Running local service marketing without breaking UK regulations

What to take away

Consent and the UK GDPR

Local service marketing often starts with a list of past customers. If you use personal data, the UK GDPR requires a lawful basis to contact them. For texts and emails, you must also follow the Privacy and Electronic Communications Regulations 2003 (PECR).

For marketing emails and texts to individual subscribers, PECR generally requires consent unless the soft opt-in applies. That exception requires you to have collected the details during a sale or negotiations, market your own similar products or services, and offer a clear opt-out when collecting the details and in every message. A past purchase by itself is not enough.

PECR treats corporate subscribers differently: consent is not generally required for business-to-business email to a corporate subscriber, but you must identify yourself and provide a way to opt out. Sole traders and ordinary partnerships are generally treated as individual subscribers, so marketing emails to them usually need consent or the soft opt-in. The UK GDPR still applies when you use personal data, such as a named employee's address. B2B advertising claims must also comply with the Business Protection from Misleading Marketing Regulations 2008.

Before making live marketing calls, screen numbers against the Telephone Preference Service (TPS) and Corporate Telephone Preference Service (CTPS), and honour your own suppression list. Automated marketing calls require consent under PECR.

PECR also requires consent before non-essential cookies or similar technologies store information on, or access information from, a user's device. The exception is for technologies strictly necessary to provide a service the user has requested.

Follow the ICO's Direct marketing guidance, including its guidance on consent and legitimate interests. Consent must be freely given, specific, informed and unambiguous. A tick box buried in a job sheet rarely meets that test. Booking a boiler repair does not allow marketing solar panels.

Record when and how consent was given, and keep the wording you used. If a customer withdraws consent, stop promptly. Treat every unsubscribe as urgent.

Advertising claims and the CMA

The Digital Markets, Competition and Consumers Act 2024 (DMCC Act) sets the consumer unfair-commercial-practices rules, including rules against misleading actions and omissions. These rules apply to advertising on your website, van and Google profile.

Saying "fully insured" when you are not, or quoting a price that hides a compulsory call-out fee, can breach those rules. The Competition and Markets Authority (CMA) has direct enforcement powers under the DMCC Act and can impose penalties or take court action; Trading Standards also enforce consumer protection law. Every claim should be one you can evidence.

The CAP Code also applies to many non-broadcast adverts, including website, social media and leaflet advertising. The Advertising Standards Authority (ASA) administers the Code; make sure claims are truthful and that you can substantiate them.

Pricing, urgency and fake reviews

"Only two slots left this week" is a risky line if it is not true. The CMA's guidance on online choice architecture and drip pricing addresses practices such as fake urgency and misleading price presentation. The DMCC Act specifically addresses drip pricing and gives the CMA direct enforcement powers. If you use a countdown timer on a quote page, the deadline must be real.

The DMCC Act prohibits fake reviews, and the CMA can enforce the rules directly. Buying reviews from a third party can lead to enforcement. For a fuller view of how these rules interact with everyday marketing decisions, see the Local service marketing: UK rules and compliance guide.

A worked example with pound figures

Suppose a two-van electrician business in Leeds spends £600 a month on local ads and £250 a month on a leaflet drop. It also wants to text 400 past customers about a new EV charger service. If those customers never opted in to marketing, the texts should not go out.

Instead it could email the 120 customers who ticked a consent box at quote stage. At a 4% response rate that is roughly five enquiries, and at a £1,800 average job value, about £9,000 in quoted work. The compliant route costs less than the £250 leaflet drop. These figures are illustrative, not benchmarks.

Disclosure and accountability

If your business processes personal data, check whether it must register with the ICO and pay the ICO data protection fee; an exemption may apply. This is separate from having a lawful basis under the UK GDPR.

If you pay a local blogger or a community group to recommend you, disclose the payment. The same applies to affiliate links.

A disclosure policy should set out who paid, what they received and whether the recommendation is independent. The DMCC Act's unfair-commercial-practices rules cover hidden commercial intent. Our guide to a Local service marketing disclosure policy covers wording that keeps a paid partnership clear.

Common questions

Do the same rules apply across the UK?

For consumer protection and data protection, yes. The UK GDPR and the consumer protection provisions of the Digital Markets, Competition and Consumers Act 2024 apply in England, Scotland, Wales and Northern Ireland. Enforcement priorities vary because Trading Standards teams are funded locally.

Can I rely on legitimate interests for cold email?

Not as a substitute for PECR. For marketing email to an individual subscriber, PECR generally requires consent unless the soft opt-in applies; a UK GDPR legitimate interests assessment does not override that rule. Corporate subscribers are treated differently under PECR, but the UK GDPR still applies when personal data is involved.

What happens if I get it wrong?

For the most serious UK GDPR infringements, the ICO can fine up to £17.5 million or 4% of global turnover, whichever is higher. PECR has a separate enforcement and penalty regime, so that UK GDPR maximum does not apply to every marketing breach. The CMA can accept undertakings or go to court. This article is general guidance, and individual cases need a qualified adviser.