR) gives individuals significant rights over how their personal data is collected, stored, and used. But for company directors, there is an important tension: Companies House is legally required to publish certain personal information — including your service address — on a public register. Understanding how GDPR interacts with your obligations as a director is essential for protecting your privacy without falling foul of the law.

What Personal Data Does Companies House Hold?

When you incorporate a UK limited company or are appointed as a director, Companies House collects and publishes the following personal data:

  • Your full name
  • Your director service address (or residential address if no service address is provided)
  • Your date of birth (month and year only — the day is suppressed)
  • Your nationality and country of residence
  • Your occupation

This information is publicly accessible via the Companies House register and their API, meaning it can be accessed by anyone — including data brokers, marketing companies, and members of the public.

Does GDPR Apply to Companies House Data?

Yes — but with an important caveat. Companies House processes personal data under a legal obligation (the Companies Act 2006), which is one of the lawful bases for processing under UK GDPR. This means Companies House does not need your consent to publish your information, and you cannot simply request that it be deleted under your right to erasure.

However, this does not mean you are without options. You can take steps to minimise the personal data that appears on the public register. Our Companies House Services can help you update your service address and reduce your public exposure.

How to Minimise Your Personal Data on the Public Register

Use a professional service address

The most effective step you can take is to provide a professional director service address rather than your home address. This means your residential address never appears on the public register at all — removing it from public view entirely.

Apply to suppress your home address

If your home address has previously appeared on the register, you can apply to Companies House to have it suppressed using form SR01. This is available to individuals who can demonstrate that the publication of their address creates a serious risk of harm.

Apply to protect your information

In certain circumstances — for example, if you are at risk of violence or harassment — you can apply to have your information protected from public disclosure entirely. This is a more stringent process and requires evidence of risk.

What About Data Held by Third Parties?

Once your information has been published on the Companies House register, it may have been copied by third-party websites, data aggregators, and directory services. UK GDPR gives you the right to request erasure from these third parties, provided they do not have a legitimate legal basis for retaining your data. You can contact these services directly or use a data removal service to assist.

Your Responsibilities as a Director

As a director, you are also a data controller in your own right if your company processes personal data. This means you have obligations under UK GDPR, including:

  • Maintaining a privacy policy that accurately describes how you collect and use customer data
  • Ensuring you have a lawful basis for any marketing communications
  • Responding to data subject access requests within 30 days
  • Having Data Processing Agreements (DPAs) in place with any third-party processors handling personal data on your behalf

How Spectre Offices Can Help

By using Spectre Offices as your registered office and director service address provider, you can ensure that your personal residential address never appears on the Companies House public register. This is the single most effective step a director can take to protect their personal data under UK GDPR principles — minimising the personal information that is publicly available about you.

Our services include professional address provision, mail handling, and forwarding across multiple UK cities, giving you both privacy and compliance in one straightforward solution.

Explore our Director Service Address packages →

Conclusion

UK GDPR and Companies House obligations exist in parallel — and navigating both requires a clear understanding of what data is published, why, and what you can do about it. Using a professional director service address is the most practical and effective way to protect your personal information, keeping your home address private while remaining fully compliant with your legal obligations as a director.

Spectre Offices provides address and administrative support only. We do not provide legal, tax, accountancy or financial advice. Clients remain responsible for ensuring their company records are accurate and up to date.

0 comments

Leave a comment

Please note, comments need to be approved before they are published.