Guide · Spam marketing

You never said yes.
That’s the whole point.

Marketing by text and email runs on one simple rule: they needed your consent. No consent, no messages. And "we bought your number from a partner" is a confession, not a defence.

1.The consent rule

The Privacy and Electronic Communications (EC Directive) Regulations 2003 · reg.22 · Use of electronic mail for direct marketing purposes
", a person shall neither transmit, nor instigate the transmission of, unsolicited communications for the purposes of direct marketing by means of electronic mail unless the recipient of the electronic mail has previously notified the sender that he consents for the time being to such communications"…
In plain English: Companies are generally not allowed to send you marketing emails unless you have specifically given them your permission first. There is a narrow exception if you are already an existing customer and they are marketing similar products, provided they give you an easy way to opt out.
§ Read the full text on legislation.gov.uk →

2.Your kill switch, and compensation

Tell them to stop and they must, permanently. Objecting to direct marketing is also an absolute right under the UK GDPR: no balancing, no exceptions. And where a breach causes you damage, the regulations provide for compensation:

Regulation (EU) 2016/679 (UK GDPR, retained) · art.21 · Right to object
"Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. (3)Where the data"…
In plain English: You have the right to tell a company to stop using your personal data for their own interests or for direct marketing. Once you object, they must stop using your information unless they can prove they have a very strong legal reason to continue.
§ Read the full text on legislation.gov.uk →
The Privacy and Electronic Communications (EC Directive) Regulations 2003 · reg.30 · Proceedings for compensation for failure to comply with requirements of the Regulations
"A person who suffers damage by reason of any contravention of any of the requirements of these Regulations by any other person shall be entitled to bring proceedings for compensation from that other person for that damage."
In plain English: If you suffer harm or loss because a company broke privacy rules, such as sending you illegal spam, you can take them to court to claim compensation. The company can avoid paying if they can prove they took all reasonable steps to follow the law.
§ Read the full text on legislation.gov.uk →

3.What to do

Want to know where you stand?

Tell us what happened in your own words. We check it against the law above, free, and give you a straight answer either way. If the law is on your side, your formal letter, citing the exact provisions, is £2.99.

Check where I stand, free →

PECR and UK GDPR apply UK-wide. This is guidance to help you understand your rights, not formal legal advice, and we're entirely independent: no affiliation with Citizens Advice, GOV.UK or any law firm. Every quotation above links to the official text so you can check us. Law verified current at July 2026.