Re: Can I get you to do Morrisons as well?
No need to wait. GDPR covers personal information, not just identifiable. A mobile number, being an 07 number is a personal number. Ergo it is personal information. Not sure where discussions officially landed in that line though.
Additionally the data they hold is incorrect. Under the act they must correct this if informed. Failure to respond by the system provider, your only point of contact could be a breach and reportable.