In brief - I set up my own business in addition to working part time (self employed basis) for another company (no conflict - different type of business). My own business was slow taking off so my lovely best friend who works in a similar, but different field, kindly gave me a list of 30 clients' contact details (emails) who she thought would be interested in my business. It turned out she was right and about 22 of them did purchase from me. However, one of the clients who I approached has complained directly to the MD of the company that I work for on a self employed basis because he believes that there was a data protection issue. In other words, he thinks that I used my contacts at my self employed job to get his details (which is NOT true - it's just coincidence that he is also on the client database for the company I work for - which I didn't know).
I've been asked to attend a meeting to explain how I got the details of this client but my friend did not, it turns out, get approval from her clients before giving me their details (but she didn't think that they would mind!). I do realise this is wrong - but I didn't even think about it at the time - far too thankful to be given the contacts. My friend is ADAMANT that she does not want her involvement to be known and I don't want to get her into trouble. It's a bit of a mess.............
My feeling is that I should just tell the truth in that I got given the list from a friend but that I refuse to give other details. I'm not sure what they can do about it other than take my word but I do feel bad. Any thoughts/advice much appreciated.