Yes, in most cases. Under PECR, UK training providers can send marketing emails to corporate subscribers, such as limited companies and LLPs, without prior consent, as long as they identify themselves and give a clear way to opt out. Sole traders and some partnerships are treated like individuals and generally need consent. UK GDPR still applies to named contacts.
Email is one of the most effective ways for apprenticeship and training providers to reach employers. It's also an area where providers worry about getting it wrong. This guide sets out the main rules in plain English. It isn't legal advice, and for anything specific you should check the ICO's guidance or speak to a professional.
The two sets of rules that matter
PECR (the Privacy and Electronic Communications Regulations) governs electronic marketing such as emails and texts. UK GDPR governs how you handle personal data, which includes a named person's work email address.
PECR: corporate versus individual subscribers
PECR treats recipients differently depending on what kind of subscriber they are.
| Recipient | Treated as | Marketing email without consent? |
|---|---|---|
| Limited companies and LLPs | Corporate subscriber | Generally allowed, with identification and an opt-out |
| Government bodies and other corporate bodies | Corporate subscriber | Generally allowed, with identification and an opt-out |
| Sole traders | Individual subscriber | Generally needs consent (or the soft opt-in) |
| Some partnerships | Individual subscriber | Generally needs consent (or the soft opt-in) |
For corporate subscribers, every email must clearly identify who it's from and include a valid way to opt out. If someone asks you to stop, you must stop.
The soft opt-in applies where someone's details were collected during a sale or negotiation for similar products or services and they were given a chance to opt out. It rarely applies to cold outreach.
UK GDPR: named contacts are personal data
Even when PECR allows the email, a named person's work email (for example jane.smith@company.co.uk) is personal data. In practice that means:
- Have a lawful basis. For B2B outreach this is usually legitimate interests, supported by a documented legitimate interests assessment.
- Be transparent. Tell people where you got their details and how to object, and have a clear privacy notice.
- Keep it relevant. Contact people about things connected to their role, such as apprenticeships for a business owner or training for an L&D manager.
- Honour objections. Suppress anyone who opts out, permanently.
- Use reputable data. Know where your lists come from.
Practical checklist for employer campaigns
- Target limited companies and other corporate bodies by default, and handle sole traders and partnerships separately.
- Identify your organisation clearly in every email.
- Include a simple opt-out in every email and act on it.
- Keep a suppression list and apply it to every campaign.
- Document your legitimate interests assessment.
- Be registered with the ICO if you process personal data.
- Keep emails relevant to the recipient's role.
What about phone calls?
Calls have their own rules. Businesses can register with the Corporate Telephone Preference Service (CTPS), and you shouldn't make unsolicited marketing calls to numbers on it. Screen against TPS and CTPS before calling.
How we handle it
Our apprenticeship campaigns are built with these rules in mind: corporate targeting by default, verified decision makers, clear identification, opt-outs in every email and suppression lists that carry across campaigns. Apex is registered with the ICO.
Frequently asked questions
Can I send cold emails to businesses in the UK?
Generally yes for corporate subscribers such as limited companies and LLPs, provided you identify yourself and include a clear opt-out. Sole traders and some partnerships are treated like individuals and generally need consent.
Does UK GDPR apply to B2B email?
Yes, when you email a named person, because their work email is personal data. Most B2B outreach relies on legitimate interests, supported by a documented assessment and clear privacy information.
Do I need consent to email a sole trader?
Generally yes, under PECR, unless the soft opt-in applies. Sole traders are treated as individual subscribers.
Is this legal advice?
No. This is a plain-English overview. Check the ICO's guidance or take professional advice for your specific situation.
Let's fill your next intake.
Book a free 20-minute strategy call and we'll show you what this could look like for your courses.