Harper James advises ambitious UK businesses on the laws of England and Wales, including the practical controls required for lawful email, SMS and telephone marketing. A well-managed consent record gives the organisation evidence of what a person agreed to receive, when they agreed, and how they can change that choice.
For each contact, record the date and time of consent, the source and method of collection, the wording shown at the time, the privacy notice version, the marketing channels selected and any withdrawal or objection. Keep the original evidence, not only the contact’s current preference. Consent must be specific, informed and given through a clear affirmative action. The record should therefore distinguish between newsletters, product updates, partner offers and other purposes rather than treating consent as a single general permission.
The current operational trend is to connect consent management platforms, CRM systems and campaign tools so that a withdrawal reaches every relevant mailing list. A preference centre should make opting out as easy as opting in. Businesses reviewing their processes can use this practical data protection resource to explore related compliance topics, including privacy notices and direct marketing controls.
The Privacy and Electronic Communications Regulations (PECR) govern electronic marketing. The soft opt-in permits marketing to existing customers about similar products or services where the business collected contact details during a sale or negotiation, explained the right to opt out, and provides that right in every message. It does not provide a general route for purchased lists or unrelated promotions. Marketing to corporate subscribers has different PECR rules from marketing to individuals, while sole traders and some partnerships receive the stronger individual protections.
Set an owner for the consent register, define retention and suppression rules, and test the journey from sign-up to unsubscribe. Reconcile the preference centre against the CRM and outbound platforms, review supplier data flows, and sample records before major campaigns. Maintain a suppression list so a deleted contact is not accidentally re-imported and contacted again. When consent wording, campaign purposes or technology changes, assess whether fresh consent is required and preserve the earlier record. Harper James can review these controls as part of wider data protection and commercial advice, with the legal team matching the level of review to the business’s channels, data and risk appetite.