You can issue a Subject Access Rights Notice (SARN) under the Data Protection Act, the information you get back should hopefully give you an idea of where they got their information from.(posted 7965 days ago)More details about SARNS in the website.