UK estate agents who send marketing emails must comply with two laws at once: UK GDPR, which governs how you use personal data, and the Privacy and Electronic Communications Regulations 2003 (PECR), which governs the marketing messages themselves. In short, you generally need consent to email an individual for marketing, unless the "soft opt-in" applies, and every message must identify you and make opting out easy.
What is the difference between UK GDPR and PECR?
UK GDPR needs a lawful basis for processing personal data, such as consent or legitimate interests. PECR adds specific rules for electronic marketing, such as email and text, and those rules apply on top. If PECR requires consent for a message, you can't replace it with legitimate interests under UK GDPR.
Which emails count as marketing?
Marketing means any communication that promotes your services, or someone else's. A newsletter promoting your valuation service is marketing. A property alert an applicant has asked for is generally a service message, but adding offers for a mortgage partner to that alert turns part of it into marketing. Mixed emails are judged by their purpose, so keep the two separate.
When do you need consent, and when does the soft opt-in apply?
| Situation | Usual position | Notes |
|---|---|---|
| New buyer or tenant registers for property alerts | Service message for the alerts; consent needed for marketing | Ask for marketing consent separately and don't pre-tick the box |
| Past vendor or landlord, you market similar services | Soft opt-in may apply | See the three conditions below |
| Mailing list bought from a third party | Consent from the individual to you is needed | Generic third-party consent usually isn't enough; avoid buying lists |
| Landlord who is a limited company | Corporate subscribers can generally be emailed | Still identify yourself, give an opt-out and respect objections |
| Landlord who is a sole trader or in a partnership | Treated as an individual subscriber in most cases | Consent or soft opt-in rules apply |
| Referral partner offers (mortgage, insurance, removals) | Consent needed for the third party's marketing | Name the partner and get a specific consent |
What are the soft opt-in conditions?
The soft opt-in lets you email an existing customer without fresh consent only if all three conditions are met:
- You obtained their contact details during a sale or negotiation for a sale of your own product or service.
- You are marketing your own similar products or services.
- You gave them a clear chance to opt out when you collected their details, and you offer an opt-out in every message.
If any condition fails, you need consent. The Data (Use and Access) Act 2025 added a separate soft opt-in for charities. It does not change the position for estate agents.
What must every marketing email contain?
- Your identity, so the recipient knows who is sending it
- A valid address or simple link to opt out, free of charge
- No disguised sender and no misleading subject line
- A link to your privacy notice explaining how you use their data
Honour opt-outs promptly, and add the address to a suppression list so it isn't re-added by an import.
What records should you keep?
Under UK GDPR, you must be able to show that someone consented. Record who consented, when, how, what they were told and the wording of the consent request. Keep a suppression list for people who have opted out. See our guide to letting agency record keeping for how long to keep each type of record.
What are the risks of getting it wrong?
The Information Commissioner's Office can issue fines and enforcement notices for unlawful marketing. The Data (Use and Access) Act 2025 aligns the maximum PECR penalties with the much higher UK GDPR levels, so check the ICO's current guidance on the figures and when each change took effect. Beyond fines, complaints to the ICO and unsubscribes damage a brand that depends on landlord and vendor trust. Our wider guide to data protection for estate agents covers the other UK GDPR duties.
Estate agent email marketing compliance checklist
- ☐ Marketing consent collected separately from the terms of service, with no pre-ticked boxes
- ☐ Consent records show who, when, how and the wording used
- ☐ Soft opt-in used only when all three conditions are met
- ☐ Sole traders and partnerships treated as individuals
- ☐ No bought lists without verified, specific consent
- ☐ Every email identifies you and includes a working opt-out
- ☐ Opt-outs honoured quickly and kept on a suppression list
- ☐ Property alerts and marketing sent separately
- ☐ Privacy notice linked and up to date
This article is for general information only and is not legal advice. PECR and UK GDPR requirements depend on the facts of each case, and the Data (Use and Access) Act 2025 is being commenced in stages. Check the ICO's current guidance before relying on this article. Last reviewed 11 November 2026.