How to review paid social agencies in England using evidence gates

There is no defensible public winner among paid-social agencies serving England. A useful review must first eliminate candidates that cannot evidence identity, account control, lawful data handling, claim approval, security, accessibility, commercial terms and orderly exit. Only then should a buyer compare how the surviving options would answer the same brief.

This guide is about work commissioned and operated in England. Companies House records and most regulator material cited here have UK scope. Agency pages are the suppliers' own statements. TikTok and LinkedIn records describe global products with region-dependent features. None supplies an England performance ranking. This is a method guide, not a ranked comparison, with no scores.

What to take away

A review should first eliminate candidates that cannot evidence identity, account control, lawful data handling and exit.
Give every candidate the same brief so their answers can be compared on scope and responsibility.
Keep a no-new-agency baseline to test whether a new supplier is actually necessary.

Who performed this review

The Campaignsocial.co.uk editorial desk examined the public records available on 5 September 2026. The desk applies its published standards: cited sources, labelled supplier claims and a corrections log. The work was unfunded. There are no affiliate links, samples, sponsorships or supplier relationships.

Research was desk-only. The review method covers agency selection, not live campaign delivery.

Included evidence comprised current company-register entries, an agency's own service description, UK regulator guidance and publicly accessible first-party platform documentation. We excluded directories, award badges, star averages, anonymous testimonials, search position, unverified price claims and any page that could not be inspected without an account. The set is illustrative, not a census of English agencies.

Start with a comparison question

Write the decision before collecting evidence. A usable question might be: which supplier can take responsibility for a defined paid-social scope while the client retains its advert accounts, payment authority, evidence and exit route?

Give every candidate the same brief. Specify the product and audience, England geography, platforms, creative volume, regulated categories, account owner, media payer, existing tracking, accepted business outcome, accessibility needs, reporting period, budget authority and proposed contract term. Otherwise one agency may quote for media buying while another includes creative production, measurement and legal coordination.

Their answers would not be comparable.

Keep a no-new-agency baseline in the exercise. Record what the client's existing team and accounts can deliver, the controls already in place, the unmet work and the full internal cost. A procurement cannot show that a new supplier is necessary if it never describes the current route.

Use one evidence grid

The grid below contains pass-or-hold gates. A strong presentation in one row cannot cancel a failure elsewhere.

Gate	Evidence to request	Hold condition
Contracting identity	Legal name, company number, trading names, service address and authorised signatory	The proposal cannot be tied to the contracting party
Comparable scope	Deliverables, platforms, creative, measurement, approvals, exclusions and named owners	Candidates answer materially different briefs
Account and money control	Client asset ownership, role matrix, media payer, spend limits, rebates, credits and invoice route	The client cannot control access or reconcile spend
Audience and tracking	Data map, purposes, roles, PECR assessment, transfers, retention, rights and deletion	A data route lacks approved purpose or responsibility
Claims and categories	Evidence file, creative approval, disclosure, CAP review and specialist route	An objective or regulated claim lacks clearance
Security and continuity	Access method, authentication, logging, incident route, backup owner and recovery test	Privileged access or recovery remains undefined
Accessibility	Tasks, formats, test method, defects, remediation owner and retest	Accessible use is asserted without applicable evidence
Measurement	Event dictionary, sources, reconciliation, attribution rule, causal boundary and uncertainty	Platform credit is represented as business impact
Contract and exit	Fees, tax, renewal, liability, change, termination, exports, deletion and transition	Data, assets or service continuity could be stranded

Use pass, hold, not applicable with reason or not evidenced. Do not turn an absent record into zero points and then allow a high presentation score to overwhelm it.

A worked example: an anonymised England retailer asked Agency A to run paid social on Meta and TikTok. The brief set an illustrative £30,000 monthly media budget, UK-only targeting, in-house creative and client-owned ad accounts.

Applying the grid, Agency A passed contracting identity and account control. It returned a hold on audience and tracking because the proposed pixel data map lacked a PECR assessment. That hold blocked a pass verdict. The retailer asked for a revised data map before a capped pilot.

Typical fee structures and cost drivers

Paid-social retainers in England commonly use a percentage of media spend, a fixed monthly fee, a project fee or a performance element. Commonly cited typical management fees are 10 to 20 percent of media spend for retained work, though the rate varies with scope.

Cost drivers include media budget, platform count, creative volume, tracking complexity, regulated categories, reporting depth and contract length. Ask each candidate to model the same brief so fees can be compared.

Verify identity without overstating the register

Match every trading name to the entity that would sign and invoice. A Companies House page shows the recorded company name, number, status, address and filings. The service warns that Companies House does not verify the accuracy of filed information.

Registration is an identity lead, not proof of service quality, solvency, security or authority to use a platform badge.

Check the proposed entity again before award and compare it with the proposal, insurance documents, bank details, data-processing terms and invoice. If group companies or subcontractors will deliver work, name their role and the party carrying each obligation.

Attribute supplier claims

An agency website can establish what that agency says it offers. The Social Shepherd's paid-service page lists paid social, creative and analytics capabilities. Impression's paid-social page describes its own platform and creative services. Spin's site lists paid media among its social services.

These are first-party scope records, not independent evidence that a service works, suits a buyer or produces the advertised outcomes.

Write the supplier states beside such evidence. Ask for the named delivery team, exact work product, dependency, acceptance test and client-controlled export. Case studies need their population, period, baseline, metric definitions, exclusions, source systems and permission to verify. A logo, award or customer quotation cannot replace those fields.

Treat reviews as evidence with a chain of custody

Record where a review appeared, when it was captured, which service and period it concerns, whether the reviewer is identifiable, whether an incentive or relationship is disclosed, and whether the agency could select or suppress entries. Preserve the original wording and URL rather than copying only a favourable extract.

The CMA's April 2025 fake-reviews guidance covers fake and concealed incentivised reviews and misleading presentation of review information. Its updated guide for businesses and agencies says marketing agencies should not write or arrange fake reviews for clients. A named UK consumer-law reviewer should apply the current rules to the intended publication and collection process.

A genuine customer account may illuminate communication or delivery in one engagement. It does not establish the experience of every client, causal campaign impact or future suitability. Contactable references are useful only with consent and structured questions tied to the proposed scope.

Test products against a client-owned route

Do not accept we are a partner as an access design. The client should own the advert account or retain independent administrative control wherever the platform permits it. Record who can create, approve, publish, change budgets, view billing, export data, add users and revoke the agency.

TikTok's June 2026 self-serve Ads Manager setup record covers country, legal business name, timezone, currency and billing information, while LinkedIn's Campaign Manager setup page covers permissions, payment, shared assets and optional tracking.

These describe products, not supplier assurances. Plan a synthetic test in a non-production setting, then a capped pilot with approved creative, spend authority, monitoring and rollback owner.

Platform approval does not establish UK legal clearance. LinkedIn's advertising policies describe its own review, while CAP's misleading-advertising rules require evidence for objective claims and set conditions for comparisons. Both checks may be necessary; neither substitutes for the other.

Keep each risk gate separate

Map pixels, SDKs, tags, audience uploads, lead forms, identifiers, exports and deletion. The ICO's final April 2026 storage and access guidance covers online-advertising technologies beyond ordinary cookies. A named privacy and PECR reviewer must decide purpose, roles, lawful basis, consent or exception, transparency, rights, transfers and retention for the actual design.

If an agency processes personal data for the client, document roles before applying Article 28 terms. The ICO's controller and processor contract guidance lists topics including instructions, confidentiality, security, subprocessors, rights, assistance, end-of-contract provisions and audits. The page is marked under review following the Data (Use and Access) Act, so recheck it on publication and contract dates.

Security assurance needs evidence matched to risk, not a certificate alone. The NCSC's supplier-assurance questions are a starting point for understanding supplier controls. Test account recovery, leaver removal, incident notification and the client's ability to revoke access.

Accessibility also has its own acceptance test. WCAG 2.2 supplies web-content criteria, but a buyer must define the relevant advert, landing-page, report and authoring tasks. Automated scans do not prove that people can complete those tasks.

Financial promotions require another route. The FCA's FG24/1 social-media guidance applies in its regulatory context and does not turn general agency approval into clearance. Finance should also verify the legal invoicing entity, currency, VAT treatment, media spend and credits. GOV.UK lists required invoice information in its business invoicing guidance.

Reach a decision without inventing a score

First remove candidates with unresolved non-compensating gates. For those left, compare evidence against the same brief: accepted outputs, responsible people, client effort, whole-life cost, dependencies, pilot design and exit burden. If weights are used, set them before proposals arrive and retain the raw evidence as well as the calculation.

The defensible verdict may be no award. It may also be a short, capped discovery engagement with no production access. Record the decision owner, dissent, unresolved facts, validity period and events that trigger another review.

The review gates above require named UK procurement, commercial, privacy and PECR, advertising, accessibility, security, finance and regulated-products review before a decision. All supplier and platform records must be checked again on the decision date.

Before you act

Write the decision question before collecting evidence.
Give every candidate the same brief.
Record the client's current route and full internal cost.
Tie each trading name to the signing entity.
Label supplier claims as the supplier's own.
Plan a capped pilot with spend authority and a rollback owner.

Common questions

Why can no agency be called a public winner in this review?

The text says there is no defensible public winner among paid-social agencies serving England. The evidence set was illustrative, not a census, and no England performance ranking exists.

What does a Companies House record actually prove?

It can establish the recorded company name, number, status, address and filings. Companies House warns it does not verify the accuracy of filed information. The text therefore treats registration as an identity lead, not proof of service quality, solvency, security or authority to use a platform badge.

How should a buyer handle agency reviews and case studies?

Record where a review appeared, when it was captured, which service it concerns and whether any incentive was disclosed. The CMA guidance says agencies should not write or arrange fake reviews. Case studies need population, period, baseline, metric definitions, exclusions, source systems and permission to verify.