“The direct marketing principle, APP 7, says that organisations may only use or disclose personal information for direct marketing purposes in particular circumstances. Generally, this will be where ...