Following these rules reduces the risk of braking data protection:
- Customer who passes friend's details must confirm they obtained the friend's consent.
- Check not on a marketing suppression list
- Tell customers they will tell the friend how their contact details were obtained
- If friend objects to received the message, must suppress contact details
