Thanks, some great answers there. I was thinking about 7.2.1, and I can see the relevance of the other clauses cited in replies. In particular, I thinking about 7.2.1c (statutory and regulatory requirements related to the product). This part is particularly relevant to us because we are a cleaning company.
So there may be restrictions imposed by legislation (directly and indirectly), such as ensuring all cleaners working in schools have been police checked, all cleaners working on building sites should have CSCS cards (see
http://www.cscs.uk.com/) etc. If we are advertising, cold calling, building a website etc, we need to make sure that we can legally do what we claim. We have no business pretending competence/compliance that we don't have. However, any discrepancies between claims and capabilities (e.g. we suddenly lose a lot of police checked employees after the advert was placed) can be picked up by the sales enquiry process linked with training and competence (although this creates a reliance on detection, which could potentially lead to unwarranted acceptance of an order that leads to collapse the day the job starts). Far better to ensure a good fit between advertising and capability!
The most significant advice here is the "business management system" given the psychological impact of that label vs "quality". I suspect the question I got asked (cited in my OP) was loaded and a bit of a trap used by the manager to trip me up. So this one bit of advice will now make me rebrand the full lot as a business management system. It's early days so it will not involve too much work.