Can I Email Other Businesses Without Consent in the UK?

Last updated: 26 August 2026

A mixed prospect list is open, the campaign is ready, and one question remains: can I email businesses without consent in the UK? The answer is yes for a corporate subscriber, but no for an individual subscriber unless consent or every condition of the soft opt-in exists. The word “business” alone does not decide which branch applies ¹.

Quick Answer

Can I email businesses without consent in the UK? Yes, when the recipient is a corporate subscriber, but sender identity, opt-out and suppression duties remain. For sole traders and individual subscribers, obtain consent or prove every soft-opt-in condition. Treat mixed or unknown ordinary partnerships cautiously as individual subscribers ^{1 2 3 4}.

A business list is not one permission category

The first task is to classify the proposed communication, then the subscriber. Current law describes direct marketing as advertising or marketing material directed to particular individuals ^{5 6}. A tailored campaign email promoting a service to selected recipients fits that description; a message does not escape the question merely because it travels to a work address.

Once the message is direct marketing by electronic mail, PECR separates corporate subscribers from individual subscribers. The corporate branch permits a marketing email without prior consent. The individual branch requires consent unless the soft opt-in applies ^{1 3}. One campaign can therefore contain both send and hold records, but it cannot safely use one blanket “B2B” setting.

The subscriber is the person or organisation receiving the communications service, not simply the name before the @ sign. A generic inbox does not automatically create corporate status, and a named mailbox does not automatically create individual-subscriber status. Legal form and, for an ordinary partnership, membership evidence drive the classification ^{1 2}.

Start with two questions for every row: what legal form is receiving the message, and what evidence supports that conclusion? A company number, an LLP designation or the firm's own contractual terms is evidence. A list vendor's unsupported “verified B2B” flag is not.

Classify the subscriber before the address

Use the subscriber table as a routing tool. It states the send branch and the evidence check together, because a conclusion without its supporting record cannot be reproduced later.

Each recipient is classified by legal form and, for an ordinary partnership, the available membership evidence ^1,2. A corporate subscriber can take the no-consent branch, but sender identity, a valid opt-out address and suppression screening still apply ⁴. An individual subscriber or unresolved ordinary partnership stays on hold unless consent or all three soft-opt-in conditions are evidenced ³. The row is sent only when its permission route and continuing controls pass; otherwise it is held.

PECR's definition of “individual” includes a living individual and an unincorporated body of such individuals. Its definition of “corporate subscriber” expressly includes a Scottish partnership and reaches a body corporate or other legal person distinct from its members ². The Information Commissioner's Office (ICO) therefore distinguishes sole traders and some partnerships from companies, Scottish partnerships, LLPs and government bodies in its electronic-mail guidance ¹.

The table does not manufacture a classification for mixed-membership ordinary partnerships. The quoted definitions do not expressly place that form in either category. The cautious individual branch is an operating default for an unresolved case, not a new statutory label ².

Companies, LLPs and Scottish partnerships take the corporate branch

A limited company, LLP or Scottish partnership may receive a marketing email without prior consent because it falls on the corporate-subscriber branch ^{1 2}. That is the useful “yes” branch for B2B email marketing in the UK, but it is narrower than the slogan “you can email businesses”.

The evidence check is short. Confirm the legal form from the recipient's own identity or appropriate register evidence, retain the result with the campaign row, and screen the address against the current suppression list. An LLP suffix is relevant; a trading style that merely sounds established is not. A Scottish partnership is expressly named in the corporate-subscriber definition, so it does not follow the ordinary-partnership analysis used elsewhere in the UK ².

Corporate permission removes the need for consent under the individual-subscriber rule. It does not permit concealed sender identity or the absence of a valid opt-out address ⁴. It also does not erase an earlier objection, and the ICO recommends maintaining a do-not-email list and screening new marketing lists against it ¹.

Ordinary partnerships require a membership check

An ordinary partnership in England, Wales or Northern Ireland cannot be classified from the word “partnership” alone. If it is an unincorporated body made only of living individuals, it falls within the PECR definition of an individual and therefore needs consent or a qualifying soft opt-in ^{2 3}.

Membership changes the analysis. An ordinary partnership with a corporate partner is not an unincorporated body of living individuals, yet the quoted corporate-subscriber definition does not expressly capture it either ². The honest conclusion is a statutory gap on the supplied definitions. It would be inaccurate to call that partnership corporate, and equally inaccurate to claim PECR expressly calls it individual.

For campaign operations, take the cautious individual branch. If that choice is wrong, the cost is an email that could lawfully have been sent later. If the opposite choice is wrong, an unlawful marketing email has already been sent. Current PECR enforcement mechanisms and penalties align with the UK GDPR in most cases, and the stated maximum is £17.5 million or 4% of global turnover ^{5 6}. The unequal consequences make holding the cheaper error.

The evidence normally sits in the firm's own documents. Check its letterhead, contract or terms for the partners' identities. Use register and name evidence to distinguish an LLP or Scottish partnership first. An ordinary partnership has no single register of members supplied by the governing materials; when its composition cannot be established from the firm's records, record “membership unknown” and remain on hold.

That hold is not permanent by definition. A reply establishing that all partners are living individuals confirms the individual branch; evidence of a corporate member confirms that the definitions leave the position unresolved. In either case, consent or a properly evidenced soft opt-in provides the cautious route to a send decision.

Sole traders stay on the individual branch

A sole trader remains an individual subscriber even when the address uses a business domain, a shop name or a role such as orders@. The ICO states that sole traders may be emailed or texted only with specific consent, or when they bought a similar product in the past and did not opt out when given the opportunity ¹.

The evidence check therefore concerns permission, not the professionalism of the address. Record the consent evidence, or test the sale and every soft-opt-in condition. If neither can be shown, hold the row. A purchased description such as “owner”, “founder” or “business contact” does not change the subscriber type and does not supply permission.

This branch is substantial because many mixed lists contain people who trade under a name that resembles a company. The absence of Ltd is a signal to investigate, not proof by itself; the required outcome is a supported classification and a supported permission route.

The soft opt-in is three conditions, not an old-customer label

The PECR soft opt-in is available only when every element of the exception is satisfied. It applies to details obtained during a sale or negotiations for a sale, marketing of similar products or services, and a simple free means of refusing at collection and in every subsequent message ³. Missing one element means the exception is unavailable.

Consider an old customer who bought one service and was offered a free, simple refusal when the address was collected. A later message about a genuinely similar service can take the soft-opt-in branch if every later email also offers the refusal ³. The decision record should name the earlier transaction, explain similarity in plain words and point to both opt-out opportunities.

Now consider a purchased prospect list. The supplier says every record is “B2B verified”, but the sender did not obtain those details during its own sale or negotiations with the recipient. The label cannot create a PECR soft opt-in, and it does not establish similarity or the collection-stage refusal. Hold individual-subscriber rows unless valid consent evidence accompanies them ³.

Similarity needs an intelligible reason, not a checkbox. Record what the person considered or bought and what the new message promotes. If that comparison cannot be written clearly, do not treat the condition as proved. The exception is a three-part test, not a general licence to reuse any old customer address.

Corporate permission removes consent, not sender duties

Every marketing email needs an identifiable sender and a valid address for opt-out requests. Regulation 23 applies to “a person” transmitting or instigating direct marketing: it prohibits disguised or concealed sender identity and requires a valid opt-out address ⁴. Those duties therefore remain on the corporate branch.

An objection also changes future action. The ICO recommends keeping a do-not-email or do-not-text list of businesses that object or opt out, then screening new marketing lists against it ¹. Deleting the address from one campaign is insufficient if it can reappear in the next import. A suppression record preserves the minimum information needed to prevent that repeat.

The operational sequence is simple: identify the sender in the message, provide a working refusal route, collect responses, update suppression promptly and screen before every send. Apply it to corporate and individual branches alike. Consent is one permission question; identity, opt-out and suppression are continuing controls ^{1 4}.

A bounce is not a permission test. Current wording extends “communication” to material sent but not received and includes an intended recipient, so a failed delivery does not turn an unsupported send into a harmless experiment ^{5 6}. Classify and evidence the row before transmission.

A named employee address creates a second question

A named work address does not, by itself, turn a limited company into an individual subscriber. The company remains on the corporate branch. However, the ICO warns that data-protection implications may also arise when employees at a corporate body are emailed ¹.

Keep the two assessments separate. The PECR column asks whether the subscriber is corporate or individual and whether consent or the soft opt-in is needed. For a named employee address, a second column records that data-protection implications require consideration ¹. Neither the presence nor absence of a person's name changes the subscriber's legal form, so the classification evidence must still identify the company, partnership, LLP or sole trader behind the mailbox ².

This distinction prevents two common errors. “It is personal data, so consent is always required” collapses data protection into PECR. “It is a company, so no other duty exists” makes the opposite mistake. Corporate permission answers only the prior-consent branch; it does not answer every question raised by a named employee record ^{1 4}.

Turn the campaign into a reproducible send record

A send decision should be understandable to someone who did not build the list. One row should show where the address came from, which subscriber branch applies, what evidence supports it, which permission route is relied on and whether suppression was checked.

The examples show why suppression and permission are separate. Glen & Co is corporate, but an objection makes the row unsendable. Field & Moss has no recorded objection, yet the absence of consent or a soft opt-in still requires a hold. Park Trading remains unresolved by the definitions, but a fully evidenced soft opt-in supplies the cautious send route ^{1 2 3}.

Use the following short send/hold checklist before releasing the campaign:

• Scope: Is the email advertising or marketing directed to selected recipients ^{5 6}?
• Subscriber: Is the recipient corporate, individual, or an unresolved ordinary partnership ^{1 2}?
• Permission: For the individual or cautious branch, is consent or every soft-opt-in condition evidenced ³?
• Message: Is the sender's identity clear and is a valid opt-out address present ⁴?
• Suppression: Has the current campaign been screened against every recorded objection ?
• Employee data: Does a named work address require a separate lawful-basis assessment ?

Recheck classification when evidence changes. A new list import, altered partnership terms or a fresh objection can change the recorded outcome. The campaign record should carry the date of the evidence and suppression check so an old conclusion is not mistaken for a current one.

Unknown stays unsent until the record supports a route

An unknown ordinary partnership should stay unsent until the record supports consent, every soft-opt-in condition or a different evidenced classification. “Unknown” is the conclusion after checking the available firm documents; it is not permission to guess. The cautious default reflects the asymmetric cost of the two possible errors and the current level of PECR enforcement exposure ^{2 5 6}.

No software purchase is necessary to apply this method. A simple evidence and suppression register can contain: address source, legal form, membership evidence, classification branch, consent or soft-opt-in evidence, sender/opt-out check, objection status, last review date and send/hold outcome. The register earns its place when another person can repeat the classification, see why the row was sent or held, and prevent an objecting business from returning in a later import ¹.

The final decision is explicit. Send a corporate-subscriber row only after identity, opt-out and suppression checks. Send an individual or cautious-branch row only with consent or all three soft-opt-in conditions. Hold every row whose form, permission or suppression result cannot be evidenced ^{1 2 3 4}. That is enough to screen a mixed list tonight and explain the decision tomorrow.