UK GDPR & PECR: Review Request Guide

Check the purpose and recipient

Before sending, assess whether your invitation is direct marketing. A review request is not automatically exempt simply because it follows a purchase.

For messages that are direct marketing

Individual subscribers generally require consent or a valid soft opt-in. This includes sole traders and some partnerships. For commercial soft opt-in, check the sale or negotiation, similar products or services, and opt-out opportunities both at collection and in each message.

Corporate subscribers have different PECR consent rules. Identify the sender, provide an opt-out and respect objections. UK GDPR still applies when you use personal data.

Before launching a campaign

Check your lawful basis, privacy information, supplier processing terms, retention and suppression records. An unsubscribe link alone does not establish compliance.

Read the ICO’s electronic mail guidance and its detailed guidance for current requirements. General information, not legal advice for your circumstances.

Keep the invitation neutral

Give every customer the same public review opportunity. Use our request templates and check your plan’s sending allowances.