Unsubscribes Under UK PECR: Transactional vs. Marketing Emails

March 12, 2026

Unsubscribes Under UK PECR: Turning Opt-Outs Into Peace of Mind

Email unsubscribe law is not just a boring line in your privacy notice. It is one of the main things people complain about when they feel annoyed or ignored. If your unsubscribe process is clunky or unclear, you are not only breaking UK PECR, you are also hurting trust and email deliverability.

As we head into spring, many online businesses start tidying their lists before the new financial year and planning pre-summer campaigns. This is the perfect time to clean up how you handle unsubscribes. In this guide, we unpack the rules around transactional vs marketing emails, what a lawful unsubscribe looks like, how suppression lists work, and how long you can keep opt-out data under UK GDPR and PECR.

Understanding UK PECR and Email Unsubscribe Law

PECR and UK GDPR sit side by side. PECR controls electronic marketing, such as email and SMS. UK GDPR covers how you collect, store, and use the personal data behind those messages.

Under UK law, direct marketing covers almost any message that promotes your goods, services, image, or aims. That usually includes:

Discount codes and sales emails
Newsletters and blog roundups with promo links
Product launches and event invites
Re-engagement and “we miss you” campaigns

By contrast, a purely service or transactional message is one that is only about something the person has already done or agreed to, such as an order or account change, and does not try to sell anything.

Under PECR, you normally need consent to send email marketing to individuals. You can sometimes rely on the “soft opt-in” if:

The person bought something or got close to buying
You collected their email during that process
You offered a clear opt-out at the time
You only market your own similar products or services

In both consent and soft opt-in situations, you must give people a clear, easy way to unsubscribe. PECR says this should be simple, free (aside from basic connection costs), and available at any time. In practice, UK businesses are expected to stop marketing very quickly, usually within a short period, not weeks later.

Transactional vs Marketing Emails and Where Unsubscribes Apply

It helps to separate two types of emails in your systems and your thinking.

Typical transactional or service emails include:

Order confirmations and receipts
Password reset and login security alerts
Delivery and collection updates
Important service notices, like downtime or legal changes

Pure marketing emails include:

“New in” product roundups
Cross-sell or upsell messages
Abandoned basket nudges
“We have missed you” or loyalty offers

Unsubscribe rules apply to marketing content, not to genuinely necessary service messages. But mixed-content emails are common. If you add a promo banner or “10% off your next order” to an order confirmation, that email will usually count as marketing. In that case you should include an unsubscribe link and treat it like any other marketing email.

A few practical points help avoid trouble:

Keep transactional and marketing templates separate
Use different tags or streams in your email platform
Train your team on what counts as marketing content
Keep service messages free of promos if you do not want to add an unsubscribe link

A simple downtime notice with no sales content does not legally need an unsubscribe link, though it is still smart to make it easy for users to manage their marketing preferences somewhere obvious in their account or in a separate email.

Designing Compliant Unsubscribe Journeys That Actually Work

PECR talks about a “simple means” of refusing further marketing. In everyday terms, that means:

One click where possible, or a very short process
No login required just to unsubscribe
No extra consent boxes or upsells as a barrier
No payment or special steps, just basic internet access

Common options include:

A global unsubscribe from all marketing
A preference page to pick topics or frequency
Channel choices, for example email vs SMS vs push notifications

Each of these can be compliant as long as “stop all marketing” is clear and does not take several confusing steps. You can offer a quick survey on why they left, but it must be genuinely optional and not block the unsubscribe.

Timing matters too. You should:

Honour the unsubscribe as soon as you reasonably can
Stop that person from joining new campaigns by mistake
Log the date, time, and method of the opt-out in your CRM or email tool

Good user experience helps keep you out of trouble. Make the link easy to find on mobile, use clear wording like “Unsubscribe” or “Stop these emails”, and avoid tiny grey text or tricks that make it hard to leave. That kind of design can draw attention from the ICO if complaints build up.

Suppression Lists and How Long You Can Keep Opt-Out Data

A suppression list is simply a list of people you must not send marketing to. Many businesses feel tempted to “respect privacy” by deleting unsubscribed contacts completely. Ironically, that can increase your legal risk, because you then have no way to block that person if their details are imported again.

Under UK GDPR, you can usually rely on legal obligation or legitimate interests as the lawful basis for running suppression lists. You are keeping limited data so you can obey PECR and show that you respect opt-outs. You are not keeping it to keep marketing to them.

Typical suppression list data might include:

Email address or phone number
Which channels they opted out of
Date and time of the unsubscribe
Source of the request, for example footer link or support ticket
Short notes if needed, for example “objected to profiling”

You will often need to share suppression lists with email platforms or marketing agencies so they can avoid sending to those contacts. That is allowed under UK GDPR, but you need clear written terms, such as a data processing agreement, that tell them they must only use the list to prevent marketing, not for their own purposes.

On retention, UK GDPR talks about data minimisation and storage limitation. For marketing lists, that means:

Review active subscribers and refresh consent or soft opt-in where needed
Stop marketing people who have not engaged for a long time, unless you can justify it

For unsubscribed contacts, the rule is different. You usually need to keep them on the suppression list for as long as you might otherwise send marketing to that type of contact. Some sectors can justify permanent suppression because there is always a real risk the data could be added again. Others may choose a long but fixed period, for example enough years to cover dispute or complaint timelines, if they have clear reasons and write them down.

Whatever you decide, you should:

Record your retention policy in internal documents
Reflect it in your privacy notice in simple terms
Configure your CRM or email platform so it follows that policy automatically

Key Takeaways and FAQs on Email Unsubscribe Law

Key points for UK online businesses to remember:

If an email sells or promotes, treat it as marketing and follow PECR
Every marketing email needs a clear, easy unsubscribe
Mixed service and promo content usually counts as marketing
Do not delete opt-outs, keep them safely on a suppression list
Log and honour unsubscribes quickly and consistently
Document how long you keep both subscriber and suppression data

A few common questions come up again and again.

Q1: Do I need an unsubscribe link in every email my business sends?

A1: No. You need an easy unsubscribe in every marketing email. Purely transactional or service emails, such as password resets or important service notices, do not need one. If you mix in any promo content, treat it as marketing and include an unsubscribe link.

Q2: Can I ask people to log in to their account to unsubscribe?

A2: You can offer account preference controls, but forcing login just to unsubscribe is generally not seen as “simple”. It is safer to give a one-click or very short-form unsubscribe that does not require logging in.

Q3: Is it legal to send a “we are sorry to see you go” message after someone unsubscribes?

A3: A single, instant confirmation email is usually fine as a service or security step. Turning that into a mini sales pitch or sending follow-up win-back campaigns after an opt-out is much riskier under PECR.

Q4: Can I still send transactional emails to people who have unsubscribed from marketing?

A4: Yes, you can send emails that are genuinely needed to deliver a product or service they have bought or to meet legal duties. You just need to keep those emails free of promotional content.

Q5: What should I do if my email platform failed to process unsubscribes properly?

A5: Stop the affected campaigns, fix the technical issue, and check your lists and logs. You may need to tell affected subscribers what happened, depending on the impact. Document the problem and your fix, review your processes, and consider whether the risk and harm mean you should report the issue to the ICO.

Getting this right gives you more than legal cover. It improves list quality, keeps your email stats healthier, and builds long-term trust with your audience, whether you are trading locally in the UK or running a wider online brand.

Protect Your Business By Getting Email Compliance Right

Staying on the right side of email unsubscribe law is essential if you want to avoid complaints, fines and reputational damage. At Stay Legal, we help you understand exactly what is required so your marketing is both effective and compliant. If you are unsure whether your current unsubscribe process meets legal standards, now is the time to review and fix it. Let us support you in building email practices that respect your subscribers and protect your business.