How do we comply with the rules on sending marketing by electronic mail?

<!doctype html>    <html lang="en"> <head prefix="og: http://ogp.me/ns#"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="initial-scale=1.0, width=device-width"> <title>How do we comply with the rules on sending marketing by electronic mail? | ICO</title> <meta name="DC.Subject" content="How do we comply with the rules on sending marketing by electronic mail?" /> <meta name="DC.Date" content="Monday, December 09, 2024" /> <meta name="DC.Creator" content="" /> <meta name="DC.Publisher" content="ICO" /> <meta name="DC.Title" content="How do we comply with the rules on sending marketing by electronic mail?" /> <meta name="DC.PageID" content="6266" /> <meta property="og:title" content="How do we comply with the rules on sending marketing by electronic mail?" /> <meta property="og:type" content="website" /> <meta property="og:url" content="https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/how-do-we-comply-with-the-rules-on-sending-marketing-by-electronic-mail/" /> <meta property="og:description" content="" /> <meta property="og:image" content="" /> <meta name="twitter:title" content="How do we comply with the rules on sending marketing by electronic mail?" /> <meta name="twitter:description" content="" /> <meta name="robots" content="index" /> <link rel="shortcut icon" type="image/x-icon" href="/media2/lhphq55z/favicon.ico" /> <link rel="stylesheet" type="text/css" href="/css/site.css?v=2KapU-CQK1FlxXINBOtZ6zoJNAmc9XMQkYXjCL2Ypdw" /> </head> <body id="top" class="bg-white min-h-screen "> <a class="flex items-center justify-center px-3 py-2 bg-secondary text-white text-xl sr-only focus:relative focus:w-full focus:h-fit" href="#main-content"> <span class="font-serif text-serif-base pr-2">Skip to main content</span> <span class="icon icon-arrow-down"></span> </a> <header class="w-full fixed md:static z-10 md:z-auto print:hidden"> <div class="bg-primary"> <div class="lg:container px-4 py-3.5 md:flex"> <div class="md:pr-8"> <a href="/"> <div class="bg-left bg-contain bg-no-repeat h-8 w-20 inline-block md:hidden" style="background-image: url('/media2/qkcg1rdf/logo-small.svg?width=80&height=32&v=1db03b868bf60c0');"></div> <div class="bg-left bg-contain bg-no-repeat h-24 w-40 hidden md:inline-block" style="background-image: url('/media2/myukqaa2/ico-header-logo.svg?width=160&height=96&v=1db03b866f17e90');"></div> <span class="sr-only">Home</span> </a> </div> <div class="grow items-stretch hidden md:flex"> <div class="font-serif text-center md:text-left text-white text-serif-base md:flex items-end md:pl-8 border-secondary border-dotted md:border-l-2"> <span>The ICO exists to empower you through information.</span> </div> </div> <div class="flex flex-col items-end md:pl-8"> <script type="application/json" id="language-settings"> {"cookieDomain":"ico.org.uk","options":[{"text":"English","href":"https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/how-do-we-comply-with-the-rules-on-sending-marketing-by-electronic-mail/","icon":"icon-lang-en","value":"English"},{"text":"Cymraeg","href":"https://cy.ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/how-do-we-comply-with-the-rules-on-sending-marketing-by-electronic-mail/","icon":"icon-lang-cy","value":"Welsh"}]} </script> <div id="language-toggle"></div> <div class="grow flex items-end"> <button type="button" id="search-toggle" class="absolute rounded p-2 top-3 right-12 md:hidden hover:bg-secondary" aria-controls="search"> <span id="search-icon" class="block icon icon-search text-white text-xl"></span> <span class="sr-only">Search</span> </button> <div id="search" class="motion-safe:transition-all motion-safe:duration-200 hidden md:block w-full sm:w-fit max-h-0 md:max-h-fit overflow-hidden md:overflow-auto"> <form action="https://icosearch.ico.org.uk/s/search.html" method="GET" id="search-form" class="pt-3.5 md:pt-0"> <input type="hidden" name="collection" value="ico-meta" /> <input type="hidden" name="profile" value="_default" /> <div class="flex"> <label for="search-query" class="sr-only">Search</label> <input type="search" name="query" id="search-query" class="grow min-w-0 px-2 py-1 border-t border-b border-l border-r-0 border-white/50 focus:border-white focus:ring-0 rounded-l bg-secondary motion-safe:transition-colors hocus:bg-white text-white hocus:text-black sm:w-60 md:w-48" /> <button type="submit" class="text-transparent bg-secondary rounded-r p-2 border-t border-b border-r border-white/50"> <span class="block text-white text-xl icon icon-search"></span> <span class="sr-only">Search</span> </button> </div> </form> </div> </div> </div> </div> </div> <div class="bg-secondary"> <div class="lg:container md:px-4"> <button type="button" id="navbar-toggle" class="absolute rounded p-2 top-3 right-3 md:hidden hover:bg-secondary" aria-controls="navbar"> <span class="block icon icon-menu text-white text-xl"></span> <span class="sr-only">Menu</span> </button> <nav id="navbar" class="bg-secondary motion-safe:transition-all motion-safe:duration-200 hidden md:block max-h-0 md:max-h-fit overflow-hidden md:overflow-auto"> <ul class="border-primary border-dotted border-t-2 md:border-t-0 md:flex md:flex-wrap"> <li class="md:flex"> <a href="/" class="relative flex justify-between items-center text-white text-serif-lg md:text-base whitespace-nowrap md:whitespace-normal pl-9 md:pl-3 pr-4 md:pr-3 py-2 md:py-1 font-serif md:font-sans before:absolute before:w-2.5 before:top-2 before:bottom-2 before:left-4 md:before:hidden md:border-y-5 md:border-transparent before:bg-theme-grey md:hover:border-t-theme-grey"> <span>Home</span> <span class="icon icon-arrow-right text-xl md:hidden"></span> </a> </li> <li class="md:flex"> <a href="/for-the-public/" class="relative flex justify-between items-center text-white text-serif-lg md:text-base whitespace-nowrap md:whitespace-normal pl-9 md:pl-3 pr-4 md:pr-3 py-2 md:py-1 font-serif md:font-sans before:absolute before:w-2.5 before:top-2 before:bottom-2 before:left-4 md:before:hidden md:border-y-5 md:border-transparent before:bg-theme-green md:hover:border-t-theme-green"> <span>For the public</span> <span class="icon icon-arrow-right text-xl md:hidden"></span> </a> </li> <li class="md:flex"> <a href="/for-organisations/" class="relative flex justify-between items-center text-white text-serif-lg md:text-base whitespace-nowrap md:whitespace-normal pl-9 md:pl-3 pr-4 md:pr-3 py-2 md:py-1 font-serif md:font-sans before:absolute before:w-2.5 before:top-2 before:bottom-2 before:left-4 md:before:hidden md:border-y-5 md:border-transparent before:bg-theme-yellow md:hover:border-t-theme-yellow bg-primary md:border-t-theme-yellow"> <span>For organisations</span> <span class="icon icon-arrow-right text-xl md:hidden"></span> </a> </li> <li class="md:flex"> <a href="/make-a-complaint/" class="relative flex justify-between items-center text-white text-serif-lg md:text-base whitespace-nowrap md:whitespace-normal pl-9 md:pl-3 pr-4 md:pr-3 py-2 md:py-1 font-serif md:font-sans before:absolute before:w-2.5 before:top-2 before:bottom-2 before:left-4 md:before:hidden md:border-y-5 md:border-transparent before:bg-theme-orange md:hover:border-t-theme-orange"> <span>Make a complaint</span> <span class="icon icon-arrow-right text-xl md:hidden"></span> </a> </li> <li class="md:flex"> <a href="/action-weve-taken/" class="relative flex justify-between items-center text-white text-serif-lg md:text-base whitespace-nowrap md:whitespace-normal pl-9 md:pl-3 pr-4 md:pr-3 py-2 md:py-1 font-serif md:font-sans before:absolute before:w-2.5 before:top-2 before:bottom-2 before:left-4 md:before:hidden md:border-y-5 md:border-transparent before:bg-theme-red md:hover:border-t-theme-red"> <span>Action we've taken</span> <span class="icon icon-arrow-right text-xl md:hidden"></span> </a> </li> <li class="md:flex"> <a href="/about-the-ico/" class="relative flex justify-between items-center text-white text-serif-lg md:text-base whitespace-nowrap md:whitespace-normal pl-9 md:pl-3 pr-4 md:pr-3 py-2 md:py-1 font-serif md:font-sans before:absolute before:w-2.5 before:top-2 before:bottom-2 before:left-4 md:before:hidden md:border-y-5 md:border-transparent before:bg-theme-blue md:hover:border-t-theme-blue"> <span>About the ICO</span> <span class="icon icon-arrow-right text-xl md:hidden"></span> </a> </li> </ul> </nav> </div> </div> </header> <main id="main-content" class="pt-20 md:pt-0 md:mt-7 mb-3 md:mb-4"> <div class="lg:container px-4 mb-4 print:hidden"> <nav aria-label="breadcrumb"> <ul class="-mx-1 flex flex-wrap text-sm"> <li class="mx-1"> <span class="after:content-['/'] after:ml-1"> <a href="/for-organisations/" class="text-link hover:underline">For organisations</a> </span> </li> <li class="mx-1"> <span class="after:content-['/'] after:ml-1"> <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/" class="text-link hover:underline">Direct marketing and privacy and electronic communications</a> </span> </li> <li class="mx-1"> <span class="after:content-['/'] after:ml-1"> <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/" class="text-link hover:underline">Guidance on direct marketing using electronic mail</a> </span> </li> <li class="mx-1"> <span>How do we comply with the rules on sending marketing by electronic mail?</span> </li> </ul> </nav> </div> <div class="lg:container px-4"> <div class="border-dotted border-b-2 border-neutral-200 pb-2 sm:pb-3.5 md:pb-6 mb-2 sm:mb-3.5 md:mb-5"> <div class="md:flex md:items-center"> <h1 class="py-0.5 font-serif leading-none sm:border-l-10 sm:pl-3 text-serif-2xl sm:text-serif-3xl border-theme-yellow">How do we comply with the rules on sending marketing by electronic mail?</h1> <div class="md:pl-2 md:ml-auto mt-2 md:mt-2 print:hidden"> <a href="#0" id="download-options-toggle" class="font-serif text-serif-base text-link flex items-center"> Download options <span class="hidden">(Opens download panel)</span> <i class="inline-block icon icon-download text-xl text-white bg-pink-600 rounded-full p-2 ml-2"></i> </a> </div> </div> <div class="download-container bg-pink-600 mt-5 rounded-lg motion-safe:transition-all motion-safe:duration-200 overflow-hidden max-h-0 hidden" id="download-options-container"> <form method="post" action="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/how-do-we-comply-with-the-rules-on-sending-marketing-by-electronic-mail/" class="p-3 text-white md:flex md:items-center" target="_blank"> <input type="hidden" name="currentUrl" value="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/how-do-we-comply-with-the-rules-on-sending-marketing-by-electronic-mail/" /> <input type="hidden" name="nodeId" value="6266" /> <input type="hidden" name="formId" /> <input type="hidden" name="recordId" /> <fieldset class="md:flex md:items-center"> <legend class="font-serif text-serif-base contents">Pages</legend> <ul class="flex mt-1 md:mt-0 ml-2"> <li class="md:ml-2"> <input type="radio" name="pages" id="pages-all" value="all" class="hidden appearance-none cursor-pointer peer" checked> <label for="pages-all" class="cursor-pointer rounded p-2 pr-3 flex justify-center items-center peer-checked:bg-pink-700 text-sm md:text-base"> <i class="icon icon-book mr-2 text-base md:text-lg"></i>All pages </label> </li> <li class="ml-2"> <input type="radio" name="pages" id="pages-this" value="this" class="hidden appearance-none cursor-pointer peer"> <label for="pages-this" class="cursor-pointer rounded p-2 pr-3 flex justify-center items-center peer-checked:bg-pink-700 text-sm md:text-base"> <i class="icon icon-file-blank mr-2 text-base md:text-lg"></i>This page </label> </li> </ul> </fieldset> <fieldset class="md:ml-10 md:flex md:items-center mt-3 md:mt-0"> <legend class="font-serif text-serif-base contents">Format</legend> <ul class="flex mt-1 md:mt-0 ml-2"> <li class="md:ml-2"> <input type="radio" name="types" id="types-pdf" value="pdf" class="hidden appearance-none cursor-pointer peer" checked> <label for="types-pdf" class="cursor-pointer rounded p-2 pr-3 flex justify-center items-center peer-checked:bg-pink-700 text-sm md:text-base"> <i class="icon icon-file-pdf mr-2 text-base md:text-lg"></i>PDF </label> </li> </ul> </fieldset> <div class="ml-auto mt-3 md:mt-0"> <button class="btn bg-primary flex items-center text-base md:text-lg"> Download <i class="icon icon-download text-white ml-2 text-lg"></i> </button> </div> </form> </div> </div> <div class="grid grid-cols-4"> <div class="col-span-4 md:hidden border-b-2 border-dotted border-neutral-200 flex justify-between pb-2 mb-4 cursor-pointer print:hidden" id="multipage-nav-toggle"> <p class="text-sm text-primary justify-start">Contents</p> <div class="justify-end"> <span class="icon icon-search text-primary" id="multipage-search-button"></span> <span class="icon icon-pointer-down text-primary"></span> </div> </div> <aside class="col-span-4 md:col-span-1 hidden md:block motion-safe:transition-all motion-safe:duration-200 overflow-hidden md:overflow-auto max-h-0 md:max-h-fit mb-6 md:mb-0" id="multipage-nav"> <form id="multipage-search" class="mb-3 flex" method="get"> <label for="multipage-search-input" class="sr-only">Search this document</label> <input type="search" name="search" value="" class="w-full py-2 px-2 text-sm bg-slate-100 border-r-0" id="multipage-search-input" /> <button type="submit" title="Search" class="icon icon-search px-2 bg-slate-100 border border-solid border-l-0 border-slate-700"> </button> </form> <nav> <ul> <li> <div class="mb-2 pb-2 border-b-2 border-dotted border-neutral-200"> <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/" class="pt-2 pr-2 pb-2 flex justify-between text-sm border-l-4 border-solid text-link border-transparent hover:border-neutral-200 hover:bg-neutral-100 pl-[10px]" data-id="6140"> <span>Guidance on direct marketing using electronic mail</span> </a> </div> <ul> <li> <div> <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/what-is-electronic-mail-marketing/" class="pt-2 pr-2 pb-2 flex justify-between text-sm border-l-4 border-solid text-link border-transparent hover:border-neutral-200 hover:bg-neutral-100 pl-[10px]" data-id="6249"> <span>What is electronic mail marketing?</span> </a> </div> </li> </ul> <ul> <li> <div> <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/what-are-the-rules-on-direct-marketing-using-electronic-mail/" class="pt-2 pr-2 pb-2 flex justify-between text-sm border-l-4 border-solid text-link border-transparent hover:border-neutral-200 hover:bg-neutral-100 pl-[10px]" data-id="6258"> <span>What are the rules on direct marketing using electronic mail?</span> </a> </div> </li> </ul> <ul> <li> <div> <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/how-do-we-comply-with-the-rules-on-sending-marketing-by-electronic-mail/" class="pt-2 pr-2 pb-2 flex justify-between text-sm border-l-4 border-solid bg-neutral-100 text-neutral-600 border-theme-yellow pl-[10px]" data-id="6266"> <span>How do we comply with the rules on sending marketing by electronic mail?</span> </a> </div> </li> </ul> <ul> <li> <div> <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/what-else-do-we-need-to-consider/" class="pt-2 pr-2 pb-2 flex justify-between text-sm border-l-4 border-solid text-link border-transparent hover:border-neutral-200 hover:bg-neutral-100 pl-[10px]" data-id="6281"> <span>What else do we need to consider?</span> </a> </div> </li> </ul> </li> </ul> </nav> </aside> <div class="col-span-4 md:col-span-3 md:pl-10"> <div class="mb-10"> <div class="umb-block-grid" data-grid-columns="12;" style="--umb-block-grid--grid-columns: 12;"> <div class="umb-block-grid__layout-container"> <div class="umb-block-grid__layout-item" data-content-element-type-alias="richTextBlock" data-content-element-type-key="d7ec1d8a-2a00-439e-95b4-9f3537f5ece4" data-element-udi="umb://element/45eb97ca52de4e48b706bc16f22d5aa9" data-col-span="12" data-row-span="1" style=" --umb-block-grid--item-column-span: 12; --umb-block-grid--item-row-span: 1; "> <div class="prose prose-sm md:prose-base prose-h2:font-serif sm:prose-h2:border-l-10 sm:prose-h2:pl-3 sm:prose-h2:-ml-3 sm:prose-h2:relative sm:prose-h2:left-[-10px] prose-h3:font-serif sm:prose-lead:border-l-10 sm:prose-lead:pl-3 sm:prose-lead:-ml-3 sm:prose-lead:relative sm:prose-lead:left-[-10px] prose-hr:my-4 prose-h2:border-theme-yellow-light prose-lead:border-theme-yellow-light prose-theme-yellow sm:ml-[10px] sm:pl-3"> <h2>In detail</h2><ul> <li><a href="#howdoweuseconsent" data-anchor="#howdoweuseconsent">How do we use consent to send marketing by electronic mail?</a></li> <li><a href="#howdoweusesoft" data-anchor="#howdoweusesoft"><span> </span>How do we use the soft opt-in to send marketing by electronic mail?</a></li> <li><a href="#canweusesoft" data-anchor="#canweusesoft"><span> </span>Can we use the soft opt-in for fundraising or campaigning?</a></li> <li><a href="#canweusebought" data-anchor="#canweusebought"><span> </span>Can we use bought-in lists to send electronic mail marketing?</a></li> <li><a href="#canweusepublicly" data-anchor="#canweusepublicly">Can we use publicly available contact details to send marketing by electronic mail?</a></li> <li><a href="#canweask" data-anchor="#canweask">Can we ask people to send our electronic mail marketing?</a></li> <li><a href="#canpeopleobject" data-anchor="#canpeopleobject">Can people object to our electronic mail marketing?</a></li> </ul><h3><a id="howdoweuseconsent"></a>How do we use consent to send marketing by electronic mail?</h3><p>If you want to rely on consent, your consent request <strong>must</strong> be prominent, concise, easy to understand and separate from things like general terms and conditions.</p><p>You <strong>must </strong>ensure that the consent specifically covers receiving that particular type of electronic mail from you. For example, you <strong>must</strong> have specific consent for emails or specific consent for text messages. Simply asking for consent for ‘direct marketing’ would not make it specific or informed enough.</p><div class="rt-example"> <p><strong>Example</strong></p> <table border="0"> <tbody> <tr> <td class="tint-light"><img src="/media2/migrated/2258848/good-icon.png" alt=""></td> <td class="tint-light">□ Tick here if you would like to receive marketing from us about our services by text message.</td> </tr> <tr> <td class="tint-dark"><img src="/media2/migrated/2258847/bad-icon.png" alt=""></td> <td class="tint-dark">□ Tick here if you would like to receive marketing from us about our services.</td> </tr> </tbody> </table> </div><p>Remember, some people may want to consent to some forms of electronic mail but not to others. For example, some people may want your marketing emails but not your marketing text messages. Therefore you <strong>should</strong> ask for consent separately for each one.</p><p>If you are considering sending direct marketing by text message, remember that consent to use someone’s phone number for live or automated calls doesn’t automatically cover direct marketing by text message.</p><p>Consent for electronic mail marketing <strong>must</strong> be freely given. For example, it’s unlikely that you can make consent to such marketing either a condition of buying your product or service or donating to your cause.</p><div class="rt-example"> <p><strong>Example</strong></p> <table border="0"> <tbody> <tr> <td class="tint-light"><img src="/media2/migrated/2258848/good-icon.png" alt=""></td> <td class="tint-light"> <p>If you would like to receive our marketing emails <br>please tick here □.</p> <p>Click <u>here</u> to submit your order.</p> </td> </tr> <tr> <td class="tint-dark"><img src="/media2/migrated/2258847/bad-icon.png" alt=""></td> <td class="tint-dark"> <p>By submitting your order you agree to receive our marketing emails.</p> Click <u>here</u> to submit your order.</td> </tr> </tbody> </table> </div><p>There are many different ways that you may decide to seek consent for your electronic mail marketing. For example, you <strong>could</strong> use opt-in tick boxes, use equally prominent yes or no options, or even by verbal consent. But the key point is that you <strong>must </strong>get valid consent and you <strong>should</strong> keep clear records of it. See the section <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/what-are-the-rules-on-direct-marketing-using-electronic-mail/#whatisconsent" title="What are the rules on direct marketing using electronic mail?" data-anchor="#whatisconsent">What is consent?</a><a href="#_How_does_consent_1"></a> for more information about the standard of consent you need.</p><div class="rt-example"> <p><strong>Example</strong></p> <table border="0"> <tbody> <tr> <td class="tint-light"><img src="/media2/migrated/2258848/good-icon.png" alt=""></td> <td class="tint-light"> <p>A customer uses their mobile phone to call a restaurant to book a table. The restaurant asks for their number in case it need to contact the customer about the booking and so that it can send a confirmation message.</p> <p>The customer tells the restaurant their mobile number. The restaurant then asks them if they would like to receive its marketing text messages about discounts and events.</p> <p>The customer verbally agrees, so the restaurant adds their number to its marketing database which shows the time and date that they consented.</p> <p>The restaurant subsequently sends a booking confirmation text to the customer. A few days later it also sends the customer a text advertising its special food event.</p> <p>The restaurant complies with PECR by obtaining the customer’s consent to receive its direct marketing text messages.</p> </td> </tr> <tr> <td class="tint-dark"><img src="/media2/migrated/2258847/bad-icon.png" alt=""></td> <td class="tint-dark"> <p>A customer uses their mobile phone to call a restaurant to book a table. The restaurant asks for their number in case it needs to contact the customer about the booking and so that it can send a confirmation message.</p> <p>The customer tells the restaurant their mobile number.</p> <p>The restaurant subsequently sends a booking confirmation text to the customer. A few days later it also sends the customer a text advertising its special food event.</p> <p>The customer didn’t consent to the restaurant using their phone number to send direct marketing text messages. The restaurant didn’t give any information to the customer during the phone call about using their number for this purpose.</p> <p>The customer giving the restaurant their phone number to administer their booking is not consent to receive direct marketing text messages.</p> </td> </tr> </tbody> </table> </div><p>Consent isn’t transferrable. It’s specific to receiving electronic mail marketing to a particular number or address that the person gives you. For example, the consent someone gives you to receive direct marketing to their particular email address won’t cover any other email addresses that they might also use.</p><p>Remember that, under PECR, someone gives consent “for the time being” and can withdraw it. See the section on <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/how-do-we-comply-with-the-rules-on-sending-marketing-by-electronic-mail/#canpeopleobject" title="How do we comply with the rules on sending marketing by electronic mail?" data-anchor="#canpeopleobject">Can people object to our electronic mail marketing?</a><a href="#_Can_people_change"></a> for further information.</p> </div> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="furtherReadingBlock" data-content-element-type-key="349dc532-9e3f-4f24-9fa4-2e5b86aa0eda" data-element-udi="umb://element/b4eb8a61002f43f99a710aa20b4c538a" data-col-span="12" data-row-span="1" style=" --umb-block-grid--item-column-span: 12; --umb-block-grid--item-row-span: 1; "> <further-Reading x-href="https://www.legislation.gov.uk/uksi/2003/2426/contents" x-target="_blank" x-title="Relevant provisions in PECR – see Regulation 22(2)" x-location="External link"></further-Reading> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="richTextBlock" data-content-element-type-key="d7ec1d8a-2a00-439e-95b4-9f3537f5ece4" data-element-udi="umb://element/84617e3e8a194f3caee5ddc78baba8b4" data-col-span="12" data-row-span="1" style=" --umb-block-grid--item-column-span: 12; --umb-block-grid--item-row-span: 1; "> <div class="prose prose-sm md:prose-base prose-h2:font-serif sm:prose-h2:border-l-10 sm:prose-h2:pl-3 sm:prose-h2:-ml-3 sm:prose-h2:relative sm:prose-h2:left-[-10px] prose-h3:font-serif sm:prose-lead:border-l-10 sm:prose-lead:pl-3 sm:prose-lead:-ml-3 sm:prose-lead:relative sm:prose-lead:left-[-10px] prose-hr:my-4 prose-h2:border-theme-yellow-light prose-lead:border-theme-yellow-light prose-theme-yellow sm:ml-[10px] sm:pl-3"> <div class="rt-block rt-green"> <p><strong>Further reading</strong></p> <ul> <li>For more detail on obtaining, recording and managing consent, see our UK GDPR <a href="/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/consent/" title="Consent">consent guidance</a>.</li> </ul> </div> <h3><a id="howdoweusesoft"></a>How do we use the soft opt-in to send marketing by electronic mail?</h3> <p>Many organisations find that using the soft opt-in is a good way to send electronic mail marketing to their existing customers. However, if you want to use the soft opt-in instead of consent, you <strong>must </strong>meet all of its requirements.</p> <p>It breaks down into five requirements:</p> <ol> <li>You obtained the contact details;</li> <li>In the course of a sale or negotiation of a sale of a product or service;</li> <li>You are marketing your similar products and services;</li> <li>You provided an opportunity to refuse or opt-out when you collected the details; and</li> <li>You give an opportunity to refuse or opt-out in every subsequent communication.</li> </ol> <p>We describe these requirements in detail below.</p> <h4>1. You obtained the contact details</h4> <p>You <strong>must</strong> obtain the contact details directly from the person you want to send the marketing to. If someone else obtains the contact details then the soft opt-in doesn’t apply. For example, there is no such thing as a third party marketing list that is ‘soft opt-in compliant’.</p> <div class="rt-example"> <p><strong>Example</strong></p> <table border="0"> <tbody> <tr> <td class="tint-light"><img src="/media2/migrated/2258848/good-icon.png" alt=""></td> <td class="tint-light"> <p>A restaurant collects mobile phone numbers from customers when they book a table on its website.</p> <p>By collecting the contact details themselves, the restaurant satisfies this first part of the soft opt-in.</p> </td> </tr> <tr> <td class="tint-dark"><img src="/media2/migrated/2258847/bad-icon.png" alt=""></td> <td class="tint-dark"> <p>A restaurant buys a list of people’s mobile phone numbers which the third party claims are ‘soft opt-in compliant’.</p> <p>The soft opt-in doesn’t apply because the restaurant did not obtain the contact details directly from these people. The restaurant didn’t satisfy the first part of the soft opt-in.</p> </td> </tr> </tbody> </table> </div> <p>The soft opt-in is only available to the same entity or single organisation that originally collected the contact details. For example, this means that it won’t apply to other companies within the same group as the collecting organisation.</p> <h4>2. In the course of a sale or negotiation of a sale of a product or service</h4> <p>A person doesn’t actually need to buy anything from you to trigger the soft opt-in. It’s enough if “negotiations for a sale” took place. This means that they <strong>must</strong> actively express an interest in buying your products or services. For example, by requesting a quote or asking for more details of what you offer. You <strong>must</strong> have some form of express communication.</p> <div class="rt-example"> <p><strong>Example</strong></p> <table border="0"> <tbody> <tr> <td class="tint-light"><img src="/media2/migrated/2258848/good-icon.png" alt=""></td> <td class="tint-light">A customer completes an online enquiry form asking for more details about a product or range of products. This may be enough to meet this part of the soft opt-in.</td> </tr> <tr> <td class="tint-dark"><img src="/media2/migrated/2258847/bad-icon.png" alt=""></td> <td class="tint-dark">A customer logs into a company’s website to browse its range of products. This is not enough to constitute negotiations and this part of the soft opt-in.</td> </tr> </tbody> </table> </div> <p>Another example of “negotiations for a sale” might include them signing up to a free trial of your service or product. But remember you <strong>must</strong> still meet the other parts of the soft opt-in. This includes giving people a chance to opt-out at the time you collect their details.</p> <p>The communication from the person <strong>must</strong> involve buying products or services. It’s not enough for someone to send any type of query.</p> <div class="rt-example"> <p><strong>Example</strong></p> <table border="0"> <tbody> <tr> <td class="tint-light"><img src="/media2/migrated/2258848/good-icon.png" alt=""></td> <td class="tint-light">A customer sends an online enquiry to ask if the company can order a particular product. This could constitute negotiations for a sale and satisfy this part of the soft opt-in.</td> </tr> <tr> <td class="tint-dark"><img src="/media2/migrated/2258847/bad-icon.png" alt=""></td> <td class="tint-dark">A customer sends an online enquiry asking if the company is going to open more branches in a particular location. This does not satisfy this part of the soft opt-in as the enquiry is not about buying products or services.</td> </tr> </tbody> </table> </div> <p>Currently, the PECR soft opt-in specifically uses the word “sale” and refers to “products and services”. This means it doesn’t apply to details collected where there is no sale (or such a negotiation), or where there is no product or service involved, eg fundraising and campaigning.</p> <h4>3. You are marketing your similar products and services</h4> <p>You can only send electronic mail about your similar products or services. The key question is whether people reasonably expect direct marketing about your particular product or service. This is likely to depend on the context, including the type of business you are and the category of product.</p> <div class="rt-example"> <p><strong>Example</strong></p> <table border="0"> <tbody> <tr> <td class="tint-light"><img src="/media2/migrated/2258848/good-icon.png" alt=""></td> <td class="tint-light">A customer buys bread and bananas online from a large supermarket chain. Afterwards they might reasonably expect emails about groceries, as well as emails about a wide range of other products commonly sold in supermarkets.</td> </tr> <tr> <td class="tint-dark"><img src="/media2/migrated/2258847/bad-icon.png" alt=""></td> <td class="tint-dark">A customer buys bread and bananas online from a large supermarket chain. Afterwards, however, they are unlikely to expect emails about banking or insurance products sold under the supermarket brand. These products are not bought and sold in a similar context. Also, the supermarket is usually not the same organisation as the one that provides banking or insurance products under its branding.</td> </tr> </tbody> </table> </div> <p>Because it <strong>must </strong>involve your similar products and services, the soft opt-in doesn’t apply to sending the marketing messages of other organisations.</p> <p>As in the previous requirement, because the soft opt-in currently applies to “products and services”, it can only apply to commercial marketing. This means that charities, political parties or other not-for-profit bodies cannot rely on the soft opt-in for their campaigning or fundraising, even with existing supporters. In other words, you <strong>must</strong> have consent to send electronic mail promoting your aims or ideals. See the section <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/how-do-we-comply-with-the-rules-on-sending-marketing-by-electronic-mail/#canweusesoft" title="How do we comply with the rules on sending marketing by electronic mail?" data-anchor="#canweusesoft">Can we use the soft opt-in for fundraising or campaigning?</a> for further information.</p> <h4>4. You provided an opportunity to refuse or opt-out when you collected the details</h4> <p>You <strong>must</strong> give people a clear opportunity to opt-out of your direct marketing when you first collect their details. Just because people engage with you doesn’t mean they are happy to receive direct marketing from you in the future.</p> <p>You <strong>must</strong> make it simple to opt out. When first collecting a customer’s details, you <strong>must</strong> include this as part of the same process. For example, your online forms <strong>should</strong> include a prominent opt-out box, and staff taking down details verbally <strong>should</strong> specifically offer an opt-out.</p> <div class="rt-example"> <p><strong>Example</strong></p> <table border="0"> <tbody> <tr> <td class="tint-light"><img src="/media2/migrated/2258848/good-icon.png" alt=""></td> <td class="tint-light"> <p>A customer buys some trainers from an online retailer and, as part of the buying process, provides their email address. The retailer provides a clear, easy to understand opt-out box when it asks the customer to provide their email address. The customer decides they want the retailer’s marketing so they don’t tick the box to opt out. The retailer adds their email address to its marketing database. The customer subsequently receives an email with a 10% discount code for their next purchase.</p> <p>It’s likely that these emails are compliant with this part of the soft opt-in.</p> </td> </tr> <tr> <td class="tint-dark"><img src="/media2/migrated/2258847/bad-icon.png" alt=""></td> <td class="tint-dark"> <p>A customer buys some trainers from an online retailer and, as part of the buying process, provides their email address. The retailer automatically adds their email address to its marketing database. The customer subsequently receives an email with a 10% discount code for their next purchase.</p> <p>These emails are not compliant with this part of the soft opt-in. The retailer did not give the customer an opportunity to opt-out of receiving direct marketing emails when it collected their details. This means the retailer cannot rely on the soft opt-in, even though it collected the customer’s email address during the course of a sale and the marketing is for the retailer’s similar products.</p> </td> </tr> </tbody> </table> </div> <p>You <strong>must </strong>offer an opt-out at the time you collect someone’s details. Placing an opt-out within your privacy policy is not sufficient, as this doesn’t make it easy or simple for people to opt-out. Likewise, providing an opt-out after collecting their details is also not sufficient. For example, giving an opt-out in an order completion email doesn’t constitute “at the time” you collected the details and is not a simple means of opting out.</p> <div class="rt-example"> <p><strong>Example</strong></p> <table border="0"> <tbody> <tr> <td class="tint-light"><img src="/media2/migrated/2258848/good-icon.png" alt=""></td> <td class="tint-light"> <p>A customer orders a takeaway pizza online. As part of the process, the company asks them to provide either an email address or mobile phone number. The customer provides their mobile phone number and a box appears underneath which says:</p> <p>We will send you marketing text messages about our special offers. If you don’t want to receive these please tick here .</p> <p>The customer decides to tick the box as they don’t want marketing text messages from the takeaway.</p> <p>The takeaway subsequently sends an order confirmation text to the customer. The takeaway doesn’t send them any direct marketing text messages.</p> <p>The takeaway complies with PECR and this part of the soft opt-in. This is because they gave the customer an opportunity to opt-out of marketing texts when collecting their details.</p> </td> </tr> <tr> <td class="tint-dark"><img src="/media2/migrated/2258847/bad-icon.png" alt=""></td> <td class="tint-dark"> <p>A customer orders a takeaway pizza online. As part of the process, the company asks them to provide either an email address or mobile phone number. The customer provides their mobile phone number.</p> <p>The takeaway subsequently sends an order confirmation text to the customer. This also tells them how to opt-out of the takeaway’s marketing text messages.</p> <p>Providing an opt-out after the customer gives their details is not compliant with the soft opt-in. This means any marketing text messages that the takeaway subsequently sends would breach PECR.</p> </td> </tr> </tbody> </table> </div> <h4>5. You give an opportunity to refuse or opt-out in every subsequent communication</h4> <p>You <strong>must </strong>give people the chance to opt-out of every subsequent message that you send.</p> <p>You <strong>must</strong> make it simple for customers to change their mind and opt-out or unsubscribe. For example, in subsequent messages it <strong>should</strong> be possible for them to reply directly to the message, or click a clear ‘unsubscribe’ link. With text messages you <strong>could</strong> offer an opt-out by telling people to send a stop message to a short code number. You <strong>must </strong>make this free of charge, apart from the cost to people of sending the message.</p> <div class="rt-example"> <p><strong>Example</strong></p> <table border="0"> <tbody> <tr> <td class="tint-light"><img src="/media2/migrated/2258848/good-icon.png" alt=""></td> <td class="tint-light"> <p>A yoga studio sends its clients an email about upcoming events. At the bottom of the email the studio provides the following information:</p> <p>‘If you don’t want to receive these emails from us any more please click here and we will unsubscribe you.’</p> </td> </tr> <tr> <td class="tint-dark"><img src="/media2/migrated/2258847/bad-icon.png" alt=""></td> <td class="tint-dark"> <p>A yoga studio sends its clients an email about upcoming events. At the bottom of the email the studio provides the following information:</p> <p>‘If you don’t want to receive these emails from us any more please call the studio on 01245678 and quote your membership number and email address.’</p> </td> </tr> </tbody> </table> </div> <div class="rt-example"> <p><strong>Example</strong></p> <table border="0"> <tbody> <tr> <td class="tint-light"><img src="/media2/migrated/2258848/good-icon.png" alt=""></td> <td class="tint-light"> <p>A hairdresser sends its clients a text message offering 30% off colour treatments. At the end of the text it says:</p> <p>‘To opt-out text STOP to 12345.’</p> </td> </tr> <tr> <td class="tint-dark"><img src="/media2/migrated/2258847/bad-icon.png" alt=""></td> <td class="tint-dark">A hairdresser sends its clients a text message offering 30% off colour treatments. It doesn’t provide any information in the message about how to opt-out or unsubscribe.</td> </tr> </tbody> </table> </div> <p>You shouldn’t ask people to create an account in order to unsubscribe, or ask them to log into their existing account to change their preferences. This is not considered a simple way to opt-out of your electronic mail marketing.</p> </div> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="furtherReadingBlock" data-content-element-type-key="349dc532-9e3f-4f24-9fa4-2e5b86aa0eda" data-element-udi="umb://element/76fc66059c33408dacae6b49871d2c72" data-col-span="12" data-row-span="1" style=" --umb-block-grid--item-column-span: 12; --umb-block-grid--item-row-span: 1; "> <further-Reading x-href="http://www.legislation.gov.uk/uksi/2003/2426/contents" x-target="_blank" x-title="Relevant provisions in PECR - see Regulation 22(3)" x-location="External link"></further-Reading> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="richTextBlock" data-content-element-type-key="d7ec1d8a-2a00-439e-95b4-9f3537f5ece4" data-element-udi="umb://element/79e3bd20b47548b0abd40578b1a97251" data-col-span="12" data-row-span="1" style=" --umb-block-grid--item-column-span: 12; --umb-block-grid--item-row-span: 1; "> <div class="prose prose-sm md:prose-base prose-h2:font-serif sm:prose-h2:border-l-10 sm:prose-h2:pl-3 sm:prose-h2:-ml-3 sm:prose-h2:relative sm:prose-h2:left-[-10px] prose-h3:font-serif sm:prose-lead:border-l-10 sm:prose-lead:pl-3 sm:prose-lead:-ml-3 sm:prose-lead:relative sm:prose-lead:left-[-10px] prose-hr:my-4 prose-h2:border-theme-yellow-light prose-lead:border-theme-yellow-light prose-theme-yellow sm:ml-[10px] sm:pl-3"> <h3><a id="canweusesoft"></a>Can we use the soft opt-in for fundraising or campaigning?</h3><p>No. The soft opt-in is currently worded so that it only applies to commercial marketing of products or services. It doesn’t apply to the promotion of aims and ideals, eg campaigning or fundraising.</p><p>However, you can potentially use the soft opt-in for any commercial products or services you offer.</p><div class="rt-example"> <p><strong>Example</strong></p> <p>A charity has an online shop that sells various ethically-sourced products. A customer buys some speciality teas from the online shop. When they provide their details, the charity gives them a clear, up-front chance to opt-out of direct marketing by email.</p> <p>If the customer doesn’t tick the opt-out box, the charity may use the soft opt-in to send direct marketing emails about its shop’s products (assuming it meets the other soft opt-in criteria).</p> <p>However, the charity can’t send emails to the customer about fundraising because this isn’t covered by the soft opt-in.</p> </div><p>Currently you can’t send campaigning or fundraising texts or emails without specific consent, even to existing supporters.</p><div class="rt-example"> <p><strong>Example</strong></p> <p>A supporter is making a donation online to a charity. The charity provides an opt-in box that clearly explains that people can tick if they want to hear more about the charity’s fundraising work by email. The supporter decides they would like to hear about the charity’s work, so they tick the box.</p> <p>The charity sends fundraising emails to the supporter as it has their consent to do so.</p> </div> </div> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="furtherReadingBlock" data-content-element-type-key="349dc532-9e3f-4f24-9fa4-2e5b86aa0eda" data-element-udi="umb://element/420b9c164d4448a094460fa5c787c6e7" data-col-span="12" data-row-span="1" style=" --umb-block-grid--item-column-span: 12; --umb-block-grid--item-row-span: 1; "> <further-Reading x-href="http://www.legislation.gov.uk/uksi/2003/2426/contents" x-target="_blank" x-title="Relevant provisions in PECR - see Regulation 22(3)" x-location="External link"></further-Reading> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="richTextBlock" data-content-element-type-key="d7ec1d8a-2a00-439e-95b4-9f3537f5ece4" data-element-udi="umb://element/e3b571a8f885487ab909014ffcdf206a" data-col-span="12" data-row-span="1" style=" --umb-block-grid--item-column-span: 12; --umb-block-grid--item-row-span: 1; "> <div class="prose prose-sm md:prose-base prose-h2:font-serif sm:prose-h2:border-l-10 sm:prose-h2:pl-3 sm:prose-h2:-ml-3 sm:prose-h2:relative sm:prose-h2:left-[-10px] prose-h3:font-serif sm:prose-lead:border-l-10 sm:prose-lead:pl-3 sm:prose-lead:-ml-3 sm:prose-lead:relative sm:prose-lead:left-[-10px] prose-hr:my-4 prose-h2:border-theme-yellow-light prose-lead:border-theme-yellow-light prose-theme-yellow sm:ml-[10px] sm:pl-3"> <h3><a id="canweusebought"></a>Can we use bought-in lists to send marketing by electronic mail?</h3><p>Many organisations offer marketing lists for sale, rent or under licence. Depending on the circumstances, you can potentially use such a list compiled by a third party to send direct marketing by electronic mail.</p><p>However, in order to use such a list for electronic mail marketing, the people on it <strong>must</strong> have given their consent to receive such marketing from you.</p><p>If the third party claims that those on the list consented to direct marketing, you <strong>must</strong> check that any consent is valid and actually covers you. You <strong>should</strong> do this by making the following checks:</p><ul> <li>What were people told?</li> <li>What did they consent to?</li> <li>Were you named on the consent request?</li> <li>When and how did they consent?</li> <li>Did they have a choice to consent?</li> <li>Is there a record of the consent?</li> </ul><p>You are responsible for ensuring that you comply with PECR. For example, if the consent doesn’t name you or cover the method of electronic mail that you want to use, then it isn’t valid. This means that any electronic mail marketing you send to those on the list would breach PECR. See the section <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/what-are-the-rules-on-direct-marketing-using-electronic-mail/#whatisconsent" title="What are the rules on direct marketing using electronic mail?" data-anchor="#whatisconsent">What is consent?</a><a href="#_What_is_consent?"></a> for more information.</p><p>The soft opt-in doesn’t apply to bought-in marketing lists. This is because as part of the soft opt-in you <strong>must</strong> collect the details directly from the person you want to send marketing to during the course or negotiation of a sale of a product or service. Clearly this doesn’t apply to details you got from a third party. Remember there is no such thing as a third-party marketing list that is ‘soft opt-in compliant’.</p><p>You also <strong>must</strong> be aware of the data protection implications if the information you are buying is personal data. See the section <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/what-else-do-we-need-to-consider/#whatdothe" title="What else do we need to consider?" data-anchor="#whatdothe">What do the data protection rules mean for electronic mail marketing?</a> for more information.</p><h3><a id="canweusepublicly"></a>Can we use publicly available contact details to send marketing by electronic mail?</h3><p>The term ‘publicly available’ can refer to contact details sourced from various places, including social media accounts, websites or other online or offline sources.</p><p>You <strong>must</strong> have consent or meet all of the soft opt-in requirements to send unsolicited direct marketing by electronic mail to people. Remember, these rules also apply for sole traders and some types of partnership.</p><p>Just because someone’s contact details (eg their email address or mobile number) are publicly available doesn’t mean they are consenting to your direct marketing. See the section <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/what-are-the-rules-on-direct-marketing-using-electronic-mail/#whatisconsent" title="What are the rules on direct marketing using electronic mail?" data-anchor="#whatisconsent">What is consent?</a><a href="#_What_is_consent?"></a> for more information.</p><p>The soft opt-in also doesn’t apply to contact details collected from publicly available sources. There are various criteria that you <strong>must</strong> meet to use the soft opt-in for your electronic mail. This includes you collecting their details during the course or negotiation of a sale of a product or service. You <strong>must </strong>also provide that person with an opt-out. Clearly this doesn’t apply to contact details obtained from public sources.</p><p>Therefore, if you have collected someone’s contact details from publicly available sources, it’s unlikely that you can use these to send them unsolicited electronic mail marketing. An exception to this might be someone’s business contact details that are on their employer’s website.</p><p>You also <strong>must</strong> be aware of the data protection implications if the information you are gathering is personal data. See the section <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/what-else-do-we-need-to-consider/#whatdothe" title="What else do we need to consider?" data-anchor="#whatdothe">What do the data protection rules mean for electronic mail marketing?</a><a href="#_How_do_the_1"></a> for more information.</p> </div> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="furtherReadingBlock" data-content-element-type-key="349dc532-9e3f-4f24-9fa4-2e5b86aa0eda" data-element-udi="umb://element/d721946cb1a94b1288b1c0267db9d4c8" data-col-span="12" data-row-span="1" style=" --umb-block-grid--item-column-span: 12; --umb-block-grid--item-row-span: 1; "> <further-Reading x-href="http://www.legislation.gov.uk/uksi/2003/2426/contents" x-target="_blank" x-title="Relevant provisions in PECR - see Regulation 22" x-location="External link"></further-Reading> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="richTextBlock" data-content-element-type-key="d7ec1d8a-2a00-439e-95b4-9f3537f5ece4" data-element-udi="umb://element/2d22962fc5e74e8195484e9941cf6c7a" data-col-span="12" data-row-span="1" style=" --umb-block-grid--item-column-span: 12; --umb-block-grid--item-row-span: 1; "> <div class="prose prose-sm md:prose-base prose-h2:font-serif sm:prose-h2:border-l-10 sm:prose-h2:pl-3 sm:prose-h2:-ml-3 sm:prose-h2:relative sm:prose-h2:left-[-10px] prose-h3:font-serif sm:prose-lead:border-l-10 sm:prose-lead:pl-3 sm:prose-lead:-ml-3 sm:prose-lead:relative sm:prose-lead:left-[-10px] prose-hr:my-4 prose-h2:border-theme-yellow-light prose-lead:border-theme-yellow-light prose-theme-yellow sm:ml-[10px] sm:pl-3"> <div class="rt-block rt-green"> <p><strong>Further reading</strong></p> <ul> <li>If you are considering using publicly available details of other businesses see our guidance on <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/business-to-business-marketing/" title="Business-to-business marketing">business-to-business marketing</a>.</li> </ul> </div><h3><a id="canweask"></a>Can we ask people to send our electronic mail marketing?</h3><p>Asking people to send your direct marketing to their friends and family is often known as viral marketing or a ‘refer a friend’ or ‘tell a friend’ campaign. While many people appreciate such campaigns or schemes, you <strong>must</strong> comply with the PECR rules. This applies even if you don’t send the messages yourself, but instead instigate the sending or forwarding of these messages.</p><p>Instigate doesn’t necessarily mean that you incentivised your customer to send your messages. You don’t have to provide a reward or benefit to instigate the sending of messages. It’s enough if you actively encourage someone to send or forward the messages.</p><p>Direct marketing emails and texts require consent (the soft opt-in doesn’t apply in this situation) and you <strong>must </strong>demonstrate it. You can’t collect valid consent when asking a customer to send your direct marketing. This is because you have no direct contact with the people they are sending your direct marketing to.</p><div class="rt-example"> <p><strong>Example</strong></p> <p>An online retailer operates a ‘refer a friend’ scheme, where customers are given 10% off their orders if they participate. A customer provides their own name and email address. The retailer automatically generates an email containing its marketing for them to send to their friends and family.</p> <p>The retailer is instigating the direct marketing, therefore it is responsible for complying with PECR. Because the retailer doesn’t have the friends’ and family’s consent, such emails breach PECR.</p> </div><p>Many organisations offer rewards if a customer gets their friends and family to also become customers. The fact that such a reward is available doesn’t necessarily mean that PECR is engaged. However, if you are encouraging people to send electronic mail to their friends about becoming your customer, you are instigating the sending of direct marketing.</p><p>We appreciate it’s difficult for you to control how your customer decides to make other people aware of your reward scheme. However, you can take steps to avoid being the instigator of the messages in this scenario. For example, by not creating pre-populated emails (as in the example above) or not actively encouraging customers to send an email or text message to their friends and family about the reward.</p><div class="rt-example"> <p><strong>Example</strong></p> <p>A company operates a ‘refer a friend’ scheme where customers get a discount if their friends or family switch to the company’s service.</p> <p>When the customer logs into their account, there is a page about the scheme. It explains that if their friends or family input the customer’s unique code when signing up to the company’s services, the customer then gets a discount on their bill. There is no mention on the webpage of how the customer should make people aware of the scheme. It’s therefore for the customer to decide if and how they take part.</p> <p>In this case, if a customer decides to send electronic mail to make their friends and family aware of the scheme, the company won’t have responsibility under PECR as it is not instigating such messages.</p> </div><p>In terms of fundraising, often a key part is people participating in sponsored events. People may choose to seek their sponsorship using electronic mail. You aren’t considered the instigator of those messages (even though it is your event), if you haven’t encouraged them to use that method.</p><p>Sometimes your customers and supporters may send your messages to their friends and family on their own initiative. For example, they may be recommending you, giving details of your promotion or campaign or linking to a product on your website. Obviously you are not responsible under PECR if someone chooses, with no encouragement from you, to send such messages.</p> </div> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="furtherReadingBlock" data-content-element-type-key="349dc532-9e3f-4f24-9fa4-2e5b86aa0eda" data-element-udi="umb://element/461a6937914345f18c3d02bb558b05d0" data-col-span="12" data-row-span="1" style=" --umb-block-grid--item-column-span: 12; --umb-block-grid--item-row-span: 1; "> <further-Reading x-href="http://www.legislation.gov.uk/uksi/2003/2426/contents" x-target="_blank" x-title="Relevant provisions in PECR - see Regulation 22" x-location="External link"></further-Reading> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="richTextBlock" data-content-element-type-key="d7ec1d8a-2a00-439e-95b4-9f3537f5ece4" data-element-udi="umb://element/2e62d9f3d8c2418a9a0f212dc58f331c" data-col-span="12" data-row-span="1" style=" --umb-block-grid--item-column-span: 12; --umb-block-grid--item-row-span: 1; "> <div class="prose prose-sm md:prose-base prose-h2:font-serif sm:prose-h2:border-l-10 sm:prose-h2:pl-3 sm:prose-h2:-ml-3 sm:prose-h2:relative sm:prose-h2:left-[-10px] prose-h3:font-serif sm:prose-lead:border-l-10 sm:prose-lead:pl-3 sm:prose-lead:-ml-3 sm:prose-lead:relative sm:prose-lead:left-[-10px] prose-hr:my-4 prose-h2:border-theme-yellow-light prose-lead:border-theme-yellow-light prose-theme-yellow sm:ml-[10px] sm:pl-3"> <h3><a id="canpeopleobject"></a>Can people object to our electronic mail marketing?</h3><p>Yes. People can object to receiving your electronic mail marketing and they can decide that they no longer want your messages. PECR specifically uses the language “for the time being” which means that they can change their previous preferences. </p><p>In short you <strong>must</strong>:</p><ul> <li>not send electronic mail marketing to anyone that has opted-out or unsubscribed; and</li> <li>stop sending electronic mail marketing based on consent where someone withdraws that consent.</li> </ul><p>You <strong>should</strong> have a process in place to deal with anyone who tells you they no longer want your electronic mail marketing.</p><p>It’s important to remember that people are free to change their mind about getting your direct marketing. For example, they can choose to withdraw their consent to receiving your direct marketing messages at any time and you <strong>must</strong> respect this.</p><p>If someone opts out or unsubscribes, this is likely to cover a particular contact type. For example, if someone gets marketing from you by text message and email but then decides to use the email’s unsubscribe link this opt-out is only likely to cover email marketing. It would not affect the text messages. This is assuming that the unsubscribe link was clear that it only covers email marketing.</p><div class="rt-example"> <p><strong>Example</strong></p> <p>A customer receives marketing by text message and email from a company. The company is sending the messages while relying on the soft opt-in. As part of this, each text message tells people how to opt-out of the texts and each email has an unsubscribe button which makes clear that using it stops the emails.</p> <p>The customer decides they no longer want to receive marketing by email so uses the unsubscribe button.</p> <p>The company stops sending marketing to them by email. However, as the customer has not opted out of the texts, the company continues to send marketing by this other method.</p> </div><p>If someone unsubscribes from your particular electronic mail marketing method, you <strong>must</strong> <strong>not</strong> send them any further marketing using that method. You <strong>should</strong> stop sending the messages as soon as possible.</p><p>You <strong>should </strong>add the contact details of people who withdraw their consent or unsubscribe to your ‘do not contact’ or suppression list. Using such a list helps you to comply, as you can check against it and avoid sending electronic mail marketing to anyone who has told you not to.</p><p>If someone withdraws their consent or unsubscribes, you can only send electronic mail marketing to them if in the future they subsequently decide to consent to such direct marketing from you.</p><p>As people may want to get your electronic mail marketing at a later date, you may wish to make them aware of how they can do this. For example, when they unsubscribe you <strong>could </strong>send them an automatic bounce back message (using the method they have unsubscribed from). This <strong>could</strong> confirm that they have unsubscribed and advise them of what to do if they change their mind. However, this message <strong>must</strong> <strong>not</strong> require them to take action to confirm their unsubscribe request.</p><p>You <strong>could </strong>also remind people of their electronic mail marketing preferences if the reminder is a minor addition to a message that you were sending anyway. For example, you <strong>could</strong> include this on an email confirmation when someone places an order with you. This <strong>could</strong> tell them how they can update their preferences (but without encouraging them to change their mind).</p><p>People also have data protection objection rights if you are using their personal data when sending electronic mail marketing. See the section <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/what-else-do-we-need-to-consider/#whatdothe" title="What else do we need to consider?" data-anchor="#whatdothe">What do the data protection rules mean for electronic mail marketing?</a><a href="#_What_do_the"></a> for more information.</p> </div> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="furtherReadingBlock" data-content-element-type-key="349dc532-9e3f-4f24-9fa4-2e5b86aa0eda" data-element-udi="umb://element/0b3c996d99c54790a83d4014e52002f7" data-col-span="12" data-row-span="1" style=" --umb-block-grid--item-column-span: 12; --umb-block-grid--item-row-span: 1; "> <further-Reading x-href="https://www.legislation.gov.uk/uksi/2003/2426/contents" x-target="_blank" x-title="Relevant provisions in PECR - see Regulation 22" x-location="External link"></further-Reading> </div> </div> </div> </div> <nav class="print:hidden inline-flex flex-col items-start gap-5"> <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/what-are-the-rules-on-direct-marketing-using-electronic-mail/" class="group text-primary"> <div class="flex items-center"> <i class="icon icon-arrow-left text-4xl"></i> <span class="pl-3 flex flex-col"> <span class="text-lg font-semibold">Previous</span> <span class="text-sm underline underline-offset-4 decoration-dotted decoration-1 group-hover:decoration-solid">What are the rules on direct marketing using electronic mail?</span> </span> </div> </a> <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-direct-marketing-using-electronic-mail/what-else-do-we-need-to-consider/" class="group text-primary"> <div class="flex items-center"> <i class="icon icon-arrow-right text-4xl"></i> <span class="pl-3 flex flex-col"> <span class="text-lg font-semibold">Next</span> <span class="text-sm underline underline-offset-4 decoration-dotted decoration-1 group-hover:decoration-solid">What else do we need to consider?</span> </span> </div> </a> </nav> </div> </div> </div> </main> <a href="#top" id="button-top" class="transition-opacity duration-500 flex items-center justify-center fixed right-4 bottom-4 z-10 rounded-full outline outline-white w-8 h-8 bg-primary opacity-0 hidden print:hidden"> <span class="icon icon-arrow-up text-white"></span> <span class="sr-only">Back to top</span> </a> <footer class="sticky top-[100vh] print:hidden"> <div class="lg:container px-4 border-t-2 border-dotted border-neutral-200 mt-6"> <div class="py-3"> <button onClick="window.print()" class="flex items-center group"> <i class="icon icon-printer text-lg text-white rounded-full p-1 bg-neutral-400"></i> <span class="ml-2 text-sm text-link group-hover:underline">Print this page</span> </button> </div> </div> <div class="bg-neutral-100"> <div class="lg:container px-4"> <div class="py-5 flex"> <div class="hidden md:block flex-auto"> <ul class="grid gap-4 grid-cols-4"> <li> <div class="mb-3"> <a href="/for-the-public/" class="font-serif text-serif-base text-link hover:underline">For the public</a> </div> <ul class="text-sm text-neutral-600 -mt-1"> <li class="mt-1"> <a href="/for-the-public/official-information/" class="hover:underline">Official information</a> </li> <li class="mt-1"> <a href="/for-the-public/nuisance-calls/" class="hover:underline">Nuisance calls</a> </li> </ul> </li> <li> <div class="mb-3"> <a href="/for-organisations/" class="font-serif text-serif-base text-link hover:underline">For organisations</a> </div> <ul class="text-sm text-neutral-600 -mt-1"> <li class="mt-1"> <a href="/for-organisations/uk-gdpr-guidance-and-resources/" class="hover:underline">UK GDPR guidance and resources</a> </li> <li class="mt-1"> <a href="/for-organisations/foi/" class="hover:underline">Freedom of information</a> </li> <li class="mt-1"> <a href="/for-organisations/eir-and-access-to-information/" class="hover:underline">EIR and access to information</a> </li> <li class="mt-1"> <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/" class="hover:underline">Direct marketing</a> </li> <li class="mt-1"> <a href="/for-organisations/advice-and-services/" class="hover:underline">Advice and services</a> </li> </ul> </li> <li> <div class="mb-3"> <a href="/action-weve-taken/" class="font-serif text-serif-base text-link hover:underline">Action we've taken</a> </div> <ul class="text-sm text-neutral-600 -mt-1"> <li class="mt-1"> <a href="/action-weve-taken/enforcement/" class="hover:underline">Enforcement action</a> </li> <li class="mt-1"> <a href="/action-weve-taken/decision-notices/" class="hover:underline">Decision notices</a> </li> <li class="mt-1"> <a href="https://ico.org.uk/action-weve-taken/audits-and-overview-reports/" class="hover:underline">Audits</a> </li> </ul> </li> <li> <div class="mb-3"> <a href="/about-the-ico/" class="font-serif text-serif-base text-link hover:underline">About the ICO</a> </div> <ul class="text-sm text-neutral-600 -mt-1"> <li class="mt-1"> <a href="/about-the-ico/who-we-are/" class="hover:underline">Who we are</a> </li> <li class="mt-1"> <a href="/about-the-ico/what-we-do/" class="hover:underline">What we do</a> </li> <li class="mt-1"> <a href="/about-the-ico/media-centre/" class="hover:underline">Media centre</a> </li> <li class="mt-1"> <a href="/about-the-ico/jobs/" class="hover:underline">Careers</a> </li> <li class="mt-1"> <a href="/about-the-ico/modern-slavery-statement/" class="hover:underline">Modern Slavery Statement</a> </li> </ul> </li> </ul> </div> <div class="hidden md:block flex-auto mx-8 border-l-2 border-dotted border-neutral-400"> </div> <div class="flex-auto"> <div class="font-serif text-serif-base text-link mb-3">Follow us</div> <ul class="flex flex-col sm:flex-row md:flex-col sm:flex-wrap sm:gap-x-4 gap-y-2 text-sm text-neutral-600"> <li class="sm:flex-auto md:flex-none"> <a class="flex items-center hover:underline" href="https://x.com/iconews" target="_blank"> <img class="rounded-full mr-2" src="/media2/3e3molj2/x-logo-1.svg?width=24&height=24&v=1db7d782a8d9170" width="24" height="24" alt="Icon for the X @ICONews social link" /> <span>X @ICONews</span> </a> </li> <li class="sm:flex-auto md:flex-none"> <a class="flex items-center hover:underline" href="http://www.youtube.com/user/icocomms" target="_blank"> <img class="rounded-full mr-2" src="/media2/z3vdkkxj/youtube.svg?width=24&height=24&v=1db042ab32beee0" width="24" height="24" alt="Icon for the YouTube social link" /> <span>YouTube</span> </a> </li> <li class="sm:flex-auto md:flex-none"> <a class="flex items-center hover:underline" href="http://linkedin.com/company/information-commissioner's-office" target="_blank"> <img class="rounded-full mr-2" src="/media2/cgdpvn4n/linkedin.svg?width=24&height=24&v=1db042ab2dda7d0" width="24" height="24" alt="Icon for the LinkedIn social link" /> <span>LinkedIn</span> </a> </li> <li class="sm:flex-auto md:flex-none"> <a class="flex items-center hover:underline" href="http://facebook.com/ICOnews" target="_blank"> <img class="rounded-full mr-2" src="/media2/g2nhkyjv/facebook.svg?width=24&height=24&v=1db03b86b4b62d0" width="24" height="24" alt="Icon for the Facebook social link" /> <span>Facebook</span> </a> </li> <li class="sm:flex-auto md:flex-none"> <a class="flex items-center hover:underline" href="/about-the-ico/media-centre/e-newsletter/"> <img class="rounded-full mr-2" src="/media2/thzeryz5/envelope.svg?width=24&height=24&v=1db03b86a1d4310" width="24" height="24" alt="Icon for the Subscribe to our e-newsletter social link" /> <span>Subscribe to our e-newsletter</span> </a> </li> </ul> </div> </div> </div> </div> <div class="bg-secondary"> <div class="lg:container px-4"> <div class="py-3 md:hidden"> <div class="font-serif text-center md:text-left text-white text-serif-base md:flex items-end md:pl-8 border-secondary border-dotted md:border-l-2"> <span>The ICO exists to empower you through information.</span> </div> </div> </div> </div> <div class="bg-primary"> <div class="lg:container px-4"> <div class="pt-2"> <ul class="-mx-3 flex flex-wrap text-white text-sm md:text-base"> <li class="mx-3 my-1"> <a href="/global/contact-us/" class="hover:underline">Contact us</a> </li> <li class="mx-3 my-1"> <a href="/global/privacy-notice/" class="hover:underline">Privacy notice</a> </li> <li class="mx-3 my-1"> <a href="/global/cookies/" class="hover:underline">Cookies</a> </li> <li class="mx-3 my-1"> <a href="/global/accessibility/" class="hover:underline">Accessibility</a> </li> <li class="mx-3 my-1"> <a href="/about-the-ico/who-we-are/wales-office/" class="hover:underline">Cymraeg</a> </li> <li class="mx-3 my-1"> <a href="/global/request-publications/" class="hover:underline">Publications</a> </li> <li class="mx-3 my-1"> <a href="/global/disclaimer/" class="hover:underline">Disclaimer</a> </li> <li class="mx-3 my-1"> <a href="/global/copyright-and-re-use-of-materials/" class="hover:underline">© Copyright</a> </li> </ul> </div> <div class="py-5"> <div class="md:flex md:items-center"> <div class="pr-4 mb-2 md:mb-0"> <img class="w-10" src="/media2/r34b3hma/ogl.png?width=40&height=16&v=1db03b8684a57d0" width="40" height="16" alt="" /> </div> <div class="prose prose-sm prose-white"> <p>All text content is available under the <a href="http://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/">Open Government Licence v3.0</a>, except where otherwise stated.</p> </div> </div> </div> </div> </div> </footer> <script type="text/javascript" src="https://cc.cdn.civiccomputing.com/9/cookieControl-9.9.min.js"></script> <script type="application/json" id="cookie-settings"> {"apiKey":"dbf86e044f3ab8c4df852af5c7c6ceb2dd7678dd","necessaryCookies":[".AspNetCore.Antiforgery.*","language"],"statement":{"description":"For more detailed information, see our","name":"Cookies page","url":"/global/cookies/","updated":"17/12/2024"},"text":{"title":"Cookies on the ICO website","intro":"We use some essential cookies to make this site work. We\u0027d like to set analytics cookies to understand how you use this site. We may use services from Vimeo and YouTube that may also use cookies.","acceptSettings":"Accept non-essential cookies","rejectSettings":"Reject non-essential cookies","necessaryTitle":"Essential cookies","necessaryDescription":"These cookies are necessary for core functionality, such as security and network management. They always need to be on.","closeLabel":"Save and close","cornerButton":"Cookie options","on":"On","off":"Off"},"optionalCookies":[{"name":"analytics","label":"Analytics cookies","description":"We use Silktide to measure how you use the ICO website. These cookies collect information about how you got to the site, the pages you visit and how long you spend on each page, and what you click on."},{"name":"videoPlayer","label":"Video player cookies","description":"Some pages of the ICO website include videos hosted on Vimeo and YouTube. If you enable this setting, this may result in the video sharing platform collecting information about your viewing for analytics and advertising purposes. If you don\u2019t enable this setting, the pages will include external links instead."}]} </script> <script type="text/plain" id="silktide-settings">12d0c703744ea255b679f823daf1645f</script> <script type="text/javascript" src="/js/index.js?v=EGUKR-8PfUxmRc3YinFHzWpnxPEjWadt4C7zvZNOA6k"></script> </body> </html>

CINXE.COM

How do we comply with the rules on sending marketing by electronic mail? | ICO