Regional terms: United Kingdom

Version 2026-10-05 · Last updated October 5, 2026

In short: UK GDPR and PECR need a clear opt-in for marketing email to individuals (including most sole traders). PECR fines now match UK GDPR levels.

Roles and the DPA

UK GDPR and the Data Protection Act 2018 apply to you and your emails to people in the UK. You are the controller of your contacts' data and PostaraAI is your processor. The Data Processing Addendum and its UK Addendum apply.

Permission for marketing email

Under the Privacy and Electronic Communications Regulations (PECR), you need consent to send electronic marketing to individual subscribers, with a limited "soft opt-in" for your own customers for similar products or services if you gave an easy opt-out at collection and in every message. Sole traders and some partnerships count as individuals; companies and other corporate subscribers can be emailed without consent but you must still identify yourself and offer an opt-out. Consent must be a clear, unbundled opt-in with no pre-ticked boxes.

Since 5 February 2026, under the Data (Use and Access) Act 2025, the maximum fine for PECR breaches rose from £500,000 to £17.5 million or 4% of worldwide turnover, whichever is higher, so keep good consent records.

What PostaraMail does for you

How PostaraMail helps: when you send a campaign you choose the regions to include; strict regions only include contacts with a clear opt-in; every contact stores the consent wording, time, source and country; double opt-in is available; unsubscribes take effect immediately; and you can export a consent record for any contact.

People's rights and complaints

You must handle requests from your contacts under UK GDPR. Recipients may complain to the Information Commissioner's Office. We assist as the DPA says. DeepSeek is off by default for UK customers (see the AI Use Terms).

Consumers and tax

The Service is for business use. Mandatory consumer rights in the UK are not affected. If you give us a valid UK VAT number we apply VAT rules for businesses where the law allows.

General information

This addendum is general information about the main rules for sending email and handling personal data. It is not legal advice and may not be complete. You remain responsible for complying with the law that applies to you and your recipients.

More: Legal centre · Trust and security · What changed · Privacy request