Legal and accounting support for UK businesses and individuals
office@yudey.uk
Data protection and digital business guides · 6 min read

Marketing emails to business contacts

Check UK B2B email marketing rules by identifying subscriber type, personal data use, objections and the source of contact details.

Jurisdiction: United Kingdom.

B2B email marketing rules depend partly on the subscriber type. Corporate subscribers are treated differently from individuals, including sole traders and some partnerships. A work-related address does not automatically establish which category applies or remove UK GDPR responsibilities for named contacts.

Identify the sender, provide a valid opt-out route and honour objections. Assess the lawful basis for personal data and explain its use where required. Keep evidence of how the contact was obtained; a public profile or directory entry does not itself grant unrestricted marketing permission.

Classify the recipient before building a campaign

Identify whether the subscriber is a corporate body or an individual subscriber. A person using a business email address may be a sole trader, and a partnership's legal form can matter. Do not classify contacts solely from the domain name or a job title. Where the evidence is incomplete, resolve the category before selecting the marketing route rather than treating every business-looking address as a limited company.

Corporate email marketing and use of a named person's information are related but distinct questions. The ICO explains the different PECR treatment of corporate subscribers and the continuing data protection responsibilities for personal information. [1] Record the source, proposed audience and relevance of the message. A director's public listing is useful evidence of a role, not blanket permission to use all available personal information for any promotion.

Assess the message as well as the list

Review the actual subject line, content and call to action. A supposedly administrative update can be direct marketing if it promotes a new service. Similarly, a sales message sent manually by an employee does not become exempt simply because it avoids a bulk email platform. Give the sales team a simple classification process and a route for uncertain messages before they are sent.

Where individual subscribers are involved, examine consent or a properly applicable alternative such as the commercial soft opt-in against all its conditions. The current electronic mail guidance addresses this separately from the corporate subscriber position. [2] Do not inherit a supplier's assumptions about earlier customer relationships. A mixed list should be segmented using evidence, with unsupported entries excluded from the relevant campaign.

Keep suppression effective across the business

Provide clear sender identification and a working opt-out route. Test the unsubscribe journey without requiring an account login or a sales conversation. Make sure an objection reaches manual contact lists, CRM exports and campaign audiences as well as the platform that recorded it. Deleting the email from one campaign can be insufficient if a later import restores the same address from a salesperson's spreadsheet.

Maintain only the information reasonably needed to honour suppression. Restrict the list to that purpose and explain its role to staff so they do not remove it as an ordinary stale prospect record. Establish how changed addresses and company reorganisations will be handled. The guide to Marketing consent and customer preferences develops this operational side, while Buying a mailing list: questions to ask covers evidence when the source is a purchased list.

Review targeting and campaign evidence

Keep a campaign file containing the audience criteria, source assessment, approved message and suppression check. For legitimate interests, document the relevant purpose and balance instead of assuming that commercial relevance always makes the use fair. Avoid collecting private details about employees merely to personalise a pitch. Good targeting can mean using less information and contacting fewer people whose professional role is clearly relevant.

Monitor complaints and replies as well as open rates. A high delivery rate says little about whether the contacts expected the approach or whether objections are being honoured. Pause a problematic segment while investigating the source or classification. Record changes so another team does not repeat the same import under a new campaign name a month later.

For a review through Business privacy notice review, provide sample messages, subscriber categories and the evidence supporting each acquisition route. Ask for a practical rule for sales staff, including what to do when the business type is uncertain. Make the approved process cover individual outreach and third-party agencies. Responsibility should remain clear even where an agency operates the campaign software on the business's behalf.

Check event contacts before importing them

A badge scan, business card or attendee spreadsheet can represent different expectations and permissions. Record how the contact was obtained and what the person was told. Participation in an event does not answer every question about subsequent promotional email, especially where an organiser passes details to several sponsors.

Give the campaign operator separate fields for provenance, subscriber assessment and objections. If the organiser cannot supply the relevant collection wording, resolve that gap before treating the entire list as ready for use. Keep an ordinary follow-up to a requested conversation distinguishable from enrolment in a recurring newsletter, and make sure staff understand which activity the import has actually enabled in the mailing system.

Illustrative scenario

A supplier imports a list containing limited companies and sole traders. It separates the categories and checks the relevant PECR position rather than sending one campaign on the assumption that all business contacts are exempt. Suppression choices are then applied across the email system and the sales team's contact lists.

Preparation checklist

  • Identify corporate and individual subscribers correctly.
  • Record the source and purpose of contact data.
  • Check PECR and UK GDPR requirements separately.
  • Test identification, unsubscribe and suppression processes.

Frequently asked questions

Are work email addresses always corporate subscribers?

No. Subscriber status depends on the person or entity using the service, not simply the appearance of the address. Sole traders and some partnerships require different treatment.

Does manual outreach avoid electronic marketing rules?

No general exemption follows from sending a message manually. Assess its promotional purpose, subscriber type and personal data use in the same way as other electronic outreach.

Should we delete an unsubscribed address entirely?

A limited suppression record can be needed to prevent future contact. Restrict its use and avoid re-importing the address from another list or an agency's audience file.

Can a public directory supply unrestricted leads?

Public availability does not remove the need to assess your own use. Keep provenance, relevance and the applicable marketing assessment before adding named contacts to a campaign.

Official sources

Sources checked: 8 September 2026. Check the linked guidance for subsequent changes.

  1. ICO: Business-to-business marketing
  2. ICO: Electronic mail marketing rules

General information only. The appropriate action depends on your circumstances and the applicable jurisdiction.

Report a correction